last executing test programs: 19.968235989s ago: executing program 3 (id=157): io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) (rerun: 64) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000101}]) 11.132140896s ago: executing program 3 (id=174): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x1000}]}) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) userfaultfd(0x801) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r5 = fsmount(r4, 0x0, 0x86) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) 8.138501809s ago: executing program 1 (id=181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000008100000002000000"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x20}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xef1, &(0x7f00000003c0)={0x0, 0x26c3, 0x20, 0x3, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, 0x0, 0xb) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x200000c1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x12140) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x0, 0x2}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000000300)=""/196) 7.963999456s ago: executing program 4 (id=183): syz_init_net_socket$ax25(0x3, 0x5, 0xca) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1000000003, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.advise\x00') r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) rt_sigqueueinfo(r2, 0x35, &(0x7f0000000140)={0x2b, 0xffffff37, 0x2}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x5, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xd000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xdddd0000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x0, [0xb, 0x8000002, 0x7, 0x1be]}) syz_io_uring_setup(0x4000239, &(0x7f0000000080)={0x0, 0xbeea, 0x10100, 0x0, 0x284}, 0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ext4_sync_file_enter\x00', r7}, 0x15) 7.817472392s ago: executing program 3 (id=184): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x288, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 7.56258823s ago: executing program 3 (id=185): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x0, 0xfe4, 0x5b38, 0x8000, 0x38, "b6d8c44b5b8c0bc75db35c3858229361bd7a6a", 0xd, 0x5}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x767974b3f79ca291}}], 0x4000359, 0x0, 0x0) 6.637623924s ago: executing program 1 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x0, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) 6.576034615s ago: executing program 2 (id=187): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110) r6 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = dup(r7) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r11 = syz_open_pts(r10, 0x141601) fcntl$setstatus(r11, 0x4, 0x102800) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r11, 0x5423, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.444122364s ago: executing program 4 (id=188): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) 6.253403708s ago: executing program 2 (id=189): r0 = socket$inet6(0xa, 0x3, 0x7) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xcc, 0x2, {{0x2}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0xf}}, @NETEM_LOSS_GI={0x7, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0x63, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORR={0x10, 0x1, {0x4, 0xfffffffe, 0x46}}]}}}]}, 0xfc}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x25, 0x16, @void}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) 5.601217946s ago: executing program 0 (id=191): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xf0}], 0x600, 0x0, 0x0) 5.415876592s ago: executing program 1 (id=192): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000290000000b0000000018000000000000002900000004000000020000000000000000000000800000"], 0x30}}], 0x1, 0x68034) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000670000000000000095ae000000000000f40fe6ff552b6657d7a19d8e773765a651c1c09f43e38dda6334c9fdda0e1cd1db4e84e5b6f12a13148aa5e8e332ba9b14d7835110607f815214231b9c03f0e5bdcf3d490baff657aac5b5fa188107d99a7b333b16574ee43c6826f25aca7b2f786aaa5f7b9908e17fd62a4849f44caf0e09e84f96f2b3c48877f61f4fe1fce88701c26a7ab04ddf4588d0e5f6711370cae80ba4264e26f705557dd4f4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000670000000000000095ae000000000000f40fe6ff552b6657d7a19d8e773765a651c1c09f43e38dda6334c9fdda0e1cd1db4e84e5b6f12a13148aa5e8e332ba9b14d7835110607f815214231b9c03f0e5bdcf3d490baff657aac5b5fa188107d99a7b333b16574ee43c6826f25aca7b2f786aaa5f7b9908e17fd62a4849f44caf0e09e84f96f2b3c48877f61f4fe1fce88701c26a7ab04ddf4588d0e5f6711370cae80ba4264e26f705557dd4f4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000980)}, 0xd1) (async) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000980)}, 0xd1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x25, 0x5, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x25, 0x5, 0x72}, 0x2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getpid() sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) (async) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 3.686896232s ago: executing program 2 (id=193): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtaction={0x124, 0x1c, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x1300}, [{0x110, 0x1, [@m_ife={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xea2, 0xda80, 0x20000000, 0x7, 0xbb2}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @random="ca7ace969b07"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0x73, 0x6, "5e0120dde07d0a0eee9bed02879318d674348738e3e2d46db4013d556327b2e74a48ecf6e0d59da9a6e7316e4e5eae3410cdfd22ef9a567a1bb153eb8b79c76bf92c5caabad4126d5cc4293daade9a0a4414aaf246cd8c45b92716a0df4af4d33a16a1ba5a29064c408d2b54d5c94a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x30, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.423888225s ago: executing program 2 (id=194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000008100000002000000"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x20}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xef1, &(0x7f00000003c0)={0x0, 0x26c3, 0x20, 0x3, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, 0x0, 0xb) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x200000c1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x12140) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x0, 0x2}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000000300)=""/196) 3.153255742s ago: executing program 0 (id=195): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = userfaultfd(0x80801) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) cachestat(r1, &(0x7f00000001c0)={0x0, 0x2121}, 0x0, 0xee) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r11 = dup2(r5, r4) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r3, r11, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001180)=[@text16={0x10, &(0x7f0000000100)="3e0f01c466b8010000000f01c1360fc79b000067f3a5d8cf0f22a50f38ca32640f21d2d1e50fc71c", 0x28}], 0x1, 0x6, &(0x7f00000011c0)=[@cr0={0x0, 0x80040000}], 0x1) r12 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg(r12, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001cc0)="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", 0x341}, {&(0x7f0000000140)="1dc844a118b1fa3b66058addbd15ac0f2dcd95b0e170521dd3fb2394e41f89b3a2d2b897b8544f0ec11812e6bfbac77be26ffe48cd3be07b73507c8903fc6afcb71dc1b375a9a40f7c2958d6d261cf3b5f57ab0f74ca1248353c374a1626b2e8c3350d833490d5e83ec57bcea73322551bda844e29c5506af87a4063a9c200ad0f36155ef899b24b7855bb2186245936bdc136a1064c5543931c2ac37419a81899f3c6a0170208993df60bdb49842bf20a61a8cfc309e70b628d0d53de118d671707732bd95ec076cd9973431b2062c6ebccdada3dd35f5456193d2acfe3d84e05f165b1d0d0db74eeeaf324cc676e94107c134a73e27ff24da14dead39e05dd40a514b115aebcad78795b6bd44cf689eff8ee2469021efb82c349a9ee8a7061b398806798a3b29404c35d3569f9d07c1ea9e44aa46324e9343e0f5a271b1e63858fd41f04f8670999e4d9b214ec844f2f99a2b714d507b99c4eabed02ac7cda6a14acc802428ab82a15e54868b65e0476eded245f3b5ffaa771e0f067c91a06230b8aa50d69038287a209f3c74a42240f5776fcdb0e4f2d7c6ade0002a9332ba1dce5113cbac767ba4a41478e6cd9b03d22d30da6c011d06b48fae915e64c17abdd5796a7ab6e77df08be7a2ee216cf24d41c42d78d092d2680216d964efa69cab3d49b9536d0f699344c2ab684431d90f1b3e2a0101bb3c269659d4705694f30906c5a39ce74119fd9221d277f61d784679277f1df74825581789dc7569aef24b4835abeabc89849001d29cc0f2c1afc9805f338cd17bafc778661871e9a163ba1d6a486fa84bf0992735c9726e02b9c6d2e291d047802de6dc92b0defd1a118733bba690e116ebe262b6902afbba9a8ffc48d3854605eb44eaaca67f26901d72f84a678ae492113ba579fab2e45fc75225358e0ede476d2042b0def3246fa41d00beba6801ecc56d540b162d1e492824deb5adc4f02fca3f295576e41549de54ba5089e7ca85096e617a21c373b68f1302b815bf71567f11f6b683c2f902505393215db8ad98183e1a2a892ef84b72b0055dae8eb7a6412c4f7c0445f9ddc105692cbe4a9aa59a9cd44af2272f874b0d85f306421d9d79eac2d012fb4e678def7936cd5b156421bc9c593be291c85bcfe8fc12e1d001eb1862aec0da55e310c614ad5c3134105a4f09b52c9f5b2aa934eec498606ecd261577d46fa9d0421d1b11e44d7d9b2f17c39d89e770379c19a0798a5bc880a933108d01af473106e4228665c30eae96521128313c3386e88aabb7928099c987e5f22147fbbc992cb8b4942585048f77d5bacb63ff974827594e48820c0ad39bb1b02c3435ddeab4fa62e15ee9d66082d12893afe0ecd45cb8ad36f0543fd7650c177d77e6b373e5f747cd539ea5f799c09fb1233b37f539f7d7b360e242bb755ec61e2a452c61b269311129295af5234af540c862d1d0fdbffe364398bf57a15a1a4b75a956e8aa451086f07dbd298b9df5d265be445840b4dfb396bfadedf7cc33d365be1b893e639909925f8fe139a53fdb1e17151c2ee22bf43ebe6dfc7036f0a8de3583344e23bffa92517fb178bab8475a4c55c748888642810244c5c0772f4d79ff412f39d751e615651852053944f319c2a208e0c07471c9f2948a5e6dda7730a325d4faa29815f00228e5ca111d27faca59cf42f39ba735f5cc94ad5eb24d7c42fcb169ae9cf9ef12ed21bf8e1476bc5f21888534f6bbc4e43fec4bc7bbc53a2f077ce1cfa0e7ae8b48d1e8a0a191782adb133b382c7d4b627cfd54ca134090265fa7a95708867dc8e43f70d2b2c13447536589d737f6beee198abf62744ac7bc782baf526a4ec02b5334511fcb846d492d0d77cd47d8acbfef0398ad84ac6638a756b8945801015f5d360625d65e5c94b666fbee78e6b81107263265e4bbef5400e2dd245b58a2794913870d1b3b9b05651a7f5bb9b2f0d46f1d2b638d985a459acd5537f1bd0fdc27a8f77d0388795c91098b09c04e08f7451a4d2dabe3c3e4188519b6d511ddfb36b4e49d678fa3d00e408e2f916cae6060f60bdf98e187a49aabdc6e058ff4b380ebac60ec4c34fc7a88cb1a182755b7a39664d00b1615f390387ca7cb6c8ed382c63e6ceffd017da5fff79d8743783854c0b7eac1f99d34b3f7dbffdc42025fe1e4d30f957740277e7700e79f8a8288ac7fe120fee7070232186ffcc896d0855e9c5bd7f6142ba480d4d44c896aa2f002c830788d337b20bd0304bf8aab6752a788d4385eb7d79e3de15e8057b8e3541ac284cc44009378f668d03cff921013163a7127a6ad1eb1350e92db6a9ee161d0fa6d914890e4f1fe0f5f9fe2ba20bdfdfaab1145f3469eaddb7234eb986cadca2f652b40794694e5cf7d2403629d88e88ebf7d08ba0ad8f0477745bb13d04bf7a6fbd54645c537145c743e2a23be2e21e9b0c426e32ded6be32462a0868239794162dbbe564b762bb4502cf03d9c6e19a8cfa9d314e8b80c8108f129855f135de12408e420a0275290929fa38755a12e1ee1c512ccb3f6f406eb67a70237dee48f33855d01ca3ce8d8159de18ead7faa5c0e0597bb36389ab74d56a88d7b0061aa6417ad303333117294853437f5ebc1fb68e219f56e4633f83b213cd60dd4400c52f788eeee3735e7385716c571d7838ba5479d8847f6ee80400823ae80299dc5ace5727e5996dce4610d1a2aca3496320a2925a5da020f65cc97788f6a0fc196983fcdbc2bfdf5567fca35fcf7c9d3c0554b79ad0dfd0be1adf61acb73a4af2ae49428e81e1bbbdd6bc29e6d8d195f7eb41710d14b2a4183a82de12af81d4b4d5d4e5c7138b8aac11b262fb062b9e260ce665427b2dc8fa6be206b0934d17856d67b9d96f9014d1637ee13078095d8427e9b9897f0be77d0c023fc51f7c6a739fe7aa6aa614e92d064f0f79bc5c8ca80f02fc1820e44c5b3e23dc5474641060f3c092bbdaed671075f18b327610dd690174404aeade93319101bd8ac704abc89d63adba72a224e1ff817633f35efc9131be86ec9165cae46dec7d1994e1e5774bc942e948a7a0f4e7d089f0423eec5f9ad92f9ae12ea6bb120fa67cd1accfcd6ba976c90d6971504155732dfd21198a5cef6f7955a69df43e6c7832941028c688ca94c1d160465dc1e9d982ade99ef10529b414799431a5ea8d6617fcf6e13cd000ca7f5d3392991239ae811d8f607f66ea331a31fd6942cf5f6be9c5e2cd9579c1edf9acc98ac0ccac18308821d6027d3df25986fe948c45bf2f1e343784cc427c4d15dcf150afc1eea57aa8019a0580e156dd487cd21b743158789d54f1a2d5cae860d0829f915d0e26b51a55fe9d5b91f1e0465bb5779f8889e124abeef0aa8fb74b4d5f089c5b8c3a32e5d9e699e4ee8f78f9e2e2939879f29ab1e1a7f0c9868fa39060f34c3d4c0568f18e87a557a545f64cd25315ca525960a0485893a014ad33ce1345cf04665225da8ecb865c8c49ccae71a9f5035423d30b4222dfb9d47e5e5cc9041079afd9d04f0d49e21a02a2194040484a5d4424c18547c5f8c05c5199ade76277b5bc2f12bb465902de635b28207d29ef6389c1a42219a9c90362c5f5d91053d03f73be3b65631ed3ea305cbdd97d87a59f2d58d06ad314854cbfcb733a42bc6b496fa508efca2e700db