last executing test programs: 19.266759325s ago: executing program 0 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000040), &(0x7f00000010c0)={'syz', 0x0}, &(0x7f0000001100)="5c34c5dff5be909c61588d50c0c54be9e88e221570c4118e3e2c18e31390475199be9c71212ba8eef1f0a728051f0485c0d1c4bb34a9d09c6496b710ff8342283684cacaed9f8f92f79274bc44d3c7fb20bf80f7c2a96d0e2b5f526178143b06937a89", 0x63, 0xfffffffffffffff8) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x80c4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x5c}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xc1, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080008) fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4048010) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xf) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 15.296611643s ago: executing program 1 (id=130): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df"], 0xc) epoll_create(0xb398) write$vga_arbiter(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="6465636f6465737a6e6f6e650095f0e45a84bfe4e146b511171fca9ea6cc279287766cf1e3b8bf20c88b0a70eada059ae68c5a783a7bb078452fb4f569c501b788758a271620a2e889c4f8d1287a82445f62030fe57a92f6a1428f9186ccc6de9b838b9ac28745149e20ec09cf0f5b6400d3257eb3cdff79fdeb85a098502094de2c"], 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) close_range(r0, 0xffffffffffffffff, 0x0) 14.207597338s ago: executing program 0 (id=132): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1000, 0x4, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x67, 0x0, 0x35, 0x2f, 0x0, @multicast2, @loopback}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = msgget$private(0x0, 0x508) msgsnd(r6, &(0x7f00000000c0)={0x1}, 0x8, 0x800) msgrcv(r6, &(0x7f00000004c0)={0x0, ""/179}, 0xbb, 0x1, 0x0) msgctl$IPC_RMID(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x60000000) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) 11.584736229s ago: executing program 1 (id=133): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x3, 0x6, 0x2, 0xb, 0xffffffffffffffff, 0xffffffffffffffe4}, @jmp={0x5, 0x0, 0xd, 0xb, 0x4, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x8, 0x8, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000400)=""/32, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff3}, 0x94) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000002c0)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r6, 0x25, 0x0, @void}, 0x10) close(r3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) 11.583852528s ago: executing program 2 (id=134): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) sendfile(r0, r1, 0x0, 0x8) (fail_nth: 3) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x3) 10.548388305s ago: executing program 2 (id=135): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000000000009) (fail_nth: 3) 10.40211127s ago: executing program 0 (id=136): r0 = socket(0x1e, 0x4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="01000000040000000000000000000000000000000000c7c7e000ac00"], 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) 10.364170232s ago: executing program 4 (id=137): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x1c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x8, 0x0, 0x9a9, 0x259, 0x3, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r3, 0x0, 0x2d, 0x0, @val=@kprobe_multi=@syms={0x0, 0x6, &(0x7f00000007c0)=[&(0x7f0000000200)='nl80211\x00', &(0x7f0000000240)='nl80211\x00', &(0x7f0000000300)='nl80211\x00', &(0x7f0000000400)='nl80211\x00', &(0x7f0000000580)='(\\$&-:]\x00', &(0x7f00000005c0)='\x00'], 0x0, 0x5}}, 0x30) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000440)="02", 0x1}, {&(0x7f00000002c0)="d6", 0x1}], 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000041190780000000000000000fffc4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b5589b2f304688032324251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d1392a4a271930200000003000400d8618a9848a3c728f1c441fc09d307febf6a6b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x50}], 0x1}, 0x0) write(r5, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000080000004200000040"], 0x50) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 9.654246786s ago: executing program 1 (id=138): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4040090) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x20008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000016c0)="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", 0x1ac}, {0x0}, {&(0x7f00000000c0)="4418686d68550b08c1b3a844a208c10d2668b63f7965227fe3829e81d8bddda15a36874d234109d8c5d18a31e143", 0x2e}], 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010300e200000000000100040000000000000000000000003b31111cbea4d9aa0e6106bd00616024daf611139dc9c06f5a03f58e8e35665be0b4c9d2be", @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="00f1ffffffffffffff00000000007147330697f51f14d1ea0d3244f30a68472c070085cf6b1b15efc7fa8ced3ac20297dab948cf2cd75a51cb1fd090b6c8a2817b6e149e95d865dac3631dd0d6f7367f8be4035abcd5e6b539413493a0b0000dcfa88268fc0ba13b5532839d6a3d5278673f34465c99af65734b8620c41eb1bfaac914c9190f632a8655c86907c244cb3114560bf81fcdc7238cc15dd5059616aa8a2407522a4c568303"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) io_setup(0x80000000, &(0x7f0000000a00)) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000001c0)=0x4) r3 = add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r3}, 0x0, 0x0, 0x0) 8.676611152s ago: executing program 2 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000200)=""/174, 0xae, 0x3b11) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) recvmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 6.588395059s ago: executing program 1 (id=140): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x60000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000402000000000000000300000002000000000000000000000604000000000017492efbe5a3632ce646004150d6e85d581a1cad4a5bc2fd9bc3c96dc91451ba72064a995d5a6a86d1248efe000ad39e0c3d3026ef63f295120e1858209df1b5c7e84a9db065cfbaa6b01d0b7c23a45573c74c6e6300"/159], 0x0, 0x4a, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000280)="9cad6eeec5252810341de30bbd228228a1839203178cb02be5990ec0c97a0d419395828ab589dd0d9ee7d909b4bed35bde20bc554f53ef93e03a6aa0701b7eca5d2b3a5c0806de90bb023b8df7f32c6bbdf3011a9a94b884589def5e9d13b22e8ab0e334b8e5f644d7af740f1c1128fee8a7cfab9f29068cb7bc9e012573a2a61f06c7b75a46a37b46d3ed1d9be589210c243f117485bf63be11926497faef158ad460511402ab351f19ba7d98b2cb88d41c014ff4a2dcec62cb94cf0e09ee6195e3639e713c0c706539614b85683d16bdbabf5f7b787fe190382a0041dd98b4948e325c8e70ad566b", 0xe9}, {&(0x7f00000003c0)="b33310", 0x3}, {&(0x7f0000000400)="ce93f3306b219fbdc30308ddd208dd196e5450874d6c37c2b6c76937e2fda08380b1eb88534700c8ff463eebc8ede30b35c27a2e5928323ce0910bae34111c30b80fd22ccfc5c73b7b2514dfe43c9499e18e692dd8bfa2e19adc6d5f2a708f8a8142369f20ef51d9fb6903bb9fb40e5ff9f6fa5d919720c296db904d5905b8fedfa4f8edf00acaf7bd186215d18b162f1d22be378b", 0x95}, {&(0x7f00000004c0)="50bb5742d419e676f85925020ca79a7fd0a8480fada1c8facc5f5f341d77a0ba71fa087724fc372d583d15312c36951414dfc7f022d0a08856aa3c14ec130c6ff81f193f997a4cfbdfbc8675026d495845242f8b9a3f4d0fa375eeb9ed7aef1c2cfdf596a40e23117b02f0f5056e83c6529ff39f6fd2ecabd31b5e8a65e0659a696326cb099ed7dc72c7d4c20c8aa845df240e5ae2b3c5d4b0c0e62d8129f1988d06f862b59fc98915f37f8fda72dd4d22b44d58f387df066a29fe643167cafaf72c01952f23c1d29fdba528da56a2", 0xcf}, {&(0x7f00000005c0)="d3ca48c71dfe7946675eaf540c35e5b88c85e44138a0621082aa8977312e8260569e8fed9a3b89952dd5fb8ef1a40071d63671b0abd2856c75aeca6c14066fc1d6d60c324420d3015f0493c8a9d50cc79b757b6a94ca1467f318b975148f180f0dbaa6afac1b6211220b7503e5092431f0f0ee0b776f34f5d343a0a4d0aa711d92bbe6b98013b23a0229f049413675e009b9ada6648d2117fbad1cac8b8181c4f8e5ac2fe3836390049c2b25873d44eb52bf2743eeeefac8be3b", 0xba}], 0x5) mprotect(&(0x7f0000560000/0x4000)=nil, 0x4000, 0x1000009) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_open_dev$dri(0x0, 0x1ff, 0x80800) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000cc0)={0x3, 0x4, {0x8, @struct={0x3ff, 0xe8ca}, 0x0, 0x9, 0x9, 0x0, 0x7, 0x200, 0x9, @usage=0x7fffffff, 0x50000, 0xfffffff7, [0x2, 0xf, 0x3, 0x1, 0x4cc, 0x7]}, {0xcd, @usage=0x6, 0x0, 0x800, 0xe0, 0x4, 0xffff, 0x3, 0x14, @struct={0x70, 0x4}, 0xa, 0xfffff816, [0xff, 0xf4, 0xc85, 0x400000000000, 0x0, 0x4]}, {0x51f, @usage=0x4, 0x0, 0x80000001, 0x8, 0x0, 0x34e, 0x5, 0x40d, @usage=0x6, 0x8, 0x10001, [0x7fffffffffffffff, 0x1000, 0x5, 0x8, 0x9, 0xe022]}, {0x6, 0x5}}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 6.572489605s ago: executing program 0 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc04"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffff7) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdc6a}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) 6.53398988s ago: executing program 3 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc04"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffff7) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdc6a}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) 6.472213523s ago: executing program 4 (id=143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write(r1, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 6.175111941s ago: executing program 4 (id=144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) poll(&(0x7f0000000080)=[{r1, 0x3a0}], 0x1, 0x76) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x20, 0x40, 0xbd, 0x0, {{0x1d, 0x4, 0x0, 0xe, 0x74, 0x65, 0x0, 0x6, 0x0, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x2, 0x8, "6d356cb32630"}, {0x7, 0xa, "86ffc2300c30dbb8"}, {0x7, 0x6, "03d74c42"}, {0x0, 0x5, 'H^S'}, {0x7, 0xd, "73e2b7e272b9a0167e023b"}, {0x7, 0xe, "c71815cc1d5d61c140be7b7c"}]}, @ssrr={0x89, 0x1f, 0x5d, [@broadcast, @private=0xa010100, @multicast2, @multicast1, @remote, @multicast2, @local]}]}}}}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000380)={0x0, 0x1, 0x20, r2, 0x3}, 0xc) 5.426309582s ago: executing program 0 (id=145): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x20040850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000020603000000000000000000000000030900020073797a300000000005000100070000000400078005000500020000000500010400000000fb57b29e0000000000000000a800395db96c019017e41ec080901116e537ce6f125b85989a20ce0095bdeb9b8b6a01c8b660cc257081a6c315bd11cffa996e3921f7a2b273518a24d54b4095d90aeceed619fab1039ea240939d51f5b15bb0a64fe87bac9edaa87797"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x48, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840), 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r6, 0x0}]) r8 = eventfd2(0x6, 0x800) io_cancel(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x7ff, r0, &(0x7f00000003c0)="93866683e84e1c9fc1458cee7e5af7dcc9a76d68093a703ad76db76aa42c28669cf6e88019bf9d49289dc02fbf2b52bfa7db1207ca0bb72f2e375bf08dc70f97abe580080e5d0e9de05457b9e4f10c315f36d274462d278ace", 0x59, 0x401, 0x0, 0x2, r8}, &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x33, &(0x7f0000000180), &(0x7f00000000c0)=[0x3], &(0x7f0000000200), &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 5.389595742s ago: executing program 3 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000400)=ANY=[], 0xb0, &(0x7f00000003c0)='smaps\x00') syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x7}, @CTA_FILTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000001500)={0x2020}, 0x2020) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000000140)={0x406, 0x7, 0x4}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000240)=0x8000000010) 5.256193842s ago: executing program 4 (id=147): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 3) 3.974998124s ago: executing program 3 (id=148): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x3, 0x6, 0x2, 0xb, 0xffffffffffffffff, 0xffffffffffffffe4}, @jmp={0x5, 0x0, 0xd, 0xb, 0x4, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x8, 0x8, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000400)=""/32, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff3}, 0x94) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000002c0)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r6, 0x25, 0x0, @void}, 0x10) close(r3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) 3.704256807s ago: executing program 2 (id=149): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 3.644366339s ago: executing program 4 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004840, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@gettaction={0x2c, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 1.788589721s ago: executing program 3 (id=151): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000005000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x8, &(0x7f0000000980)="000000000065c6667d3723f691d8", &(0x7f0000000600)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2fde502b8", 0x71}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466b12d", 0x3e}], 0x4}}], 0x1, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00), 0x3fffffffffffde1, 0x4000900) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'bond_slave_1\x00', 0x1}) 1.578327553s ago: executing program 4 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x200000000000000) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/52, 0x34) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7], 0x7c}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.24130402s ago: executing program 2 (id=153): r0 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0xe5f3, 0x1000, 0x3, 0x3d}, &(0x7f0000000640)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_GETXATTR={0x2c, 0x1c, 0x0, 0x0, 0x0, &(0x7f0000000500)="10", 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, &(0x7f00000108c0)='./file0\x00'}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x23, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x9, 0xd, 0x0, 0xfffffffc, 0x83, "db8fd2e79000"}) write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r7, 0x5403, &(0x7f00000002c0)={0x696, 0xf3, 0xffefffff, 0x4000005, 0x14, "09000000379100000001ac45b57d00"}) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000001c0)={0x0, 0x8, 0x19, 0x3d50, 0x8, "00ef001600000472c4cefe00000000000067fd"}) r8 = syz_open_pts(r7, 0x101000) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000000ac0)={{r7}, "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"}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000240)=0x1) r9 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffd, 0x2901) ioctl$BLKGETSIZE64(r9, 0x80081272, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11, 0xa006}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x24, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x1b, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x144}}, 0x0) io_uring_enter(r0, 0x1002000, 0xfffffff5, 0x27, 0x0, 0x0) 1.136064861s ago: executing program 0 (id=154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088cda533cf3b0b381b8aeb5020d8404464a2dd024e928fe37135"], 0x60}}, 0x200040c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0x400) mount$overlay(0x0, 0x0, 0x0, 0x1010, &(0x7f00000001c0)={[], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}], 0x2f}) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r2 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x4000, 0x1fffd, 0x3, 0x0, r1}, &(0x7f0000000440)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f00000025c0)=@ublk_io_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x8b1f, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x1, 0x849, 0xc, 0x0}}) syz_ublk_setup_io_uring(0x50d8, &(0x7f0000000000)={0x0, 0x9df, 0x800, 0x1, 0x3c9}, &(0x7f00000004c0)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_submit(r7, r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, r6}}) io_uring_enter(r2, 0x20, 0xd9db, 0x8, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001500"/28], 0x48) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, 0x0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r9, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="200327bd7000e5ffb6ff7f00000b00080015f1ece81105"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48011) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r15}, &(0x7f0000000280), &(0x7f0000000240)=r12}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r15, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r16, 0x4) sendmsg$inet(r14, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) r17 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) 1.117923867s ago: executing program 1 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc04"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffff7) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdc6a}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) 590.940402ms ago: executing program 3 (id=156): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x10004000) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) 449.654459ms ago: executing program 1 (id=157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f07de) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x100871}) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000140)=""/87, 0x57}, {&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/236, 0xec}, {&(0x7f0000001bc0)=""/190, 0xbe}, {&(0x7f0000001c80)=""/98, 0x62}], 0x6, &(0x7f0000001d80)=""/191, 0xbf}, 0x2fef}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_clone3(&(0x7f0000000500)={0x80100080, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x20}, &(0x7f00000001c0)=""/30, 0x1e, &(0x7f00000003c0)=""/241, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58) ptrace$poke(0x4, r4, &(0x7f0000000580), 0x1) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) listen(0xffffffffffffffff, 0x8) r5 = memfd_create(0x0, 0x0) ftruncate(r5, 0xdcb) pread64(r5, &(0x7f00000009c0)=""/239, 0xef, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x100, 0x7, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80000, 0x20000004, 0x0, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0xffffffff, 0x20000006, 0x6, 0xfe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x1, 0x80, 0x3cb, 0x81, 0x7, 0xff]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) 193.894758ms ago: executing program 3 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a34, 0x11008}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x50}}, 0x4008000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 0s ago: executing program 2 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000080), &(0x7f0000000340)=r2}, 0x20) writev(r1, &(0x7f0000002b40)=[{&(0x7f0000000380)="731ff878a69ae969c787447410c41f08444a2122765e97954d2bf599d82cc2800d89c470e076e6fff5cfa1e7323f343270c822cbdf458d66327358f533bc64dd4ae2ffb632", 0x45}, {&(0x7f0000001880)="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", 0x10a2}, {&(0x7f0000000400)="533567c23fbf097f0b2d3ab6cc2a90e5ab5c17876ca10d4d8fbc833d9d86c5f4c2b2f5a624b0043eba78fd153ef19e188455bacca88ae4a4835e34370eb8fd06eded37dfe79bc3630dbc0f4d998aa1450ce93a010000000000000073e42cbd187cc44c6d8c17bc0710ed3bfccdf860da4c0c2a383a36bca86b8cfd03b839c139a9469c9a3e9825bc8b2b4d39b13b8887fe3c6310f9ee9020e1bbef4000438f6f6f46738c45a0b00116ae205c6526da0103d2b415e1bac2f0ff34ceabdc", 0xbd}, {&(0x7f0000002940)="751fa5b44845484513f88311cf2f0c994b04475ea21a8545f3fbc0341415fceb332f14cadeda2e8b45fccd6cefa25f36577f7a0e4c7234bac83e8a997f8fbd2ee501300ae820638c41c9c676486159bbec5e9ca9e3011fd20178a7871f5df72075e50550c756437ad6443ca8100ddecc5cd77656ae1857f280bf0d00fb264306a8649a334ac92291519e38509518b0c585d3861bf7d17c7f436079bd661ddfb0127f3c25ab38fed270639ed604db4c1cae1b1161bb3c4af3a6b65e0621", 0xbd}, {&(0x7f0000002a40)="5990eec1566915905e5b55e678e802a5663fb6e42dc479275b67a274e55bde21b0d62741c4dbc0432f935748bae9b86104a0e0db096be682c97920d9d6aa717e575e1e169eac19f46fec790f42645d0ccbff06745f996cee5428f5c305c7745408a852e74812461718abbadeb121a606671e4d7b0db46a19d6129a63", 0x7c}, {&(0x7f0000002ac0)="d4f4eae13379537d715b7417143359fc0b31194d8eb17560ec68c7350c417f5d3895ecb77a8cd5a3fb88adbf660104ca91474e0f6c20a8cda570af5811933453cfd61fac8222bb88c2753cd45299ca09f1f2f52f3ca64584ba55a84a11bec7694f376d36e62ead230c853230ba13aec73e5e96766d964cf203186423c70f", 0x7e}], 0x6) recvmmsg$unix(r2, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000500), 0x100000, 0x432502) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) kernel console output (not intermixed with test programs): [ 52.901284][ T30] audit: type=1400 audit(1784952483.601:111): avc: denied { write } for pid=5458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.957914][ T30] audit: type=1400 audit(1784952483.661:112): avc: denied { write } for pid=5469 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.842642][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 54.842657][ T30] audit: type=1400 audit(1784952485.541:127): avc: denied { write } for pid=5570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.902801][ T30] audit: type=1400 audit(1784952485.601:128): avc: denied { write } for pid=5581 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 60.121143][ T30] audit: type=1400 audit(1784952490.821:129): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.145030][ T30] audit: type=1400 audit(1784952490.851:130): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.147924][ T5593] cgroup: Unknown subsys name 'net' [ 60.176453][ T30] audit: type=1400 audit(1784952490.881:131): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.296532][ T5593] cgroup: Unknown subsys name 'cpuset' [ 60.304322][ T5593] cgroup: Unknown subsys name 'rlimit' [ 60.423203][ T30] audit: type=1400 audit(1784952491.121:132): avc: denied { setattr } for pid=5593 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.456179][ T30] audit: type=1400 audit(1784952491.121:133): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.476988][ T30] audit: type=1400 audit(1784952491.131:134): avc: denied { write } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.499612][ T30] audit: type=1400 audit(1784952491.131:135): avc: denied { read } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.520987][ T30] audit: type=1400 audit(1784952491.141:136): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.546008][ T30] audit: type=1400 audit(1784952491.141:137): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.550768][ T5595] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.579132][ T30] audit: type=1400 audit(1784952491.281:138): avc: denied { relabelto } for pid=5595 