38a61c781098b31a00054fc7cb570d965a96969d229e4cdd72c5ea33b7bfe883b0d648e987c0a7363beb90332da6b04146a61715b2c19f680b802eb823016d96418375635dd149f9a5159ae4f4d85818f58358de30fe9e2a7f3aef73e89b6f2c69faf87dcbb316f1aa079cc02ef7b65e96020e3b3e3c8065685cf707eb25907e15f97126144d6d1c1f1192a855668ea0947bb6ed252a9767988163208d3539e40c10fc427ad71fdf7c96db2358495ac5debebc1e0342f1be73466ff72a660d1eff732c853a375875c3801be8a14c4ab552c689191ce6b45d7b7bfc63ba405b972dc1a9c7604913db7a5534c8e2aa79d7ff12d1e1fda498f78af06b909c519ae00d445086ce7a6f8af86a1ffd106ff70d833e7955a1a1cc4e0211ee45dfb1b5a0d7fda67d215f84339c0f24171d1f4bf7635ba2e195949b78c9447dbd93457a9f76df06006e772d8269fed39704f72922779f528a6e49e024415f95a4855cd67d86da1b260fe841b3a1f9102e8e05f81db276f32266e184095d0bacecba04a0c57caa67b992b83519038aa7b5f6e5de8bf2cacf71afe9f620bf3d6f2101f3b577982409e5165ea2368143af7d9f89dda2ee3516fb774ebbe025fbbfc3adadc3af15338bd14f5ff827548d5af580547757f23c5450d23a7dbd98212908a117051f422dad93b86d1c068aac301e81b5dda37d139e3a1877e411688f560967145aa4098316e666a388db33a344e7f018576009a812d6ae49c6228c241e859d3e562cc005364bf4a7ea5858443378d27fe7e1f0359ebbaa3546c027526566045bb241b340e37b6bef8760f5cff1aef5e8117746ba8331c7131e17e2e8fb768e05d261c8941763231163f0399127610b92f331041d674dc44cc5b4799c3cd7ee6699a8f3fb608ae31e27bff4fd3eda837a55f76b93c02a7b321040a92232cac7548c101f682e2d52e9d3ab465a1254095a1cbb0af0f23ad3b489216160b788190eb6379dd6a2e2be9e4055e7c2bbdecb640c59a1236eca0ddfb550745b95362b10d28d41736268ae4f468ccf2ac98e6f3fb7a98b091ad2ce4fc4b487fdccbd43cb99d9b479561901385750a843a2ae52b1da2952b5a11a3968620c21a3aa7f5dfd3756e3262d4d0df6bf99a2a80ccfc1d7f3a8f3592e4332a8f555c454b7fdb92e0715a399fd0f04ce00b1155c1b48008e23a1649522e12ff4d7126161508df080d82ebba73141ac26ae068202e60be68513559031e9c914ef5f660217d6f712c133cb2eba9a989d587051b39da359e72a6dfcf4a6dcf61f8e86e10462aad2200e09ccd671942ea1a8c47a3f7cc947b1e076f3bf71e28c67431e250aebfea7b0dfd793851626f22315682b2a719f459e112c68be910919c432a79d5194af65d37c29890418dd017232e8c8db1c118c2bf9acc54810e50252947005ba3e5bcb8214a75fdd94ee2121607645f8377b6c37216e780edb74dd57bd188d5c5817505c1650ff5cee86e07a218fb6897c992ac3c555298337770f877bb447badba0ade6d6f745d6a0ecd6a04eaf8001f46349a396d1743941d40576e8df69307b65725c6b222d347b8b8984a8d01ac5b659409647f0d1c6de7ddf8b72593a2aa088734a3cb1e36ac68dde60ff37b7ba4590b9670aa323f0cd7644cdd418a7b428f3a7a5997c213de82238d5a6ef8ca0f61190ca3175508759a36b41bfb0a7632af3575d84423f87d6e505adcb3357c6224d0a3aa400dbb0fc53eb3ef8c9d1c757497dac27ca10641f1bec27fbf29c9a906f32e02963951cc4334843927391fb1de6d8d0a819cc2d763e47fc264fc65fcc925525aedfa250cfdfc1d5ba91e7b6bfbf946aed690c5ea1ce237b9802f0401836d2b4587ff212cba894c03f8204121eb2c44b9652a69ce5a0155ecdf88372846a1fedae80724ee173ab2664f3378dceb1b7054d6085ed9f5ad53dce4987bce319c834369484e2d595b4f1f6a4f1be6025a74dcd9ed407f41b8bd63b0c0be237705a5b3de5a53c8909b08756450c1c624359e76e2056cdedcc7b02de953e03cf610425d94ad0c650c9423dbcb950fe01740221a2503107b89b5f91ffc642aa4926d9dc60e9e271619009e4fd21456"}], 0x1, 0x0, 0xfffffffffffffcbb}}], 0x2, 0x4048c94) 3.127142314s ago: executing program 4 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x1, 0x8) socket(0x29, 0x3, 0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) 2.746565183s ago: executing program 4 (id=197): r0 = socket$inet6(0xa, 0x6, 0x7c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x3, 0xffffffffffffffb7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400889c}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x358, 0x2e8, 0x2e8, 0x358, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private=0x4}, [0x0, 0xff000000, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x3c}, 0x0, 0x190, 0x1c0, 0x0, {}, [@inet=@rpfilter={{}, {0x1}}, @common=@rt={{}, {0x400, [0x36c, 0x9], 0x200, 0x1, 0x1, [@dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @local, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}], 0xb}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0x8, 0x1}}, @common=@mh={{0x28}, {'\x00', 0x1}}]}, @common=@inet=@SET1={0x0, 'SET\x00', 0x1, {{0x2004, 0x4, 0x7}, {0x4, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1cb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_DST={0x8}]}, 0x24}}, 0x20000050) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000080000000100000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000380)={{r9}, &(0x7f0000000300), 0x0}, 0x20) 2.745769087s ago: executing program 3 (id=198): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'pim6reg1\x00'}}, 0x1e) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap(&(0x7f00003f8000/0x4000)=nil, 0x4000, 0x200000b, 0xc3072, r0, 0x200000) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) getgroups(0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x48000, 0x0) 1.928701368s ago: executing program 0 (id=199): r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.metacopy\x00') setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x6c, 0x8001, 0x0, 0x9, 0x8000000000000011, 0x6, 0xfa10, 0x1}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') close(0xffffffffffffffff) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x10bc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100f1ff0000000000000500000a28000000000a030000000000000000000a20000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900603976335da2f759000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400b008815a010000000000000000000500000a500000000978d96f0a01040013f400000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000000011400000011000100000000000000000001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000140), 0x80000001, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000180)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x36, @local, 0x400}, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}]}, &(0x7f0000000380)=0x10) (async) socket$netlink(0x10, 0x3, 0x4) 1.918309534s ago: executing program 2 (id=200): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={0xffffffffffffffff, 0x81, {0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x20, 0x6bc14f62ff34c440, "5c6b6b1cfa276ba8135506b8a5e8d75b94e3b4df18693915ce9a14b70ff7213344e219ce091c84d41fa8a22abfab61242c522b72f92310eb8280c2948b82c51a", "d5b7132a8e614247804f2dda2ae38fd2428e46b262415a3cacf5e280da20d2ad78abf403170cd59450a46f4ffb400704e7a74f8aafe4c5dbdbb733818dff9ee3", "e388aa2d3691d8e6f3098851c26c32a0a194a949f7ac76f3c19e9ec63ef4ca57", [0x4d, 0xf]}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x9, 0x6, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8, 0x1, 0x6, 0x3}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, r0, 0x4, 0x5, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x20, &(0x7f0000000180)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbea1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x332f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @generic={0x9, 0x5, 0x6, 0x9, 0xfffffffa}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000280)='syzkaller\x00', 0xad32, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x58, '\x00', r1, @xdp=0x25, r0, 0x8, &(0x7f00000003c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xb, 0x8, 0xc1}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000000800)=[r0, r0, r0, r3], &(0x7f0000000840)=[{0x2, 0x5, 0xe, 0x8}, {0x4, 0x2, 0x2, 0xa}, {0xfff, 0xffffff05, 0x2}, {0x2, 0x1, 0x7, 0x4}, {0x2, 0x5, 0xf, 0xb}], 0x10, 0x6}, 0x94) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r5, 0xe03187a0fea21237, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004910}, 0x800) bind$inet6(r0, &(0x7f0000000c00)={0xa, 0x4e20, 0xff, @loopback, 0x9}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x2, '\x00', r1, r0, 0x4, 0x5, 0x2}, 0x50) r6 = socket(0x25, 0x800, 0x401) connect$rds(r6, &(0x7f0000000cc0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000d00)=0x200) ftruncate(r4, 0x3) ioctl$TCSBRK(r0, 0x5409, 0x10001) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2, 0x4010, r0, 0x83000000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r3) r8 = getpgrp(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000dc0)={0x0, 0x0}) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000e40), 0x787c2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xf0, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000001000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001040)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r10, &(0x7f0000001740)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001700)={&(0x7f0000001100)={0x5c8, r5, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_PEER_MEASUREMENTS={0x4f8, 0x111, 0x0, 0x1, {0x4f4, 0x5, 0x0, 0x1, [{0x298, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x264, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xece}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x90}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xeb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x217}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x90}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x315}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfeff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xac, 0x111, 0x0, 0x1, {0xa8, 0x5, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001840)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001780)="0acd27478470a64d20e2852a3d79d8ec13a34f4dbd0c161f5c7249b6b3c7ed2d9cbcedf38f90acdead070513273c382781b2ea410c51c06d8e170e8f62e9e7a5dc90f8368f9f3e4f4c423e1793f29750e974f6054958e239b5ec69240411e32bc1fc9ac22a6713ee812b3d54fcf36856302c36f3f115ee5411eccd3ab7f0d051200d0d7a72039c9b95f8211164d698ba73b1af66c10d17cb3544abddc2110ffd4e51a1f15955d5016184c9f9ab3c7473", 0xb0, r0}, 0x68) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, r12, 0x2) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f00000018c0)) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001900)) 1.342310304s ago: executing program 2 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r4, 0x3, &(0x7f0000000240)=0x7) r5 = getpid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000108, 0x0, 0x149}]}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r10, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r11, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r11, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x160f}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.237846275s ago: executing program 4 (id=202): socket$kcm(0x10, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000180)={0x9f69, 0x9, 0x7fffffff, 0x3, 0x8, 0x9}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd4(r2, &(0x7f0000000280)={[0x5]}, 0x8, 0x80800) io_uring_setup(0x65d6, &(0x7f0000000040)={0x0, 0x832e, 0xc000, 0x7, 0x20002f3, 0x0, r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 1.202089506s ago: executing program 0 (id=203): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0xf0, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc0, 0x2, {{0x8, 0x90f0, 0x4, 0xfffffff1, 0x0, 0x4}, [@TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xa66, 0x7, 0x12000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x7, 0xfff, 0x0, 0xb54af9cc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x2, 0x8, 0x7fff, 0xfffffffc}}]}, @TCA_NETEM_REORDER={0xb, 0x3, {0x8, 0x8}}, @TCA_NETEM_DELAY_DIST={0x3e, 0x2, "ba181d8bf3c1cb21fdf81ed083141ebf59a49158c91f67f2628ad2cd8e850c94a1d0a6e91ad0e48c3f2bf8885d1759f612b200fa6529b693dce9"}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x1, 0x56f5}}]}}}]}, 0xf0}}, 0x0) 1.099561455s ago: executing program 1 (id=204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000008100000002000000"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x20}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xef1, &(0x7f00000003c0)={0x0, 0x26c3, 0x20, 0x3, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioprio_get$uid(0x3, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, 0x0, 0xb) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x200000c1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x12140) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x0, 0x2}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000000300)=""/196) 766.126545ms ago: executing program 3 (id=205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000011b00)={0x0, 0x0, &(0x7f0000011ac0)={&(0x7f0000011a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40840) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25ADDFWD(r8, 0x89ea, &(0x7f0000000100)={@default, @default}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdf}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRESDEC=r4, @ANYRES32=r6, @ANYRESOCT=r4, @ANYRES32=r4, @ANYRESOCT=r2, @ANYRESOCT=r8], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000240)="762f86dd00005f44557313108e4c6b58b20c3b84e37d5d9a662b6ffe217a5eff0000000000000000", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket(0x1e, 0x3, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) 691.635073ms ago: executing program 0 (id=206): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) 528.203017ms ago: executing program 0 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547e3987dbdd0000cf000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x24044800) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000540)="85c80c2468f124fee04f50591b5dd47af355807026a9f22e00800009f478edcdf439cff5d220e5a131fac33a776070ad7713e7e3a794710cdf0ca638949f3c5ca9cdae629c5ce9eb3b451e8939036ac8258d588f1cea", 0x56, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800)={r9, r9, r9}, 0x0, 0x0, 0x0) 183.376796ms ago: executing program 4 (id=208): socket(0x200000000000011, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0xd) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xe22, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x80000001, @mcast2, 0x8}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0 \x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000050012000700000014000800"/42], 0x30}}, 0x2) syz_emit_ethernet(0x4b, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x15, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e"}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0xd4, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0xb5, 0x1, 0x0, 0x1, [@generic="3665d0ee", @generic="363403effde0727671fc0dfbaf4aeb48c209c23fdb5f50d895f293c95241a26308affa38139f3b23d7d114a93e3f48a57331c517c2f36d57a25547f9e14140ff934c42d11d9ffb487d1130b6116148b78abc7e1c718fa54faf671dddee4a1c355d403fafdfbb26e8d7f23c71e394ebe6c4765a9f9f5f1431c943c123acb605a4db6910c8b36d919f8b174671ae8c254888d68430c315aa1cc37f2ff815bbcfe29e4f101bea9efaf8e909ae3bdf"]}, @nested={0x6, 0x3, 0x0, 0x1, [@generic="d34c"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) 145.581145ms ago: executing program 1 (id=209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0x3, 0x1, 0xfffffffc, 0x2, 0xff, 0xc, 0x10001, 0x7ffd, 0x101, 0x2, 0x1, 0x200004, 0x3ff, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0xfd, 0x200, 0x0, 0x810d, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (rerun: 64) listen(r1, 0xfffffffc) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r4 = socket(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) get_mempolicy(&(0x7f0000000040), &(0x7f0000000140), 0x1200000000, &(0x7f0000ffc000/0x1000)=nil, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x64, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0xa, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x0, 0x9, 0x18, 0x1}, {0x3, 0x5, 0x5}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) 0s ago: executing program 1 (id=210): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x103040, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x62) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)='n', 0x1}, {&(0x7f00000001c0)="b8dfed3f162d6ad14070d1e7", 0xc}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019380)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'s526\x00', [0x401, 0x181, 0x2, 0xb, 0x13ffffff, 0x3, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x180, 0x13, 0x100, 0xffffffa7, 0x6f46, 0x134d, 0x1, 0x3fd, 0x4000009, 0x7, 0x3, 0x5, 0x1, 0x4, 0x40000, 0x7, 0xf5b, 0x8]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fdffffff00000000000000001801fcfa1a85bc81302e0000001fff207b1af8ff00002000bfa100000000000007010000f8ffffffb702000008000000b7030000f9ffffff850000000600000018010000202069250006d2caad9c483f151af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000640)=@conn_svc_rsp={0x0, 0x0, 0xa, "ddf008c5", {0x3, 0x102, 0x0, 0xb, 0x0, 0x80, 0x1}}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x4300, 0x0, 0x1, 0x80000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 65.088917][ T30] audit: type=1400 audit(1768146175.502:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.112465][ T30] audit: type=1400 audit(1768146175.532:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.115588][ T5798] cgroup: Unknown subsys name 'net' [ 65.141881][ T30] audit: type=1400 audit(1768146175.562:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.252859][ T5798] cgroup: Unknown subsys name 'cpuset' [ 65.261169][ T5798] cgroup: Unknown subsys name 'rlimit' [ 65.402840][ T30] audit: type=1400 audit(1768146175.822:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.426309][ T30] audit: type=1400 audit(1768146175.822:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.470772][ T30] audit: type=1400 audit(1768146175.822:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.491403][ T30] audit: type=1400 audit(1768146175.822:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.512641][ T30] audit: type=1400 audit(1768146175.852:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.537521][ T30] audit: type=1400 audit(1768146175.852:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.563671][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.573121][ T30] audit: type=1400 audit(1768146175.992:71): avc: denied { relabelto } for pid=5801 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.545220][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.589093][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.597108][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.605191][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.613588][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.621321][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.654703][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.663949][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.672021][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.693059][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.700351][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.711800][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.719142][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.720519][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.734142][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.736130][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.742095][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.750667][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.764300][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.772651][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.780173][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.788391][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.796270][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.803828][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.807016][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.820664][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.310711][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 69.342120][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 69.363685][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 69.515591][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 69.526933][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.534419][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.542484][ T5809] bridge_slave_0: entered allmulticast mode [ 69.549355][ T5809] bridge_slave_0: entered promiscuous mode [ 69.592727][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.599835][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.607024][ T5809] bridge_slave_1: entered allmulticast mode [ 69.613797][ T5809] bridge_slave_1: entered promiscuous mode [ 69.703750][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.710935][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.718037][ T5810] bridge_slave_0: entered allmulticast mode [ 69.725021][ T5810] bridge_slave_0: entered promiscuous mode [ 69.744706][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.752183][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.759311][ T5815] bridge_slave_0: entered allmulticast mode [ 69.766650][ T5815] bridge_slave_0: entered promiscuous mode [ 69.780765][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.792929][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.802120][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.809213][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.816994][ T5810] bridge_slave_1: entered allmulticast mode [ 69.823805][ T5810] bridge_slave_1: entered promiscuous mode [ 69.831446][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.842458][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.849571][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.857038][ T5815] bridge_slave_1: entered allmulticast mode [ 69.863995][ T5815] bridge_slave_1: entered promiscuous mode [ 69.941337][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.969781][ T5809] team0: Port device team_slave_0 added [ 69.985945][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.997372][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.006674][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.014427][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.021787][ T5816] bridge_slave_0: entered allmulticast mode [ 70.028495][ T5816] bridge_slave_0: entered promiscuous mode [ 70.037641][ T5809] team0: Port device team_slave_1 added [ 70.056802][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.066171][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.073721][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.080903][ T5816] bridge_slave_1: entered allmulticast mode [ 70.087642][ T5816] bridge_slave_1: entered promiscuous mode [ 70.146286][ T5810] team0: Port device team_slave_0 added [ 70.171409][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.178349][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.204542][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.226142][ T5810] team0: Port device team_slave_1 added [ 70.233037][ T5815] team0: Port device team_slave_0 added [ 70.241080][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.256775][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.263822][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.289770][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.317540][ T5815] team0: Port device team_slave_1 added [ 70.324768][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.340226][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.347779][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.355293][ T5825] bridge_slave_0: entered allmulticast mode [ 70.362194][ T5825] bridge_slave_0: entered promiscuous mode [ 70.406818][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.414010][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.421950][ T5825] bridge_slave_1: entered allmulticast mode [ 70.428833][ T5825] bridge_slave_1: entered promiscuous mode [ 70.436230][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.443620][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.469598][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.491475][ T5816] team0: Port device team_slave_0 added [ 70.508266][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.515456][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.541389][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.552958][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.559880][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.586504][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.607144][ T5816] team0: Port device team_slave_1 added [ 70.624628][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.631883][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.657920][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.687065][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.699110][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.717834][ T5809] hsr_slave_0: entered promiscuous mode [ 70.724190][ T5809] hsr_slave_1: entered promiscuous mode [ 70.740939][ T5813] Bluetooth: hci0: command tx timeout [ 70.761537][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.768473][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.794592][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.820398][ T5813] Bluetooth: hci2: command tx timeout [ 70.830106][ T5813] Bluetooth: hci1: command tx timeout [ 70.838606][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.845770][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.871985][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.884395][ T5825] team0: Port device team_slave_0 added [ 70.900405][ T5813] Bluetooth: hci4: command tx timeout [ 70.900938][ T5829] Bluetooth: hci3: command tx timeout [ 70.920291][ T5810] hsr_slave_0: entered promiscuous mode [ 70.926379][ T5810] hsr_slave_1: entered promiscuous mode [ 70.933037][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 70.938808][ T5810] Cannot create hsr debugfs directory [ 70.951401][ T5825] team0: Port device team_slave_1 added [ 70.961474][ T5815] hsr_slave_0: entered promiscuous mode [ 70.967541][ T5815] hsr_slave_1: entered promiscuous mode [ 70.973697][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 70.979414][ T5815] Cannot create hsr debugfs directory [ 71.069668][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.076961][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.103171][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.136096][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.146308][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.146755][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.172277][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.180682][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.204679][ T5816] hsr_slave_0: entered promiscuous mode [ 71.210989][ T5816] hsr_slave_1: entered promiscuous mode [ 71.216859][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 71.223229][ T5816] Cannot create hsr debugfs directory [ 71.371565][ T5825] hsr_slave_0: entered promiscuous mode [ 71.377658][ T5825] hsr_slave_1: entered promiscuous mode [ 71.383993][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 71.389704][ T5825] Cannot create hsr debugfs directory [ 71.619907][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.641670][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.656693][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.674358][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.733722][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.745750][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.756407][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.778981][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.843314][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.856511][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.867014][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.878186][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.963107][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.981419][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.993392][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.004416][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.022347][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.097147][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.108482][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.131125][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.141061][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.156237][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.181778][ T3953] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.188978][ T3953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.217536][ T3953] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.224627][ T3953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.254619][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.299970][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.328282][ T4732] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.335427][ T4732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.364490][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.383293][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.390390][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.416282][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.450578][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.457748][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.476735][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 72.476751][ T30] audit: type=1400 audit(1768146182.892:84): avc: denied { sys_module } for pid=5809 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.507655][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.514782][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.527929][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.582797][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.604315][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.611489][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.637375][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.644476][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.676688][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.735071][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.759536][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.799721][ T3953] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.806874][ T3953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.830132][ T5829] Bluetooth: hci0: command tx timeout [ 72.892456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.899549][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.907280][ T5829] Bluetooth: hci1: command tx timeout [ 72.907599][ T5813] Bluetooth: hci2: command tx timeout [ 72.981990][ T5813] Bluetooth: hci4: command tx timeout [ 72.981995][ T5829] Bluetooth: hci3: command tx timeout [ 73.025531][ T5809] veth0_vlan: entered promiscuous mode [ 73.084515][ T5809] veth1_vlan: entered promiscuous mode [ 73.117474][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.202558][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.223053][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.248947][ T5809] veth0_macvtap: entered promiscuous mode [ 73.275650][ T5809] veth1_macvtap: entered promiscuous mode [ 73.313465][ T5816] veth0_vlan: entered promiscuous mode [ 73.364511][ T5816] veth1_vlan: entered promiscuous mode [ 73.414912][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.439679][ T5810] veth0_vlan: entered promiscuous mode [ 73.465784][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.482632][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.508461][ T5810] veth1_vlan: entered promiscuous mode [ 73.522263][ T4732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.533817][ T4732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.548757][ T4732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.564962][ T4732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.577955][ T5816] veth0_macvtap: entered promiscuous mode [ 73.617091][ T5816] veth1_macvtap: entered promiscuous mode [ 73.628672][ T5810] veth0_macvtap: entered promiscuous mode [ 73.653058][ T5810] veth1_macvtap: entered promiscuous mode [ 73.688037][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.714458][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.755914][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.771294][ T4732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.778540][ T5825] veth0_vlan: entered promiscuous mode [ 73.787497][ T4732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.799120][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.817342][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.827469][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.836370][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.858099][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.867818][ T5815] veth0_vlan: entered promiscuous mode [ 73.889730][ T5825] veth1_vlan: entered promiscuous mode [ 73.906213][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.907289][ T3473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.917458][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.924119][ T3473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.943562][ T5815] veth1_vlan: entered promiscuous mode [ 73.958359][ T1159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.962415][ T30] audit: type=1400 audit(1768146184.372:85): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4uY49I/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.991978][ T30] audit: type=1400 audit(1768146184.392:86): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.025520][ T1159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.031113][ T30] audit: type=1400 audit(1768146184.392:87): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4uY49I/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.060942][ T30] audit: type=1400 audit(1768146184.392:88): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.088559][ T30] audit: type=1400 audit(1768146184.402:89): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4uY49I/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.089627][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.119299][ T30] audit: type=1400 audit(1768146184.402:90): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4uY49I/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.144752][ T5815] veth0_macvtap: entered promiscuous mode [ 74.163778][ T30] audit: type=1400 audit(1768146184.412:91): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.185259][ T30] audit: type=1400 audit(1768146184.432:92): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.210380][ T30] audit: type=1400 audit(1768146184.442:93): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="gadgetfs" ino=6077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.266695][ T5815] veth1_macvtap: entered promiscuous mode [ 74.361212][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.388270][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.388929][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.397210][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.429526][ T5825] veth0_macvtap: entered promiscuous mode [ 74.446504][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465851][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.475099][ T5825] veth1_macvtap: entered promiscuous mode [ 74.482720][ T4732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.494132][ T4732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.504309][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.513549][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.513559][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.531606][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.545724][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.688816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.906175][ T5829] Bluetooth: hci0: command tx timeout [ 74.933948][ T5931] netem: incorrect gi model size [ 74.939094][ T5931] netem: change failed [ 74.962691][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.980823][ T5829] Bluetooth: hci1: command tx timeout [ 74.980946][ T5813] Bluetooth: hci2: command tx timeout [ 75.010897][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.062150][ T5813] Bluetooth: hci3: command tx timeout [ 75.062159][ T5829] Bluetooth: hci4: command tx timeout [ 75.101515][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.117196][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.172727][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.212244][ T4732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.221069][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.232280][ T4732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.326985][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.345729][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.713094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.722803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.815441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.917829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.927007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.020268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 76.343696][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.383377][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.428199][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.467615][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.530302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.539744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.548225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.554607][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.610862][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.000701][ T5813] Bluetooth: hci0: command tx timeout [ 77.061632][ T5813] Bluetooth: hci1: command tx timeout [ 77.070340][ T5813] Bluetooth: hci2: command tx timeout [ 77.140831][ T5813] Bluetooth: hci4: command tx timeout [ 77.142712][ T5829] Bluetooth: hci3: command tx timeout [ 77.375669][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.469240][ T5954] netem: incorrect gi model size [ 77.474480][ T5954] netem: change failed [ 78.897924][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 78.897941][ T30] audit: type=1400 audit(1768146189.312:137): avc: denied { ioctl } for pid=5968 comm="syz.1.9" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9308 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.239570][ T5959] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 79.247070][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.535134][ T30] audit: type=1400 audit(1768146189.352:138): avc: denied { create } for pid=5968 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.597814][ T30] audit: type=1400 audit(1768146189.352:139): avc: denied { setopt } for pid=5968 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.629319][ T30] audit: type=1400 audit(1768146189.652:140): avc: denied { connect } for pid=5958 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.894849][ T5974] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 79.927984][ T30] audit: type=1400 audit(1768146189.872:141): avc: denied { map_read map_write } for pid=5967 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.057630][ T5977] fuse: Bad value for 'fd' [ 80.389590][ T30] audit: type=1400 audit(1768146190.802:142): avc: denied { create } for pid=5979 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.552524][ T30] audit: type=1400 audit(1768146190.882:143): avc: denied { getopt } for pid=5979 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.626565][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.680115][ T30] audit: type=1400 audit(1768146191.042:144): avc: denied { name_bind } for pid=5985 comm="syz.2.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.871022][ T30] audit: type=1400 audit(1768146191.042:145): avc: denied { node_bind } for pid=5985 comm="syz.2.14" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 81.431812][ T10] cfg80211: failed to load regulatory.db [ 81.819548][ T30] audit: type=1400 audit(1768146192.232:146): avc: denied { read write } for pid=5991 comm="syz.1.15" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.886240][ T5995] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 82.080522][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.370065][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 82.379898][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 82.395439][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.404207][ T10] usb 2-1: Product: syz [ 82.410669][ T10] usb 2-1: Manufacturer: syz [ 82.419798][ T10] usb 2-1: SerialNumber: syz [ 82.442047][ T10] usb 2-1: config 0 descriptor?? [ 82.470766][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 82.628979][ T5998] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 82.681019][ T6001] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 83.414204][ T5994] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 84.150071][ T10] gspca_sq930x: reg_w 0105 0c00 failed -110 [ 84.389335][ T10] gspca_sq930x: Sensor ov9630 not yet treated [ 84.396967][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 84.405748][ T10] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 84.428139][ T792] IPVS: starting estimator thread 0... [ 84.450337][ T10] usb 2-1: USB disconnect, device number 2 [ 84.623078][ T6023] IPVS: using max 63 ests per chain, 151200 per kthread [ 84.673681][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 84.673697][ T30] audit: type=1400 audit(1768146195.086:167): avc: denied { create } for pid=6029 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.675275][ T6030] Zero length message leads to an empty skb [ 85.682948][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.700347][ T9] IPVS: starting estimator thread 0... [ 85.723617][ T30] audit: type=1400 audit(1768146196.136:168): avc: denied { getopt } for pid=6029 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.804471][ T30] audit: type=1400 audit(1768146196.166:169): avc: denied { setopt } for pid=6029 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.820221][ T6033] IPVS: using max 39 ests per chain, 93600 per kthread [ 85.862302][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 85.871845][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.922197][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.940063][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.948343][ T10] usb 2-1: Product: syz [ 85.954887][ T10] usb 2-1: Manufacturer: syz [ 85.959498][ T10] usb 2-1: SerialNumber: syz [ 85.978826][ T10] usb 2-1: config 0 descriptor?? [ 86.020171][ T5926] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 86.050593][ T30] audit: type=1400 audit(1768146196.466:170): avc: denied { read write } for pid=6039 comm="syz.3.30" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.194970][ T30] audit: type=1400 audit(1768146196.466:171): avc: denied { open } for pid=6039 comm="syz.3.30" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.223096][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.349837][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.374749][ T5926] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 86.395977][ T30] audit: type=1400 audit(1768146196.466:172): avc: denied { ioctl } for pid=6039 comm="syz.3.30" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.868069][ T5926] usb 5-1: config 1 interface 1 has no altsetting 1 [ 86.908763][ T30] audit: type=1400 audit(1768146196.536:173): avc: denied { write } for pid=6037 comm="syz.0.29" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.950089][ T30] audit: type=1400 audit(1768146197.326:174): avc: denied { map } for pid=6039 comm="syz.3.30" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.048636][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.068797][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.077217][ T5926] usb 5-1: Product: syz [ 87.095985][ T5926] usb 5-1: Manufacturer: syz [ 87.116824][ T5926] usb 5-1: SerialNumber: syz [ 87.134149][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 87.389675][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.400790][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.410916][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.430974][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.447756][ T6050] netem: incorrect gi model size [ 87.455355][ T6050] netem: change failed [ 87.491552][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.507965][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.517911][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.586752][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.618852][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.677982][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.982041][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 87.994764][ T5926] usb 5-1: selecting invalid altsetting 1 [ 88.007222][ T5812] usb 2-1: USB disconnect, device number 3 [ 88.042318][ T5926] cdc_ncm 5-1:1.0: bind() failure [ 88.079375][ T30] audit: type=1400 audit(1768146198.486:175): avc: denied { create } for pid=6052 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.122036][ T30] audit: type=1400 audit(1768146198.516:176): avc: denied { bind } for pid=6052 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.152319][ T5926] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 88.159128][ T5926] cdc_ncm 5-1:1.1: bind() failure [ 88.223685][ T5926] usb 5-1: USB disconnect, device number 2 [ 88.576109][ T6063] use of bytesused == 0 is deprecated and will be removed in the future, [ 88.584759][ T6063] use the actual size instead. [ 89.754016][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 89.754033][ T30] audit: type=1400 audit(1768146200.166:185): avc: denied { bind } for pid=6074 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.790482][ T30] audit: type=1400 audit(1768146200.206:186): avc: denied { setopt } for pid=6074 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.812773][ T30] audit: type=1400 audit(1768146200.226:187): avc: denied { write } for pid=6074 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.086550][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c96800: rx timeout, send abort [ 90.148679][ T30] audit: type=1400 audit(1768146200.536:188): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 90.550301][ T30] audit: type=1400 audit(1768146200.536:189): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.586925][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c96000: rx timeout, send abort [ 90.595739][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c96800: abort rx timeout. Force session deactivation [ 90.617105][ T30] audit: type=1400 audit(1768146200.536:190): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.715977][ T30] audit: type=1400 audit(1768146200.536:191): avc: denied { add_name } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.797547][ T30] audit: type=1400 audit(1768146200.536:192): avc: denied { create } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.841850][ T30] audit: type=1400 audit(1768146200.556:193): avc: denied { append open } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.095195][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c96000: abort rx timeout. Force session deactivation [ 91.158615][ T30] audit: type=1400 audit(1768146200.556:194): avc: denied { getattr } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.391988][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 92.417130][ T6111] 8021q: VLANs not supported on ip_vti0 [ 94.996512][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 95.280296][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 95.280310][ T30] audit: type=1400 audit(1768146205.646:210): avc: denied { accept } for pid=6158 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.629473][ T30] audit: type=1400 audit(1768146206.036:211): avc: denied { write } for pid=6136 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.991000][ T6167] warning: `syz.4.