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.520805][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.543699][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.551769][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.557051][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.567390][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.568136][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.583372][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.583772][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.591849][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.599459][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.606202][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.612768][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.620260][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.627648][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.634717][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.641014][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.647204][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.656567][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.663219][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.669584][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.684002][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.692744][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.693332][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.703015][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.707421][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.721397][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.822994][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.839284][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.846968][ T5606] bridge_slave_0: entered allmulticast mode [ 64.855174][ T5606] bridge_slave_0: entered promiscuous mode [ 64.864953][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.872073][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.880770][ T5606] bridge_slave_1: entered allmulticast mode [ 64.887549][ T5606] bridge_slave_1: entered promiscuous mode [ 64.951509][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.000939][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.091876][ T5606] team0: Port device team_slave_0 added [ 65.101772][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.109084][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.116352][ T5607] bridge_slave_0: entered allmulticast mode [ 65.123013][ T5607] bridge_slave_0: entered promiscuous mode [ 65.143162][ T5606] team0: Port device team_slave_1 added [ 65.157124][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.164257][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.171347][ T5607] bridge_slave_1: entered allmulticast mode [ 65.178220][ T5607] bridge_slave_1: entered promiscuous mode [ 65.184842][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.191936][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.199122][ T5609] bridge_slave_0: entered allmulticast mode [ 65.205808][ T5609] bridge_slave_0: entered promiscuous mode [ 65.237710][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.244974][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.252076][ T5609] bridge_slave_1: entered allmulticast mode [ 65.258962][ T5609] bridge_slave_1: entered promiscuous mode [ 65.265819][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.272885][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.280093][ T5608] bridge_slave_0: entered allmulticast mode [ 65.286731][ T5608] bridge_slave_0: entered promiscuous mode [ 65.314826][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.321972][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.329342][ T5608] bridge_slave_1: entered allmulticast mode [ 65.336196][ T5608] bridge_slave_1: entered promiscuous mode [ 65.343419][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.350513][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.376434][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.388860][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.395817][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.422156][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.438346][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.471128][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.482040][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.493138][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.534907][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.565139][ T5609] team0: Port device team_slave_0 added [ 65.572221][ T5609] team0: Port device team_slave_1 added [ 65.579389][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.588710][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.595970][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.603070][ T5605] bridge_slave_0: entered allmulticast mode [ 65.610190][ T5605] bridge_slave_0: entered promiscuous mode [ 65.618340][ T5607] team0: Port device team_slave_0 added [ 65.647900][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.655136][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.662243][ T5605] bridge_slave_1: entered allmulticast mode [ 65.669173][ T5605] bridge_slave_1: entered promiscuous mode [ 65.677411][ T5607] team0: Port device team_slave_1 added [ 65.687011][ T5606] hsr_slave_0: entered promiscuous mode [ 65.693289][ T5606] hsr_slave_1: entered promiscuous mode [ 65.713315][ T5608] team0: Port device team_slave_0 added [ 65.738990][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.746098][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.756408][ T5611] Bluetooth: hci3: command tx timeout [ 65.772455][ T5618] Bluetooth: hci2: command tx timeout [ 65.778065][ T49] Bluetooth: hci0: command tx timeout [ 65.783536][ T5618] Bluetooth: hci1: command tx timeout [ 65.789445][ T5611] Bluetooth: hci4: command tx timeout [ 65.795555][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.811576][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.819187][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.846678][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.847366][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.859579][ T5608] team0: Port device team_slave_1 added [ 65.864168][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.891011][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.897991][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.924371][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.941314][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.948598][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.974794][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.993863][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.019608][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.026725][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.052630][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.065178][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.094667][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.101686][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.127613][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.153098][ T5605] team0: Port device team_slave_0 added [ 66.181502][ T5605] team0: Port device team_slave_1 added [ 66.205700][ T5609] hsr_slave_0: entered promiscuous mode [ 66.211782][ T5609] hsr_slave_1: entered promiscuous mode [ 66.217934][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 66.223699][ T5609] Cannot create hsr debugfs directory [ 66.262673][ T5607] hsr_slave_0: entered promiscuous mode [ 66.268867][ T5607] hsr_slave_1: entered promiscuous mode [ 66.275213][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 66.280924][ T5607] Cannot create hsr debugfs directory [ 66.293397][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.300518][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.327070][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.338854][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.345951][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.371861][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.425732][ T5608] hsr_slave_0: entered promiscuous mode [ 66.431796][ T5608] hsr_slave_1: entered promiscuous mode [ 66.438061][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 66.443842][ T5608] Cannot create hsr debugfs directory [ 66.560965][ T5605] hsr_slave_0: entered promiscuous mode [ 66.567198][ T5605] hsr_slave_1: entered promiscuous mode [ 66.573119][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 66.579654][ T5605] Cannot create hsr debugfs directory [ 66.724616][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.735915][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.761694][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.771546][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.798174][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.807684][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.825362][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.834931][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.889970][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.904200][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.919837][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.929977][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.940373][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.948951][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.963956][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.973003][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.039195][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.048414][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.056644][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.065660][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.075126][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.083483][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.094607][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.105637][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.183090][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.194715][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.210473][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.218978][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.227997][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.237099][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.247279][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.265213][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.274349][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.315208][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.343533][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.350972][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.370024][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.396308][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.403398][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.411097][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.420202][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.430837][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.439929][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.455103][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.464778][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.473060][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.482224][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.510693][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.525871][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.532958][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.557182][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.564350][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.620742][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.670424][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.714818][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.721934][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.750853][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.763564][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.770736][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.836818][ T49] Bluetooth: hci0: command tx timeout [ 67.842689][ T5611] Bluetooth: hci4: command tx timeout [ 67.842917][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.850344][ T49] Bluetooth: hci1: command tx timeout [ 67.856793][ T5618] Bluetooth: hci3: command tx timeout [ 67.861987][ T5611] Bluetooth: hci2: command tx timeout [ 67.919417][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.933637][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.940816][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.983563][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.990681][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.021244][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.047985][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.055136][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.107098][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.114256][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.306422][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.461058][ T5606] veth0_vlan: entered promiscuous mode [ 68.497653][ T5606] veth1_vlan: entered promiscuous mode [ 68.518686][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.625993][ T5606] veth0_macvtap: entered promiscuous mode [ 68.658574][ T5606] veth1_macvtap: entered promiscuous mode [ 68.716645][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.760767][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.817751][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.845742][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.860588][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.887943][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.923654][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.011720][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.067277][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.098697][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.109858][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.123398][ T5608] veth0_vlan: entered promiscuous mode [ 69.161917][ T5608] veth1_vlan: entered promiscuous mode [ 69.171706][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.179815][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.187182][ T5609] veth0_vlan: entered promiscuous mode [ 69.208579][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 69.208595][ T30] audit: type=1400 audit(1784952499.911:152): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.isg2Vn/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.209247][ T5605] veth0_vlan: entered promiscuous mode [ 69.223980][ T30] audit: type=1400 audit(1784952499.921:153): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.274768][ T30] audit: type=1400 audit(1784952499.921:154): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.isg2Vn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.314113][ T5609] veth1_vlan: entered promiscuous mode [ 69.328558][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.337193][ T5609] veth0_macvtap: entered promiscuous mode [ 69.349259][ T30] audit: type=1400 audit(1784952499.921:155): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.373376][ T5605] veth1_vlan: entered promiscuous mode [ 69.376048][ T30] audit: type=1400 audit(1784952499.921:156): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.isg2Vn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.409221][ T30] audit: type=1400 audit(1784952499.971:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.isg2Vn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.462242][ T5608] veth0_macvtap: entered promiscuous mode [ 69.488775][ T5609] veth1_macvtap: entered promiscuous mode [ 69.494653][ T30] audit: type=1400 audit(1784952499.981:158): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.508883][ T5608] veth1_macvtap: entered promiscuous mode [ 69.523276][ T30] audit: type=1400 audit(1784952500.001:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.548812][ T30] audit: type=1400 audit(1784952500.001:160): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=6898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.575860][ T5607] veth0_vlan: entered promiscuous mode [ 69.577050][ T30] audit: type=1400 audit(1784952500.011:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.591881][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.612084][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.627828][ T5795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.632286][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.663207][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.673721][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.689133][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.696916][ T5605] veth0_macvtap: entered promiscuous mode [ 69.705253][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.716594][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.726285][ T5607] veth1_vlan: entered promiscuous mode [ 69.744421][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.766249][ T5605] veth1_macvtap: entered promiscuous mode [ 69.791234][ T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.801264][ T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.831614][ T148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.852365][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.918587][ T49] Bluetooth: hci1: command tx timeout [ 69.924126][ T5611] Bluetooth: hci2: command tx timeout [ 69.926429][ T5618] Bluetooth: hci3: command tx timeout [ 69.929626][ T49] Bluetooth: hci4: command tx timeout [ 69.937255][ T4925] Bluetooth: hci0: command tx timeout [ 70.114290][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.344648][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.381385][ T5607] veth0_macvtap: entered promiscuous mode [ 70.417018][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.437293][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.459232][ T5607] veth1_macvtap: entered promiscuous mode [ 70.476517][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.499481][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.564685][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.602477][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.640342][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.668958][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.689383][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.699690][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.927534][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.940763][ T5798] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 70.981213][ T5798] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.988224][ T5798] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 71.021422][ T5798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.027459][ T5798] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 71.057475][ T5798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.068063][ T5798] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 71.126577][ T5798] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 71.133049][ T5798] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 71.373269][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.409685][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.467921][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.493500][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.495576][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.503639][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.575232][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.596747][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.647830][ T5777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.675575][ T5777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.733385][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.757066][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.836109][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.879042][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.956738][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.998951][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.319331][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.345532][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.381360][ T5851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.466412][ T5859] : renamed from bond0 (while UP) [ 73.782476][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 73.819421][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.867487][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.911951][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.186870][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.196144][ T5877] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.205089][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.213722][ T5877] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.223565][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.260441][ T5878] fuse: Bad value for 'fd' [ 74.285725][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 74.285754][ T30] audit: type=1400 audit(1784952504.851:201): avc: denied { create } for pid=5873 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.417118][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.425589][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.435893][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.444817][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.461289][ T30] audit: type=1400 audit(1784952504.861:202): avc: denied { read append } for pid=5873 comm="syz.2.9" name="usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.496169][ T30] audit: type=1400 audit(1784952504.861:203): avc: denied { open } for pid=5873 comm="syz.2.9" path="/dev/usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.541191][ T30] audit: type=1400 audit(1784952504.881:204): avc: denied { ioctl } for pid=5873 comm="syz.2.9" path="/dev/usbmon5" dev="devtmpfs" ino=732 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.566463][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.596874][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.656109][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.679313][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.688497][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.688530][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.690577][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.701872][ T5877] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.723274][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.728224][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.728246][ T5877] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.728324][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 74.898103][ T30] audit: type=1400 audit(1784952504.881:205): avc: denied { setopt } for pid=5873 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.961345][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.056702][ T30] audit: type=1400 audit(1784952504.961:206): avc: denied { mounton } for pid=5873 comm="syz.2.9" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 75.145811][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.168972][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.181104][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.242300][ T30] audit: type=1400 audit(1784952505.241:207): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.318212][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.343614][ T30] audit: type=1400 audit(1784952505.991:208): avc: denied { write } for pid=5857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.393607][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 75.444793][ T5891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'. [ 75.473880][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.496209][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.530996][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.160682][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.204309][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.242984][ T30] audit: type=1400 audit(1784952506.941:209): avc: denied { write } for pid=5892 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.276953][ T9] usb 4-1: unable to read config index 6 descriptor/start: -71 [ 76.294122][ T9] usb 4-1: can't read configurations, error -71 [ 76.451078][ T30] audit: type=1400 audit(1784952507.151:210): avc: denied { create } for pid=5898 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.071900][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 77.115677][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 77.856228][ T5934] xt_hashlimit: size too large, truncated to 1048576 [ 78.366438][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.736613][ T5945] syzkaller0: entered promiscuous mode [ 78.763715][ T5945] syzkaller0: entered allmulticast mode [ 79.208730][ T5736] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.295524][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 79.295556][ T30] audit: type=1400 audit(1784952509.981:247): avc: denied { read write } for pid=5959 comm="syz.0.20" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.572575][ T30] audit: type=1400 audit(1784952509.981:248): avc: denied { open } for pid=5959 comm="syz.0.20" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.709834][ T30] audit: type=1400 audit(1784952510.411:249): avc: denied { mounton } for pid=5970 comm="syz.4.21" path="/3/file1" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.731948][ T5736] usb 3-1: Using ep0 maxpacket: 16 [ 79.759397][ T5736] usb 3-1: config 0 has no interfaces? [ 79.777974][ T5736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.855410][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.868546][ T30] audit: type=1800 audit(1784952510.471:250): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.20" name="/" dev="fuse" ino=1 res=0 errno=0 [ 79.893849][ T5736] usb 3-1: Product: syz [ 79.898067][ T5736] usb 3-1: Manufacturer: syz [ 79.903653][ T5736] usb 3-1: SerialNumber: syz [ 80.031482][ T30] audit: type=1400 audit(1784952510.541:251): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 80.317048][ T5736] usb 3-1: config 0 descriptor?? [ 80.387555][ T5978] __nla_validate_parse: 13 callbacks suppressed [ 80.387566][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 80.475791][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 80.498010][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 80.530760][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 80.938897][ T30] audit: type=1400 audit(1784952511.641:252): avc: denied { create } for pid=5953 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.006593][ T30] audit: type=1400 audit(1784952511.701:253): avc: denied { create } for pid=5991 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.079265][ T30] audit: type=1400 audit(1784952511.741:254): avc: denied { create } for pid=5991 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.138273][ T5995] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25'. [ 81.156993][ T5995] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25'. [ 81.376526][ T30] audit: type=1400 audit(1784952511.741:255): avc: denied { read write } for pid=5991 comm="syz.4.25" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.668964][ T30] audit: type=1400 audit(1784952511.741:256): avc: denied { open } for pid=5991 comm="syz.4.25" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.021569][ T29] cfg80211: failed to load regulatory.db [ 82.094569][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 82.105191][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'. [ 82.108738][ T5997] loop5: detected capacity change from 0 to 7 [ 83.201944][ T5997] loop5: [POWERTEC] p1 p2 p3 [ 83.253324][ T5997] loop5: p1 size 1919942656 extends beyond EOD, truncated [ 83.269201][ T9] usb 3-1: USB disconnect, device number 2 [ 83.330792][ T5997] loop5: p2 start 876163636 is beyond EOD, truncated [ 83.365323][ T5997] loop5: p3 start 29360128 is beyond EOD, truncated [ 83.443374][ T6014] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 83.470794][ T6014] netlink: 232 bytes leftover after parsing attributes in process `syz.2.31'. [ 83.526374][ T6014] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 83.668873][ T6017] i2c i2c-0: new_device: Missing parameters [ 84.030728][ T5830] udevd[5830]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 84.559723][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 84.559739][ T30] audit: type=1400 audit(1784952515.251:279): avc: denied { create } for pid=6019 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.635057][ T6020] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 84.643715][ T30] audit: type=1400 audit(1784952515.251:280): avc: denied { write } for pid=6019 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.769111][ T30] audit: type=1400 audit(1784952515.411:281): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 84.902398][ T6029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.059723][ T30] audit: type=1400 audit(1784952515.711:282): avc: denied { mount } for pid=6025 comm="syz.2.34" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.336597][ T5793] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.426509][ T30] audit: type=1400 audit(1784952516.131:283): avc: denied { create } for pid=6008 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.495604][ T5793] usb 1-1: Using ep0 maxpacket: 32 [ 85.507155][ T5793] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 85.517877][ T5793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.532076][ T5793] usb 1-1: config 0 has no interface number 0 [ 85.540683][ T5793] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.541896][ T6036] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 85.554575][ T5793] usb 1-1: config 0 interface 196 has no altsetting 0 [ 85.569627][ T5793] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 85.579720][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.589282][ T30] audit: type=1800 audit(1784952516.291:284): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.34" name="/" dev="fuse" ino=1 res=0 errno=0 [ 85.594479][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.620306][ T5793] usb 1-1: Product: syz [ 85.625175][ T5793] usb 1-1: Manufacturer: syz [ 85.629880][ T5793] usb 1-1: SerialNumber: syz [ 85.681158][ T30] audit: type=1400 audit(1784952516.371:285): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.733860][ T5793] usb 1-1: config 0 descriptor?? [ 85.776994][ T5793] ipheth 1-1:0.196: Unable to find endpoints [ 85.823901][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 85.882944][ T29] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.930327][ T30] audit: type=1400 audit(1784952516.611:286): avc: denied { name_bind } for pid=6037 comm="syz.2.36" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.002937][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.059302][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.384255][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 86.546820][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.633695][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.713992][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 86.758107][ T29] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 86.790033][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.944955][ T190] usb 1-1: USB disconnect, device number 2 [ 87.098814][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.108025][ T30] audit: type=1400 audit(1784952516.621:287): avc: denied { node_bind } for pid=6037 comm="syz.2.36" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.474754][ T9] usb 4-1: config 0 descriptor?? [ 87.504698][ T29] usb 2-1: config 0 descriptor?? [ 87.783151][ T6052] i2c i2c-0: new_device: Missing parameters [ 88.737539][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 88.743562][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 88.777340][ T29] usb 2-1: USB disconnect, device number 2 [ 88.796371][ T9] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 89.360932][ T30] audit: type=1400 audit(1784952519.571:288): avc: denied { write } for pid=6056 comm="syz.0.41" name="functions" dev="configfs" ino=8767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.458722][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 89.467600][ T6061] netlink: 348 bytes leftover after parsing attributes in process `syz.2.40'. [ 89.476787][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 89.485513][ T6061] netlink: 348 bytes leftover after parsing attributes in process `syz.2.40'. [ 89.494656][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 89.970612][ T30] audit: type=1400 audit(1784952519.611:289): avc: denied { write } for pid=6056 comm="syz.0.41" name="max_segment_size" dev="configfs" ino=8824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 90.028161][ T9] usb 4-1: USB disconnect, device number 4 [ 90.034364][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.043169][ T6061] netlink: 348 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.052998][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.061867][ T6061] netlink: 348 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.070823][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.130782][ T30] audit: type=1400 audit(1784952519.611:290): avc: denied { open } for pid=6056 comm="syz.0.41" path="/8/mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size" dev="configfs" ino=8824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 