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.005529][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 97.085371][ T6168] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 97.152600][ T30] audit: type=1400 audit(1768146207.396:212): avc: denied { write } for pid=6166 comm="syz.4.56" name="wireless" dev="proc" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.570075][ T30] audit: type=1400 audit(1768146207.976:213): avc: denied { create } for pid=6176 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.860103][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.931583][ T6182] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 97.943026][ T6182] netlink: 236 bytes leftover after parsing attributes in process `syz.2.62'. [ 98.030068][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 98.060849][ T5925] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 98.107457][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.177319][ T5925] usb 4-1: Product: syz [ 98.197047][ T5925] usb 4-1: Manufacturer: syz [ 98.218523][ T5925] usb 4-1: SerialNumber: syz [ 98.255488][ T5925] usb 4-1: config 0 descriptor?? [ 98.459612][ T30] audit: type=1400 audit(1768146208.866:214): avc: denied { search } for pid=6188 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.750503][ T30] audit: type=1400 audit(1768146208.866:215): avc: denied { search } for pid=6188 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.774825][ T30] audit: type=1400 audit(1768146208.866:216): avc: denied { search } for pid=6188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.803799][ T30] audit: type=1400 audit(1768146208.866:217): avc: denied { search } for pid=6188 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.915036][ T6198] process 'syz.3.61' launched '/dev/fd/8' with NULL argv: empty string added [ 99.394357][ T30] audit: type=1400 audit(1768146209.046:218): avc: denied { read open } for pid=6193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.423572][ T5925] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 002 [ 99.532497][ T30] audit: type=1400 audit(1768146209.046:219): avc: denied { getattr } for pid=6193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.054452][ T6207] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 100.464527][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 100.464542][ T30] audit: type=1400 audit(1768146210.466:231): avc: denied { mounton } for pid=6206 comm="syz.1.65" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 100.774456][ T30] audit: type=1400 audit(1768146211.186:232): avc: denied { create } for pid=6216 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.860704][ T6222] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.996102][ T30] audit: type=1400 audit(1768146211.256:233): avc: denied { bind } for pid=6216 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.020989][ T30] audit: type=1400 audit(1768146211.256:234): avc: denied { write } for pid=6216 comm="syz.0.66" path="socket:[9771]" dev="sockfs" ino=9771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.044969][ T30] audit: type=1400 audit(1768146211.376:235): avc: denied { read } for pid=6219 comm="syz.1.68" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.068343][ T30] audit: type=1400 audit(1768146211.376:236): avc: denied { open } for pid=6219 comm="syz.1.68" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.280072][ T90] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.412775][ T30] audit: type=1400 audit(1768146211.826:237): avc: denied { add_name } for pid=6188 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.540169][ T90] usb 2-1: Using ep0 maxpacket: 8 [ 101.584626][ T5925] usb 4-1: USB disconnect, device number 2 [ 101.646344][ T90] usb 2-1: config 0 has no interfaces? [ 101.661468][ T90] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.673152][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.682336][ T30] audit: type=1400 audit(1768146211.826:238): avc: denied { create } for pid=6188 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.719357][ T90] usb 2-1: config 0 descriptor?? [ 102.013842][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.023823][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.141711][ T6249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.73'. [ 102.150804][ T6249] netlink: 43 bytes leftover after parsing attributes in process `syz.3.73'. [ 102.159648][ T6249] netlink: 'syz.3.73': attribute type 6 has an invalid length. [ 102.168092][ T6249] netlink: 'syz.3.73': attribute type 5 has an invalid length. [ 102.175712][ T6249] netlink: 43 bytes leftover after parsing attributes in process `syz.3.73'. [ 102.190672][ T6249] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.522866][ T30] audit: type=1400 audit(1768146211.826:239): avc: denied { write } for pid=6188 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2271 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.560873][ T90] usb 2-1: USB disconnect, device number 4 [ 102.775168][ T30] audit: type=1400 audit(1768146211.826:240): avc: denied { append } for pid=6188 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2271 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.436597][ T5921] IPVS: starting estimator thread 0... [ 104.529342][ T6280] xt_hashlimit: max too large, truncated to 1048576 [ 104.599781][ T6282] IPVS: using max 63 ests per chain, 151200 per kthread [ 105.826296][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.834859][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.844072][ T6311] bridge0: entered allmulticast mode [ 106.660730][ T6308] Bluetooth: MGMT ver 1.23 [ 107.239272][ T6318] sit0: entered promiscuous mode [ 107.292637][ T6318] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 107.355377][ T6318] netlink: 1 bytes leftover after parsing attributes in process `syz.1.87'. [ 107.365112][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 107.365127][ T30] audit: type=1400 audit(1768146217.776:253): avc: denied { create } for pid=6320 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 107.591203][ T30] audit: type=1400 audit(1768146218.006:254): avc: denied { node_bind } for pid=6320 comm="syz.0.88" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 107.788620][ T30] audit: type=1400 audit(1768146218.196:255): avc: denied { accept } for pid=6320 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.468303][ T30] audit: type=1400 audit(1768146218.876:256): avc: denied { create } for pid=6334 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.344321][ T30] audit: type=1400 audit(1768146219.016:257): avc: denied { ioctl } for pid=6334 comm="syz.0.91" path="socket:[10302]" dev="sockfs" ino=10302 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.998456][ T30] audit: type=1400 audit(1768146220.406:258): avc: denied { write } for pid=6356 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.729218][ T30] audit: type=1400 audit(1768146221.046:259): avc: denied { create } for pid=6353 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.801750][ T30] audit: type=1400 audit(1768146221.096:260): avc: denied { ioctl } for pid=6353 comm="syz.4.89" path="socket:[10138]" dev="sockfs" ino=10138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.310145][ T30] audit: type=1400 audit(1768146221.526:261): avc: denied { setopt } for pid=6373 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.595982][ T30] audit: type=1400 audit(1768146221.736:262): avc: denied { setopt } for pid=6375 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.710233][ T6382] FAULT_INJECTION: forcing a failure. [ 111.710233][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.723459][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 111.723492][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.723510][ T6382] Call Trace: [ 111.723517][ T6382] [ 111.723526][ T6382] dump_stack_lvl+0x16c/0x1f0 [ 111.723563][ T6382] should_fail_ex+0x512/0x640 [ 111.723600][ T6382] _copy_from_iter+0x2a4/0x16c0 [ 111.723636][ T6382] ? __alloc_skb+0x220/0x410 [ 111.723654][ T6382] ? __alloc_skb+0x35d/0x410 [ 111.723673][ T6382] ? __pfx__copy_from_iter+0x10/0x10 [ 111.723703][ T6382] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 111.723730][ T6382] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 111.723768][ T6382] netlink_sendmsg+0x820/0xdd0 [ 111.723801][ T6382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.723839][ T6382] ____sys_sendmsg+0xa5d/0xc30 [ 111.723869][ T6382] ? copy_msghdr_from_user+0x10a/0x160 [ 111.723892][ T6382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.723924][ T6382] ? __lock_acquire+0x436/0x2890 [ 111.723956][ T6382] ___sys_sendmsg+0x134/0x1d0 [ 111.723981][ T6382] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.724003][ T6382] ? find_held_lock+0x2b/0x80 [ 111.724066][ T6382] __sys_sendmsg+0x16d/0x220 [ 111.724090][ T6382] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.724112][ T6382] ? __pfx___schedule+0x10/0x10 [ 111.724145][ T6382] ? rcu_is_watching+0x12/0xc0 [ 111.724174][ T6382] do_syscall_64+0xcd/0xf80 [ 111.724204][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.724226][ T6382] RIP: 0033:0x7f339938f749 [ 111.724242][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.724262][ T6382] RSP: 002b:00007f33975f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.724282][ T6382] RAX: ffffffffffffffda RBX: 00007f33995e6180 RCX: 00007f339938f749 [ 111.724297][ T6382] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 000000000000000a [ 111.724310][ T6382] RBP: 00007f33975f6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.724322][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.724335][ T6382] R13: 00007f33995e6218 R14: 00007f33995e6180 R15: 00007ffc94f2d628 [ 111.724364][ T6382] [ 113.241116][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 113.251671][ T30] audit: type=1400 audit(1768146223.646:264): avc: denied { create } for pid=6383 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.067811][ T6405] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.102'. [ 114.183715][ T30] audit: type=1400 audit(1768146224.596:265): avc: denied { read } for pid=6404 comm="syz.2.103" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.218758][ T6407] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 114.258279][ T30] audit: type=1400 audit(1768146224.626:266): avc: denied { open } for pid=6404 comm="syz.2.103" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.308547][ T30] audit: type=1400 audit(1768146224.626:267): avc: denied { ioctl } for pid=6404 comm="syz.2.103" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.369286][ T30] audit: type=1400 audit(1768146224.656:268): avc: denied { write } for pid=6404 comm="syz.2.103" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.617894][ T30] audit: type=1400 audit(1768146224.656:269): avc: denied { map } for pid=6404 comm="syz.2.103" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.845932][ T30] audit: type=1400 audit(1768146224.656:270): avc: denied { execute } for pid=6404 comm="syz.2.103" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.898870][ T30] audit: type=1400 audit(1768146224.896:271): avc: denied { bind } for pid=6418 comm="syz.4.105" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.004368][ T30] audit: type=1400 audit(1768146224.966:272): avc: denied { write } for pid=6418 comm="syz.4.105" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.089015][ T30] audit: type=1400 audit(1768146224.966:273): avc: denied { open } for pid=6418 comm="syz.4.105" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.113316][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 118.021862][ T6455] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 118.212855][ T6359] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.420063][ T6359] usb 5-1: Using ep0 maxpacket: 16 [ 118.431192][ T6359] usb 5-1: config 222 has an invalid interface number: 31 but max is 0 [ 118.451558][ T6359] usb 5-1: config 222 has no interface number 0 [ 118.474998][ T6359] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 118.517277][ T6359] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 118.564555][ T6359] usb 5-1: config 222 interface 31 has no altsetting 0 [ 118.700297][ T6359] usb 5-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 118.779691][ T6359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.820635][ T6359] usb 5-1: Product: syz [ 118.831919][ T6359] usb 5-1: Manufacturer: syz [ 118.836543][ T6359] usb 5-1: SerialNumber: syz [ 118.884347][ T6447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.910615][ T5922] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.613596][ T6465] fuse: Bad value for 'fd' [ 119.810135][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 120.273330][ T5922] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 120.302978][ T5922] usb 3-1: config 0 has no interface number 0 [ 120.406852][ T5922] usb 3-1: config 0 interface 192 has no altsetting 0 [ 120.433634][ T5922] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=52.05 [ 120.479704][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.500395][ T5922] usb 3-1: Product: syz [ 120.522365][ T5922] usb 3-1: Manufacturer: syz [ 120.526982][ T5922] usb 3-1: SerialNumber: syz [ 120.552590][ T5922] usb 3-1: config 0 descriptor?? [ 120.563749][ T6359] ldusb 5-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 120.616300][ T5922] ipw 3-1:0.192: IPWireless converter converter detected [ 120.628352][ T6359] usb 5-1: USB disconnect, device number 3 [ 120.676700][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 120.676716][ T30] audit: type=1400 audit(1768146231.086:279): avc: denied { mount } for pid=6469 comm="syz.4.119" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 120.681301][ T6359] ldusb 5-1:222.31: LD USB Device #0 now disconnected [ 120.746347][ T30] audit: type=1400 audit(1768146231.156:280): avc: denied { read write } for pid=6469 comm="syz.4.119" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 120.969741][ T30] audit: type=1400 audit(1768146231.156:281): avc: denied { open } for pid=6469 comm="syz.4.119" path="/25/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 121.090963][ T30] audit: type=1400 audit(1768146231.386:282): avc: denied { ioctl } for pid=6459 comm="syz.2.115" path="socket:[11659]" dev="sockfs" ino=11659 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.640372][ T30] audit: type=1400 audit(1768146231.386:283): avc: denied { connect } for pid=6459 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.991142][ T30] audit: type=1400 audit(1768146231.756:284): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 121.999937][ T90] usb 3-1: USB disconnect, device number 2 [ 122.102406][ T90] ipw 3-1:0.192: device disconnected [ 122.157310][ T30] audit: type=1400 audit(1768146232.536:285): avc: denied { write } for pid=6489 comm="syz.4.122" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.361254][ T6359] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.723247][ T6359] usb 5-1: Using ep0 maxpacket: 16 [ 122.772137][ T6359] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 122.800634][ T6359] usb 5-1: config 252 has no interface number 0 [ 122.808484][ T6359] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.873386][ T6359] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 122.900074][ T6359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.908088][ T6359] usb 5-1: Product: syz [ 122.940030][ T30] audit: type=1400 audit(1768146233.346:286): avc: denied { setopt } for pid=6491 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.941953][ T6359] usb 5-1: Manufacturer: syz [ 123.017471][ T6359] usb 5-1: SerialNumber: syz [ 123.118495][ T6359] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 123.262210][ T6490] netlink: 'syz.4.122': attribute type 10 has an invalid length. [ 123.279918][ T6490] bridge0: port 3(netdevsim0) entered blocking state [ 123.292054][ T6504] fuse: Bad value for 'fd' [ 123.451259][ T6490] bridge0: port 3(netdevsim0) entered disabled state [ 123.458220][ T6490] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 123.477261][ T6490] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 124.111010][ T6490] bridge0: port 3(netdevsim0) entered blocking state [ 124.117811][ T6490] bridge0: port 3(netdevsim0) entered forwarding state [ 124.181350][ T5982] usb 5-1: Failed to submit usb control message: -110 [ 124.280735][ T6151] usb 5-1: USB disconnect, device number 4 [ 124.301079][ T5982] usb 5-1: unable to send the bmi data to the device: -110 [ 124.308303][ T5982] usb 5-1: unable to get target info from device [ 124.371862][ T5982] usb 5-1: could not get target info (-110) [ 124.377994][ T5982] usb 5-1: could not probe fw (-110) [ 124.443310][ T6513] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.694752][ T6531] FAULT_INJECTION: forcing a failure. [ 126.694752][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 126.735242][ T6532] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.905991][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT(full) [ 126.906022][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.906035][ T6531] Call Trace: [ 126.906042][ T6531] [ 126.906050][ T6531] dump_stack_lvl+0x16c/0x1f0 [ 126.906085][ T6531] should_fail_ex+0x512/0x640 [ 126.906116][ T6531] ? kmem_cache_alloc_noprof+0x62/0x770 [ 126.906142][ T6531] should_failslab+0xc2/0x120 [ 126.906170][ T6531] kmem_cache_alloc_noprof+0x83/0x770 [ 126.906193][ T6531] ? sk_prot_alloc+0x60/0x2a0 [ 126.906226][ T6531] ? sk_prot_alloc+0x60/0x2a0 [ 126.906251][ T6531] ? find_held_lock+0x2b/0x80 [ 126.906280][ T6531] sk_prot_alloc+0x60/0x2a0 [ 126.906310][ T6531] sk_alloc+0x36/0xe30 [ 126.906332][ T6531] inet_create+0x3a1/0x1040 [ 126.906361][ T6531] ? inet_create+0x93/0x1040 [ 126.906387][ T6531] __sock_create+0x339/0x8a0 [ 126.906423][ T6531] mptcp_subflow_create_socket+0xec/0xa50 [ 126.906455][ T6531] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 126.906479][ T6531] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 126.906520][ T6531] __mptcp_nmpc_sk+0x182/0x880 [ 126.906542][ T6531] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 126.906567][ T6531] ? __local_bh_enable_ip+0xa4/0x120 [ 126.906602][ T6531] mptcp_setsockopt+0x1b3b/0x3380 [ 126.906633][ T6531] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 126.906667][ T6531] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 126.906701][ T6531] ? find_held_lock+0x2b/0x80 [ 126.906737][ T6531] ? selinux_socket_setsockopt+0x6a/0x80 [ 126.906762][ T6531] ? sock_common_setsockopt+0x2e/0xf0 [ 126.906788][ T6531] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 126.906818][ T6531] do_sock_setsockopt+0xf3/0x1d0 [ 126.906849][ T6531] __sys_setsockopt+0x1a0/0x230 [ 126.906876][ T6531] __x64_sys_setsockopt+0xbd/0x160 [ 126.906897][ T6531] ? do_syscall_64+0x91/0xf80 [ 126.906924][ T6531] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.906952][ T6531] do_syscall_64+0xcd/0xf80 [ 126.906982][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.907003][ T6531] RIP: 0033:0x7f7b7d38f749 [ 126.907021][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.907040][ T6531] RSP: 002b:00007f7b7e1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.907065][ T6531] RAX: ffffffffffffffda RBX: 00007f7b7d5e5fa0 RCX: 00007f7b7d38f749 [ 126.907079][ T6531] RDX: 0000000000000013 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.907091][ T6531] RBP: 00007f7b7e1f0090 R08: 0000000000000004 R09: 0000000000000000 [ 126.907103][ T6531] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 126.907116][ T6531] R13: 00007f7b7d5e6038 R14: 00007f7b7d5e5fa0 R15: 00007fff61b26878 [ 126.907146][ T6531] [ 127.571037][ T30] audit: type=1400 audit(1768146237.976:287): avc: denied { create } for pid=6535 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 128.850152][ T30] audit: type=1400 audit(1768146238.726:288): avc: denied { bind } for pid=6540 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.950202][ T30] audit: type=1400 audit(1768146238.726:289): avc: denied { getopt } for pid=6540 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.021968][ T30] audit: type=1400 audit(1768146239.286:290): avc: denied { mounton } for pid=6545 comm="syz.1.136" path="/34/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.211463][ T6552] fuse: Unknown parameter 'fd4+ ¡' [ 129.230145][ T5925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.269734][ T6556] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 129.277366][ T30] audit: type=1400 audit(1768146239.696:291): avc: denied { bind } for pid=6551 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.277697][ T30] audit: type=1400 audit(1768146239.696:292): avc: denied { listen } for pid=6551 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.338030][ T30] audit: type=1400 audit(1768146239.746:293): avc: denied { connect } for pid=6551 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.444220][ T30] audit: type=1400 audit(1768146239.836:294): avc: denied { setopt } for pid=6551 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.485446][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 129.501078][ T5925] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 129.551266][ T5925] usb 4-1: config 0 has no interface number 0 [ 129.576070][ T5925] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 129.604563][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.670598][ T30] audit: type=1400 audit(1768146240.056:295): avc: denied { ioctl } for pid=6554 comm="syz.4.140" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.702123][ T5925] usb 4-1: Product: syz [ 129.706329][ T5925] usb 4-1: Manufacturer: syz [ 129.713335][ T5925] usb 4-1: SerialNumber: syz [ 129.724293][ T5925] usb 4-1: config 0 descriptor?? [ 129.911279][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.936732][ T5925] radio-si470x 4-1:0.35: this is not a si470x device. [ 129.997582][ T5925] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 130.104451][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 130.131371][ T30] audit: type=1400 audit(1768146240.386:296): avc: denied { write } for pid=6566 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.161577][ T5921] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 130.175439][ T5925] usb 4-1: USB disconnect, device number 3 [ 130.204211][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.231916][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.339792][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.413540][ T5921] usb 5-1: Product: syz [ 130.426263][ T5921] usb 5-1: Manufacturer: syz [ 130.448811][ T5921] usb 5-1: SerialNumber: syz [ 132.585301][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.729631][ T5921] usb 5-1: 0:2 : does not exist [ 134.812608][ T5921] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 134.992821][ T5921] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 135.013468][ T5921] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 135.043155][ T5921] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 135.087914][ T5921] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 135.132705][ T5921] usb 5-1: USB disconnect, device number 5 [ 136.047481][ T5925] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.332285][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.378403][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.430068][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.276988][ T5925] usb 5-1: Product: syz [ 144.579619][ T6602] syz.3.152 (6602) used greatest stack depth: 17560 bytes left [ 144.620056][ T5925] usb 5-1: Manufacturer: syz [ 144.624685][ T5925] usb 5-1: SerialNumber: syz [ 144.714665][ T5925] usb 5-1: config 0 descriptor?? [ 144.835417][ T5925] usb 5-1: can't set config #0, error -71 [ 144.901531][ T5925] usb 5-1: USB disconnect, device number 6 [ 145.115071][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 145.115087][ T30] audit: type=1400 audit(1768146255.526:303): avc: denied { mount } for pid=6610 comm="syz.4.156" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 145.264731][ T6616] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 146.140077][ T30] audit: type=1400 audit(1768146256.536:304): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 148.321957][ T30] audit: type=1400 audit(1768146258.726:305): avc: denied { setopt } for pid=6628 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.795456][ T30] audit: type=1400 audit(1768146260.206:306): avc: denied { ioctl } for pid=6643 comm="syz.2.163" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.852281][ T6518] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.913157][ T30] audit: type=1400 audit(1768146260.236:307): avc: denied { set_context_mgr } for pid=6643 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.013277][ T30] audit: type=1400 audit(1768146260.256:308): avc: denied { map } for pid=6643 comm="syz.2.163" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.773987][ T6518] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 150.794434][ T6518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.809098][ T6518] usb 2-1: Product: syz [ 150.826964][ T30] audit: type=1400 audit(1768146260.326:309): avc: denied { call } for pid=6643 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.862140][ T6518] usb 2-1: Manufacturer: syz [ 150.866788][ T6518] usb 2-1: SerialNumber: syz [ 151.476182][ T30] audit: type=1400 audit(1768146261.546:310): avc: denied { read } for pid=6653 comm="syz.4.166" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.524228][ T30] audit: type=1400 audit(1768146261.546:311): avc: denied { open } for pid=6653 comm="syz.4.166" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.616409][ T30] audit: type=1400 audit(1768146261.876:312): avc: denied { create } for pid=6653 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.655025][ T30] audit: type=1400 audit(1768146262.006:313): avc: denied { bind } for pid=6653 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.686927][ T30] audit: type=1400 audit(1768146262.016:314): avc: denied { listen } for pid=6653 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.152692][ T6661] comedi comedi0: dt2817: I/O port conflict (0xcf7,5) [ 152.291168][ T6605] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 152.312905][ T6663] fuse: Bad value for 'fd' [ 152.526963][ T6518] gspca_main: pac207-2.14.0 probing 093a:2476 [ 152.586110][ T6518] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 152.640778][ T6518] uvcvideo 2-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 152.680829][ T6518] uvcvideo 2-1:13.0: No valid video chain found. [ 152.780880][ T6518] usb 2-1: USB disconnect, device number 5 [ 153.046158][ T6605] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 153.079935][ T6605] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 153.111449][ T6605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.141279][ T6605] usb 3-1: config 0 has no interface number 0 [ 153.163806][ T6605] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 153.196095][ T6605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.224942][ T30] audit: type=1400 audit(1768146263.626:315): avc: denied { execmod } for pid=6666 comm="syz.4.171" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 153.252754][ T6605] usb 3-1: Product: syz [ 153.256925][ T6605] usb 3-1: Manufacturer: syz [ 153.301006][ T6605] usb 3-1: SerialNumber: syz [ 153.314141][ T6605] usb 3-1: config 0 descriptor?? [ 153.359631][ T30] audit: type=1400 audit(1768146263.626:316): avc: denied { execute } for pid=6666 comm="syz.4.171" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 153.547043][ T6605] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 153.559306][ T30] audit: type=1400 audit(1768146263.966:317): avc: denied { name_bind } for pid=6674 comm="syz.4.173" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 153.583819][ T6605] uvcvideo 3-1:0.105: No valid video chain found. [ 153.603790][ T6605] usb 3-1: USB disconnect, device number 3 [ 153.625085][ T6175] udevd[6175]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 155.245069][ T30] audit: type=1400 audit(1768146265.596:318): avc: denied { mounton } for pid=6677 comm="syz.3.174" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 156.985379][ T6707] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.157194][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 157.157210][ T30] audit: type=1400 audit(1768146267.566:320): avc: denied { read } for pid=6710 comm="syz.3.184" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 157.194460][ T30] audit: type=1400 audit(1768146267.606:321): avc: denied { open } for pid=6710 comm="syz.3.184" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 157.499659][ T30] audit: type=1400 audit(1768146267.636:322): avc: denied { ioctl } for pid=6710 comm="syz.3.184" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 158.408670][ T6724] fuse: Bad value for 'fd' [ 158.523985][ T6726] overlayfs: missing 'lowerdir' [ 159.178766][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'. [ 160.305875][ T6740] netem: incorrect gi model size [ 160.316606][ T6740] netem: change failed [ 161.006534][ T30] audit: type=1400 audit(1768146271.416:323): avc: denied { getopt } for pid=6730 comm="syz.2.189" laddr=ff05::1 lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.334888][ T6746] netlink: 'syz.2.193': attribute type 4 has an invalid length. [ 161.572361][ T6749] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.009450][ T30] audit: type=1400 audit(1768146272.416:324): avc: denied { create } for pid=6755 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 162.050519][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 162.074067][ T30] audit: type=1400 audit(1768146272.476:325): avc: denied { create } for pid=6755 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.099072][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 162.214312][ T30] audit: type=1400 audit(1768146272.626:326): avc: denied { watch watch_reads } for pid=6753 comm="syz.0.195" path="/32" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 162.980427][ T30] audit: type=1400 audit(1768146272.636:327): avc: denied { setopt } for pid=6758 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.129812][ T30] audit: type=1400 audit(1768146273.526:328): avc: denied { setopt } for pid=6769 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.521171][ T30] audit: type=1400 audit(1768146273.916:329): avc: denied { create } for pid=6773 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 163.938991][ T6786] netem: change failed [ 163.946185][ T6788] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 164.727358][ T30] audit: type=1400 audit(1768146275.136:330): avc: denied { ioctl } for pid=6791 comm="syz.3.205" path="socket:[11158]" dev="sockfs" ino=11158 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.984007][ T6795] tipc: Started in network mode [ 165.585191][ T6795] tipc: Node identity 9e6f1778c23f, cluster identity 4711 [ 165.595502][ T30] audit: type=1400 audit(1768146275.996:331): avc: denied { ioctl } for pid=6791 comm="syz.3.205" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 165.625250][ T6795] tipc: Enabled bearer , priority 0 [ 271.629940][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 271.636925][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6187/1:b..l [ 271.645154][ C0] rcu: (detected by 0, t=10502 jiffies, g=13749, q=707 ncpus=2) [ 271.652875][ C0] task:udevd state:R running task stack:25752 pid:6187 tgid:6187 ppid:5185 task_flags:0x400140 flags:0x00080000 [ 271.667194][ C0] Call Trace: [ 271.670475][ C0] [ 271.673402][ C0] ? __schedule+0x10b9/0x6150 [ 271.678090][ C0] __schedule+0x1139/0x6150 [ 271.682620][ C0] ? __pfx___schedule+0x10/0x10 [ 271.687474][ C0] ? mark_held_locks+0x49/0x80 [ 271.692241][ C0] preempt_schedule_irq+0x51/0x90 [ 271.697268][ C0] irqentry_exit+0x1d8/0x8c0 [ 271.701871][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.707876][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 271.714127][ C0] Code: 90 90 90 90 f3 0f 1e fa 8b 05 56 83 10 05 85 c0 74 20 8b 05 00 b3 10 05 85 c0 74 16 65 48 8b 05 98 78 3a 08 8b 80 2c 0b 00 00 <85> c0 0f 94 c0 0f b6 c0 e9 0d 2c 03 00 66 2e 0f 1f 84 00 00 00 00 [ 271.733731][ C0] RSP: 0018:ffffc9000c537798 EFLAGS: 00000202 [ 271.739794][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00000000e6304215 [ 271.747763][ C0] RDX: 0000000000000000 RSI: ffffffff8daa89dc RDI: ffffffff8bf2b400 [ 271.755987][ C0] RBP: ffffc9000c537860 R08: 000000002d5ba6a8 R09: 0000000082d5ba6a [ 271.763958][ C0] R10: 0000000000000002 R11: ffff88802c72aff0 R12: ffffffff81a96130 [ 271.771924][ C0] R13: ffffc9000c537818 R14: 0000000000000000 R15: ffff88802c72a4c0 [ 271.779892][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 271.786064][ C0] unwind_next_frame+0xd6/0x20b0 [ 271.791003][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 271.796114][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 271.801142][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 271.807292][ C0] arch_stack_walk+0x94/0x100 [ 271.811979][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 271.817014][ C0] stack_trace_save+0x8e/0xc0 [ 271.821688][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 271.827067][ C0] ? rcu_is_watching+0x12/0xc0 [ 271.831841][ C0] ? kfree+0x27d/0x6e0 [ 271.835911][ C0] ? find_held_lock+0x2b/0x80 [ 271.840599][ C0] kasan_save_stack+0x33/0x60 [ 271.845277][ C0] ? kasan_save_stack+0x33/0x60 [ 271.850125][ C0] ? kasan_save_track+0x14/0x30 [ 271.854975][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 271.860041][ C0] kasan_save_track+0x14/0x30 [ 271.864721][ C0] __kasan_slab_alloc+0x89/0x90 [ 271.869576][ C0] kmem_cache_alloc_lru_noprof+0x262/0x770 [ 271.875379][ C0] ? shmem_alloc_inode+0x25/0x50 [ 271.880322][ C0] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 271.885780][ C0] ? shmem_alloc_inode+0x25/0x50 [ 271.890714][ C0] shmem_alloc_inode+0x25/0x50 [ 271.895476][ C0] alloc_inode+0x64/0x240 [ 271.899804][ C0] new_inode+0x22/0x1c0 [ 271.903961][ C0] shmem_get_inode+0x19a/0xfb0 [ 271.908731][ C0] shmem_symlink+0xf4/0x960 [ 271.913237][ C0] ? __pfx_shmem_symlink+0x10/0x10 [ 271.918348][ C0] ? bpf_lsm_inode_permission+0x9/0x10 [ 271.923818][ C0] ? security_inode_permission+0xbf/0x260 [ 271.929545][ C0] vfs_symlink+0x4b5/0x800 [ 271.933963][ C0] do_symlinkat+0x353/0x4b0 [ 271.938472][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 271.943501][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 271.948873][ C0] __x64_sys_symlink+0x75/0x90 [ 271.953641][ C0] do_syscall_64+0xcd/0xf80 [ 271.958150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.964044][ C0] RIP: 0033:0x7fcbea115527 [ 271.968450][ C0] RSP: 002b:00007ffd8189e6f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 271.976856][ C0] RAX: ffffffffffffffda RBX: 000055bc0adb6cf0 RCX: 00007fcbea115527 [ 271.984820][ C0] RDX: fffffffffffffe68 RSI: 00007ffd8189e700 RDI: 000055bc0adaa6b0 [ 271.992785][ C0] RBP: 0000000000000104 R08: 0000000000000064 R09: 0000000000000000 [ 272.000745][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd8189e700 [ 272.008703][ C0] R13: 000055bc0ada38d0 R14: 0000000000000008 R15: 000055bc0adb6cf0 [ 272.016685][ C0] [ 272.019696][ C0] rcu: rcu_preempt kthread starved for 10538 jiffies! g13749 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 272.030888][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 272.040846][ C0] rcu: RCU grace-period kthread stack dump: [ 272.046717][ C0] task:rcu_preempt state:R running task stack:28024 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 272.060219][ C0] Call Trace: [ 272.063488][ C0] [ 272.066427][ C0] ? __schedule+0x10b9/0x6150 [ 272.071108][ C0] __schedule+0x1139/0x6150 [ 272.075626][ C0] ? __pfx___schedule+0x10/0x10 [ 272.080474][ C0] ? find_held_lock+0x2b/0x80 [ 272.085157][ C0] ? schedule+0x2d7/0x3a0 [ 272.089490][ C0] schedule+0xe7/0x3a0 [ 272.093557][ C0] schedule_timeout+0x123/0x290 [ 272.098403][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 272.103779][ C0] ? __pfx_process_timeout+0x10/0x10 [ 272.109064][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 272.114870][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 272.120334][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 272.125106][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 272.130391][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.135603][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 272.140537][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 272.145395][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 272.151209][ C0] rcu_gp_kthread+0x26d/0x380 [ 272.155888][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.161083][ C0] ? rcu_is_watching+0x12/0xc0 [ 272.165840][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.171039][ C0] ? __kthread_parkme+0x19e/0x250 [ 272.176059][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.181258][ C0] kthread+0x3c5/0x780 [ 272.185327][ C0] ? __pfx_kthread+0x10/0x10 [ 272.189916][ C0] ? rcu_is_watching+0x12/0xc0 [ 272.194667][ C0] ? __pfx_kthread+0x10/0x10 [ 272.199255][ C0] ret_from_fork+0x983/0xb10 [ 272.203843][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 272.208953][ C0] ? __switch_to+0x7af/0x10d0 [ 272.213630][ C0] ? __pfx_kthread+0x10/0x10 [ 272.218227][ C0] ret_from_fork_asm+0x1a/0x30 [ 272.223023][ C0] [ 272.226038][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 272.232368][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 272.241318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.251373][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 272.257023][ C0] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 272.276632][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 272.282693][ C0] RAX: 00000000005eae7d RBX: 0000000000000000 RCX: ffffffff8b7846d9 [ 272.290656][ C0] RDX: 0000000000000000 RSI: ffffffff8dacea71 RDI: ffffffff8bf2b400 [ 272.298627][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 272.306588][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 272.314557][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 272.322528][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 272.331457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.338033][ C0] CR2: 000000110c2700c5 CR3: 000000005001b000 CR4: 00000000003526f0 [ 272.345994][ C0] Call Trace: [ 272.349263][ C0] [ 272.352192][ C0] default_idle+0x13/0x20 [ 272.356527][ C0] default_idle_call+0x6c/0xb0 [ 272.361292][ C0] do_idle+0x38d/0x510 [ 272.365374][ C0] ? __pfx_do_idle+0x10/0x10 [ 272.369979][ C0] cpu_startup_entry+0x4f/0x60 [ 272.374745][ C0] rest_init+0x16b/0x2b0 [ 272.378977][ C0] ? acpi_subsystem_init+0x133/0x180 [ 272.384255][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 272.389795][ C0] start_kernel+0x3ef/0x4d0 [ 272.394294][ C0] x86_64_start_reservations+0x18/0x30 [ 272.399752][ C0] x86_64_start_kernel+0x130/0x190 [ 272.404857][ C0] common_startup_64+0x13e/0x148 [ 272.409804][ C0] [ 272.961415][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.971021][ T1295] ieee802154 phy0 wpan0: encryption failed: -22