91.331012][ T30] audit: type=1800 audit(1784952520.771:291): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.40" name="/" dev="fuse" ino=1 res=0 errno=0 [ 91.339515][ T6083] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 91.364537][ T6082] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 91.384786][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 91.418607][ T30] audit: type=1400 audit(1784952522.031:292): avc: denied { append } for pid=6081 comm="syz.2.45" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.442696][ T6083] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 91.506491][ T30] audit: type=1400 audit(1784952522.121:293): avc: denied { create } for pid=6085 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.569924][ T6086] No such timeout policy "syz1" [ 91.577580][ T30] audit: type=1400 audit(1784952522.121:294): avc: denied { setopt } for pid=6085 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.588737][ T6091] loop5: detected capacity change from 0 to 7 [ 91.632826][ T6091] Dev loop5: unable to read RDB block 7 [ 91.648347][ T6091] loop5: unable to read partition table [ 91.654978][ T30] audit: type=1400 audit(1784952522.191:295): avc: denied { ioctl } for pid=6084 comm="syz.3.48" path="socket:[9727]" dev="sockfs" ino=9727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.680636][ T6091] loop5: partition table beyond EOD, truncated [ 91.710698][ T6091] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.750138][ T30] audit: type=1400 audit(1784952522.261:296): avc: denied { write } for pid=6090 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.813802][ T30] audit: type=1400 audit(1784952522.261:297): avc: denied { name_connect } for pid=6090 comm="syz.2.49" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.195292][ T30] audit: type=1400 audit(1784952522.261:298): avc: denied { execute } for pid=6084 comm="syz.3.48" path="/8/memory.events" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.973844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 93.696836][ T5714] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.395566][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 94.588297][ T5714] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 94.601729][ T5714] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.623376][ T5714] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.633421][ T5714] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.981965][ T5714] usb 5-1: config 7 interface 0 has no altsetting 0 [ 94.990899][ T5714] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 94.999567][ T6129] loop5: detected capacity change from 0 to 7 [ 95.005290][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.206689][ T6119] JFS: discard option not supported on device [ 95.213886][ T6119] Mount JFS Failure: -5 [ 95.218085][ T6119] jfs_mount failed w/return code = -5 [ 95.232071][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 95.232089][ T30] audit: type=1400 audit(1784952525.911:314): avc: denied { mounton } for pid=6118 comm="syz.2.56" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.323047][ T6129] Dev loop5: unable to read RDB block 7 [ 95.331317][ T6129] loop5: unable to read partition table [ 95.342833][ T6129] loop5: partition table beyond EOD, truncated [ 95.469691][ T30] audit: type=1400 audit(1784952525.991:315): avc: denied { read } for pid=6118 comm="syz.2.56" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 95.501731][ T6129] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.650014][ T30] audit: type=1400 audit(1784952525.991:316): avc: denied { open } for pid=6118 comm="syz.2.56" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 95.784016][ T30] audit: type=1400 audit(1784952526.341:317): avc: denied { write } for pid=6114 comm="syz.4.57" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 95.871877][ T30] audit: type=1400 audit(1784952526.341:318): avc: denied { open } for pid=6114 comm="syz.4.57" path="/12/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 96.147208][ T5714] usbhid 5-1:7.0: can't add hid device: -71 [ 96.163449][ T5714] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 96.223716][ T5714] usb 5-1: USB disconnect, device number 2 [ 96.308605][ T6144] __nla_validate_parse: 15 callbacks suppressed [ 96.308622][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 96.405766][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'. [ 96.469006][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 96.518556][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 96.984892][ T30] audit: type=1400 audit(1784952527.681:319): avc: denied { create } for pid=6157 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.006366][ T6158] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 97.034807][ T6158] audit: out of memory in audit_log_start [ 97.057919][ T30] audit: type=1400 audit(1784952527.751:320): avc: denied { watch } for pid=6159 comm="syz.4.66" path="/13" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.334424][ T30] audit: type=1400 audit(1784952529.041:321): avc: denied { create } for pid=6163 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.389195][ T6160] Zero length message leads to an empty skb [ 99.751270][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.66'. [ 100.142273][ T6168] clocksource: Switched to clocksource acpi_pm [ 100.170048][ T6171] loop5: detected capacity change from 0 to 7 [ 100.233313][ T6171] Dev loop5: unable to read RDB block 7 [ 100.339682][ T6171] loop5: unable to read partition table [ 100.419160][ T6171] loop5: partition table beyond EOD, truncated [ 100.472021][ T6171] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.875677][ T6199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.147361][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 102.147377][ T30] audit: type=1400 audit(1784952532.854:332): avc: denied { bind } for pid=6194 comm="syz.4.76" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.217069][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.287714][ T30] audit: type=1400 audit(1784952532.884:333): avc: denied { name_bind } for pid=6194 comm="syz.4.76" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 102.437919][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 102.481403][ T24] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.528243][ T30] audit: type=1400 audit(1784952532.884:334): avc: denied { node_bind } for pid=6194 comm="syz.4.76" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 102.581864][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.658285][ T24] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 102.744217][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.758753][ T30] audit: type=1400 audit(1784952532.914:335): avc: denied { bind } for pid=6194 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.850559][ T24] usb 3-1: config 0 descriptor?? [ 102.896701][ T30] audit: type=1400 audit(1784952533.304:336): avc: denied { create } for pid=6202 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.071431][ T30] audit: type=1400 audit(1784952533.314:337): avc: denied { bind } for pid=6202 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.154686][ T6208] FAULT_INJECTION: forcing a failure. [ 103.154686][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 103.247544][ T30] audit: type=1400 audit(1784952533.354:338): avc: denied { connect } for pid=6202 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.273004][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 103.273031][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.273041][ T6208] Call Trace: [ 103.273047][ T6208] [ 103.273054][ T6208] dump_stack_lvl+0x100/0x190 [ 103.273081][ T6208] should_fail_ex.cold+0x5/0xa [ 103.273104][ T6208] should_failslab+0xc2/0x120 [ 103.273131][ T6208] __kmalloc_cache_noprof+0x91/0x6c0 [ 103.273159][ T6208] ? rcu_is_watching+0x12/0xc0 [ 103.273185][ T6208] ? vhost_task_create+0xee/0x370 [ 103.273207][ T6208] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 103.273237][ T6208] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 103.273259][ T6208] vhost_task_create+0xee/0x370 [ 103.273279][ T6208] ? __pfx_vhost_task_create+0x10/0x10 [ 103.273306][ T6208] ? __pfx_vhost_task_fn+0x10/0x10 [ 103.273328][ T6208] ? __pfx___mutex_lock+0x10/0x10 [ 103.273348][ T6208] ? kasan_quarantine_put+0x104/0x240 [ 103.273373][ T6208] kvm_mmu_post_init_vm+0x1b3/0x360 [ 103.273400][ T6208] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 103.273425][ T6208] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 103.273449][ T6208] kvm_vcpu_ioctl+0x730/0x1700 [ 103.273471][ T6208] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 103.273491][ T6208] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.273514][ T6208] ? do_vfs_ioctl+0x226/0x13e0 [ 103.273545][ T6208] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.273570][ T6208] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 103.273606][ T6208] ? __fget_files+0x215/0x3d0 [ 103.273622][ T6208] ? hook_file_ioctl_common+0x140/0x440 [ 103.273648][ T6208] ? selinux_file_ioctl+0x13b/0x290 [ 103.273673][ T6208] ? selinux_file_ioctl+0xb6/0x290 [ 103.273700][ T6208] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 103.273720][ T6208] __x64_sys_ioctl+0x18e/0x210 [ 103.273743][ T6208] do_syscall_64+0x115/0x870 [ 103.273758][ T6208] ? clear_bhb_loop+0x40/0x90 [ 103.273777][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.273793][ T6208] RIP: 0033:0x7f1a29f9de99 [ 103.273807][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.273823][ T6208] RSP: 002b:00007f1a2adab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.273840][ T6208] RAX: ffffffffffffffda RBX: 00007f1a2a226090 RCX: 00007f1a29f9de99 [ 103.273851][ T6208] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 103.273861][ T6208] RBP: 00007f1a2adab090 R08: 0000000000000000 R09: 0000000000000000 [ 103.273870][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.273879][ T6208] R13: 00007f1a2a226128 R14: 00007f1a2a226090 R15: 00007ffd7515c228 [ 103.273903][ T6208] [ 103.893026][ T30] audit: type=1400 audit(1784952533.844:339): avc: denied { write } for pid=6205 comm="syz.0.79" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.151886][ T24] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 104.921434][ T30] audit: type=1400 audit(1784952534.254:340): avc: denied { wake_alarm } for pid=6202 comm="syz.3.78" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.332090][ T30] audit: type=1400 audit(1784952534.954:341): avc: denied { bind } for pid=6210 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.432717][ T24] usb 3-1: USB disconnect, device number 3 [ 105.792579][ T6220] fido_id[6220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 106.469538][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.479183][ T6229] netlink: 348 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.488142][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.496857][ T6229] netlink: 348 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.505811][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.548426][ T6232] loop5: detected capacity change from 0 to 7 [ 106.599653][ T6232] Dev loop5: unable to read RDB block 7 [ 106.633337][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.643139][ T6229] netlink: 348 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.652094][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.660845][ T6229] netlink: 348 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.669798][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.683008][ T6232] loop5: unable to read partition table [ 106.700763][ T6232] loop5: partition table beyond EOD, truncated [ 106.713352][ T6232] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.893616][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 107.893632][ T30] audit: type=1400 audit(1784952538.593:349): avc: denied { mount } for pid=6247 comm="syz.1.89" name="/" dev="ramfs" ino=10535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.957186][ T6248] dummy0: entered promiscuous mode [ 107.980719][ T6248] dummy0: entered allmulticast mode [ 108.265650][ T30] audit: type=1400 audit(1784952538.973:350): avc: denied { bind } for pid=6254 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.432865][ T30] audit: type=1400 audit(1784952539.003:351): avc: denied { write } for pid=6254 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.549101][ T6257] ip6erspan0: entered allmulticast mode [ 108.718842][ T30] audit: type=1400 audit(1784952539.423:352): avc: denied { connect } for pid=6262 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.779796][ T5736] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 108.813333][ T6264] tipc: Started in network mode [ 108.843433][ T6264] tipc: Node identity 2007ff, cluster identity 4711 [ 108.880240][ T6264] tipc: Node number set to 2099199 [ 108.942007][ T148] tipc: Subscription rejected, illegal request [ 108.985905][ T5736] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 109.019538][ T5736] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 109.039408][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.069971][ T5736] usb 4-1: Product: syz [ 109.088979][ T5736] usb 4-1: Manufacturer: syz [ 109.110031][ T5736] usb 4-1: SerialNumber: syz [ 109.153387][ T5736] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 109.715374][ T30] audit: type=1400 audit(1784952540.413:353): avc: denied { getopt } for pid=6259 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.749209][ T5736] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 109.877902][ T30] audit: type=1800 audit(1784952540.493:354): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.96" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 110.043876][ T5714] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.150158][ T30] audit: type=1400 audit(1784952540.633:355): avc: denied { map } for pid=6275 comm="syz.0.96" path="/proc/71/task/72/oom_adj" dev="proc" ino=10609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 110.274626][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 110.330266][ T5714] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 110.369571][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.390352][ T30] audit: type=1400 audit(1784952540.633:356): avc: denied { execute } for pid=6275 comm="syz.0.96" path="/proc/71/task/72/oom_adj" dev="proc" ino=10609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 110.457404][ T5714] usb 3-1: config 0 has no interface number 0 [ 110.481297][ T5714] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.521535][ T6283] loop5: detected capacity change from 0 to 7 [ 110.536926][ T5714] usb 3-1: config 0 interface 196 has no altsetting 0 [ 110.544950][ T6283] Dev loop5: unable to read RDB block 7 [ 110.560041][ T6283] loop5: unable to read partition table [ 110.568961][ T5714] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 110.614212][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.622798][ T6283] loop5: partition table beyond EOD, truncated [ 110.640439][ T5714] usb 3-1: Product: syz [ 110.655091][ T6283] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.667952][ T5714] usb 3-1: Manufacturer: syz [ 110.681552][ T5714] usb 3-1: SerialNumber: syz [ 110.716397][ T5714] usb 3-1: config 0 descriptor?? [ 110.753494][ T5714] ipheth 3-1:0.196: Unable to find endpoints [ 111.350059][ T6286] trusted_key: syz.0.98 sent an empty control message without MSG_MORE. [ 111.375929][ T6286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.387446][ T5714] usb 3-1: USB disconnect, device number 4 [ 111.606805][ T5736] usb 4-1: USB disconnect, device number 5 [ 111.902644][ T30] audit: type=1400 audit(1784952542.603:357): avc: denied { ioctl } for pid=6288 comm="syz.4.101" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10652 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.286331][ T30] audit: type=1400 audit(1784952542.993:358): avc: denied { read } for pid=6295 comm="syz.1.99" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 112.328655][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.337541][ T6296] netlink: 348 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.346566][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.355410][ T6296] netlink: 348 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.364475][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.732353][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.741266][ T6296] netlink: 348 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.750373][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.759213][ T6296] netlink: 348 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.770143][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 113.037305][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 113.037320][ T30] audit: type=1400 audit(1784952543.743:362): avc: denied { read write } for pid=6303 comm="syz.4.104" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 113.488990][ T30] audit: type=1400 audit(1784952543.743:363): avc: denied { open } for pid=6303 comm="syz.4.104" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 114.324857][ T5736] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.524225][ T5736] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 114.553831][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.579319][ T5736] usb 2-1: Product: syz [ 114.593722][ T5736] usb 2-1: Manufacturer: syz [ 114.609334][ T5736] usb 2-1: SerialNumber: syz [ 114.642118][ T5736] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 114.674536][ T5736] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 114.702973][ T5736] usb-storage 2-1:1.0: USB Mass Storage device detected [ 114.771130][ T5736] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 114.798102][ T5736] scsi host1: usb-storage 2-1:1.0 [ 115.003427][ T5714] usb 2-1: USB disconnect, device number 3 [ 116.914142][ T30] audit: type=1400 audit(1784952547.603:364): avc: denied { create } for pid=6333 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.045444][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.063818][ T30] audit: type=1400 audit(1784952547.603:365): avc: denied { write } for pid=6333 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.147607][ T30] audit: type=1400 audit(1784952547.603:366): avc: denied { nlmsg_write } for pid=6333 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.176997][ T30] audit: type=1400 audit(1784952547.613:367): avc: denied { read write } for pid=6333 comm="syz.0.111" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.473778][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 117.622204][ T29] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 117.891434][ T30] audit: type=1400 audit(1784952547.613:368): avc: denied { open } for pid=6333 comm="syz.0.111" path="/22/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.941907][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.040185][ T29] usb 3-1: config 0 has no interface number 0 [ 118.079219][ T29] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.106733][ T30] audit: type=1400 audit(1784952548.803:369): avc: denied { mmap_zero } for pid=6348 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 119.386057][ T29] usb 3-1: config 0 interface 196 has no altsetting 0 [ 119.487693][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 119.498281][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.509855][ T29] usb 3-1: Product: syz [ 119.514958][ T29] usb 3-1: Manufacturer: syz [ 119.519761][ T29] usb 3-1: SerialNumber: syz [ 119.540618][ T29] usb 3-1: config 0 descriptor?? [ 120.023638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 120.043340][ T30] audit: type=1400 audit(1784952550.743:370): avc: denied { search } for pid=6352 comm="syz.0.115" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.118918][ T29] usb 3-1: can't set config #0, error -71 [ 120.175930][ T30] audit: type=1800 audit(1784952550.863:371): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.115" name="fn_play" dev="configfs" ino=11034 res=0 errno=0 [ 120.208487][ T29] usb 3-1: USB disconnect, device number 5 [ 120.476473][ T6359] __nla_validate_parse: 3 callbacks suppressed [ 120.476491][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 120.491529][ T6359] netlink: 348 bytes leftover after parsing attributes in process `syz.2.117'. [ 120.500597][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 120.509435][ T6359] netlink: 348 bytes leftover after parsing attributes in process `syz.2.117'. [ 120.518499][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 121.114977][ T30] audit: type=1800 audit(1784952551.813:372): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.117" name="/" dev="fuse" ino=1 res=0 errno=0 [ 121.560861][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 121.633842][ T30] audit: type=1400 audit(1784952552.343:373): avc: denied { audit_write } for pid=6368 comm="syz.4.121" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.662481][ T6367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 121.707396][ T30] audit: type=1400 audit(1784952552.403:374): avc: denied { ioctl } for pid=6372 comm="syz.2.120" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 121.753651][ T30] audit: type=1400 audit(1784952552.453:375): avc: denied { mounton } for pid=6372 comm="syz.2.120" path="/30/file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.056657][ T30] audit: type=1400 audit(1784952552.763:376): avc: denied { listen } for pid=6368 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.083378][ T6378] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 122.943653][ T6391] xt_hashlimit: size too large, truncated to 1048576 [ 123.017538][ T30] audit: type=1400 audit(1784952553.713:377): avc: denied { create } for pid=6388 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.172945][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 126.207171][ T6411] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.129'. [ 126.238746][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.128'. [ 126.360536][ T30] audit: type=1400 audit(1784952557.063:378): avc: denied { read } for pid=6412 comm="syz.1.130" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.504516][ T30] audit: type=1400 audit(1784952557.063:379): avc: denied { open } for pid=6412 comm="syz.1.130" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.951842][ T30] audit: type=1400 audit(1784952557.113:380): avc: denied { read write } for pid=6412 comm="syz.1.130" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.993628][ T5736] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.065119][ T30] audit: type=1400 audit(1784952557.113:381): avc: denied { open } for pid=6412 comm="syz.1.130" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.174056][ T5736] usb 3-1: Using ep0 maxpacket: 16 [ 127.265432][ T5736] usb 3-1: config 0 has no interfaces? [ 127.285363][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.296625][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.326847][ T5736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.349482][ T30] audit: type=1400 audit(1784952557.133:382): avc: denied { ioctl } for pid=6412 comm="syz.1.130" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.404204][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.466795][ T5736] usb 3-1: Product: syz [ 127.499618][ T5736] usb 3-1: Manufacturer: syz [ 127.530980][ T5736] usb 3-1: SerialNumber: syz [ 127.671370][ T5736] usb 3-1: config 0 descriptor?? [ 127.689734][ T30] audit: type=1400 audit(1784952558.113:383): avc: denied { create } for pid=6412 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.950379][ T30] audit: type=1400 audit(1784952558.123:384): avc: denied { bind } for pid=6412 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.153579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.343559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.583562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.723558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 128.943573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.510735][ T30] audit: type=1400 audit(1784952558.133:385): avc: denied { write } for pid=6412 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.542262][ T5736] usb 3-1: can't set config #0, error -71 [ 129.729678][ T5736] usb 3-1: USB disconnect, device number 6 [ 129.741702][ T30] audit: type=1400 audit(1784952558.213:386): avc: denied { ioctl } for pid=6419 comm="syz.0.132" path="socket:[11355]" dev="sockfs" ino=11355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.845895][ T6421] netlink: 92 bytes leftover after parsing attributes in process `syz.3.131'. [ 129.887465][ T30] audit: type=1400 audit(1784952558.763:387): avc: denied { bind } for pid=6419 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.231154][ T6435] FAULT_INJECTION: forcing a failure. [ 130.231154][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 130.292358][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.2.134 Not tainted syzkaller #0 PREEMPT(full) [ 130.292384][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.292395][ T6435] Call Trace: [ 130.292402][ T6435] [ 130.292409][ T6435] dump_stack_lvl+0x100/0x190 [ 130.292437][ T6435] should_fail_ex.cold+0x5/0xa [ 130.292459][ T6435] should_failslab+0xc2/0x120 [ 130.292482][ T6435] __kmalloc_noprof+0xfc/0x820 [ 130.292503][ T6435] ? copy_splice_read+0x1a3/0xbb0 [ 130.292526][ T6435] copy_splice_read+0x1a3/0xbb0 [ 130.292551][ T6435] ? __pfx_copy_splice_read+0x10/0x10 [ 130.292572][ T6435] ? look_up_lock_class+0x64/0x120 [ 130.292595][ T6435] ? lockdep_init_map_type+0x5c/0x250 [ 130.292619][ T6435] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 130.292648][ T6435] ? __pfx_copy_splice_read+0x10/0x10 [ 130.292667][ T6435] do_splice_read+0x285/0x370 [ 130.292695][ T6435] splice_direct_to_actor+0x2a1/0xa30 [ 130.292720][ T6435] ? __pfx_direct_splice_actor+0x10/0x10 [ 130.292744][ T6435] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 130.292763][ T6435] ? __pfx___file_has_perm+0x10/0x10 [ 130.292794][ T6435] do_splice_direct+0x174/0x240 [ 130.292814][ T6435] ? __pfx_do_splice_direct+0x10/0x10 [ 130.292835][ T6435] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 130.292855][ T6435] ? bpf_lsm_file_permission+0x9/0x10 [ 130.292881][ T6435] ? security_file_permission+0x76/0x210 [ 130.292910][ T6435] ? rw_verify_area+0xce/0x6d0 [ 130.292936][ T6435] do_sendfile+0xadc/0xe20 [ 130.292966][ T6435] ? __pfx_do_sendfile+0x10/0x10 [ 130.292988][ T6435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.293009][ T6435] ? __fget_files+0x21f/0x3d0 [ 130.293032][ T6435] __x64_sys_sendfile64+0x1d8/0x220 [ 130.293051][ T6435] ? ksys_write+0x1ac/0x250 [ 130.293077][ T6435] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 130.293101][ T6435] do_syscall_64+0x115/0x870 [ 130.293119][ T6435] ? clear_bhb_loop+0x40/0x90 [ 130.293141][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.293159][ T6435] RIP: 0033:0x7f22f5d9de99 [ 130.293173][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.293189][ T6435] RSP: 002b:00007f22f6bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 130.293206][ T6435] RAX: ffffffffffffffda RBX: 00007f22f6025fa0 RCX: 00007f22f5d9de99 [ 130.293218][ T6435] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 130.293227][ T6435] RBP: 00007f22f6bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 130.293237][ T6435] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 130.293247][ T6435] R13: 00007f22f6026038 R14: 00007f22f6025fa0 R15: 00007ffd6d161c18 [ 130.293271][ T6435] [ 131.126971][ T6440] FAULT_INJECTION: forcing a failure. [ 131.126971][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.189014][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.2.135 Not tainted syzkaller #0 PREEMPT(full) [ 131.189036][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.189045][ T6440] Call Trace: [ 131.189050][ T6440] [ 131.189057][ T6440] dump_stack_lvl+0x100/0x190 [ 131.189083][ T6440] should_fail_ex.cold+0x5/0xa [ 131.189106][ T6440] _copy_to_user+0x32/0xd0 [ 131.189132][ T6440] simple_read_from_buffer+0xcb/0x170 [ 131.189152][ T6440] proc_fail_nth_read+0x1af/0x230 [ 131.189178][ T6440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.189211][ T6440] ? rw_verify_area+0xce/0x6d0 [ 131.189235][ T6440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.189260][ T6440] vfs_read+0x1e4/0xb40 [ 131.189289][ T6440] ? __pfx_vfs_read+0x10/0x10 [ 131.189314][ T6440] ? __fget_files+0x215/0x3d0 [ 131.189337][ T6440] ? __fget_files+0x21f/0x3d0 [ 131.189361][ T6440] ksys_read+0x12a/0x250 [ 131.189386][ T6440] ? __pfx_ksys_read+0x10/0x10 [ 131.189419][ T6440] do_syscall_64+0x115/0x870 [ 131.189437][ T6440] ? clear_bhb_loop+0x40/0x90 [ 131.189459][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.189476][ T6440] RIP: 0033:0x7f22f5d5e6ce [ 131.189492][ T6440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.189510][ T6440] RSP: 002b:00007f22f6bbafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.189528][ T6440] RAX: ffffffffffffffda RBX: 00007f22f6bbb6c0 RCX: 00007f22f5d5e6ce [ 131.189540][ T6440] RDX: 000000000000000f RSI: 00007f22f6bbb0a0 RDI: 0000000000000004 [ 131.189550][ T6440] RBP: 00007f22f6bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 131.189560][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.189569][ T6440] R13: 00007f22f6026038 R14: 00007f22f6025fa0 R15: 00007ffd6d161c18 [ 131.189593][ T6440] [ 131.927957][ T5736] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 132.530015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 132.580331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 132.647625][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 132.647643][ T30] audit: type=1400 audit(1784952563.313:390): avc: denied { write } for pid=6441 comm="syz.0.136" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 132.720549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 133.649445][ T30] audit: type=1400 audit(1784952563.923:391): avc: denied { setopt } for pid=6441 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.747836][ T5736] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.763219][ T5736] usb 5-1: config 0 has no interface number 0 [ 133.795235][ T5736] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.850633][ T5736] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 133.875219][ T5736] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 133.904183][ T5736] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 133.933659][ T5736] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 133.962325][ T5736] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.977512][ T5736] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.988350][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.245947][ T5736] usb 5-1: config 0 descriptor?? [ 134.543206][ T6461] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.139'. [ 134.621988][ T5736] usb 5-1: can't set config #0, error -71 [ 134.896039][ T5736] usb 5-1: USB disconnect, device number 3 [ 135.139627][ T6460] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.139'. [ 135.210650][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 135.219598][ T6456] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.139'. [ 135.525676][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 135.576676][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 135.660171][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'. [ 136.918249][ T6486] Invalid ELF header magic: != ELF [ 136.996785][ T30] audit: type=1400 audit(1784952567.623:392): avc: denied { module_load } for pid=6481 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 138.504964][ T30] audit: type=1400 audit(1784952569.203:393): avc: denied { write } for pid=6495 comm="syz.2.149" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.847275][ T6501] warning: `syz.4.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.862898][ T6501] tc_dump_action: action bad kind [ 140.569834][ T6511] netlink: 92 bytes leftover after parsing attributes in process `syz.4.152'. [ 140.616153][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 140.747088][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 140.799031][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 140.879558][ T30] audit: type=1400 audit(1784952571.263:394): avc: denied { ioctl } for pid=6506 comm="syz.2.153" path="socket:[11693]" dev="sockfs" ino=11693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.125145][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 141.145017][ T6529] netlink: 'syz.1.157': attribute type 5 has an invalid length. [ 141.180490][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 141.203319][ T6530] netlink: 'syz.1.157': attribute type 5 has an invalid length. [ 141.227680][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 141.230760][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 169.593431][ C0] sched: DL replenish lagged too much [ 279.672171][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 279.679122][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4975/1:b..l P5726/1:b..l [ 279.688520][ C0] rcu: (detected by 0, t=10502 jiffies, g=16765, q=595172 ncpus=2) [ 279.696498][ C0] task:kworker/0:5 state:R running task stack:26008 pid:5726 tgid:5726 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 279.710888][ C0] Workqueue: events_power_efficient gc_worker [ 279.716979][ C0] Call Trace: [ 279.720251][ C0] [ 279.723176][ C0] __schedule+0x125c/0x6730 [ 279.727678][ C0] ? debug_object_activate+0x343/0x4b0 [ 279.733130][ C0] ? find_held_lock+0x2b/0x80 [ 279.737816][ C0] ? __pfx___schedule+0x10/0x10 [ 279.742673][ C0] ? mark_held_locks+0x40/0x70 [ 279.747438][ C0] preempt_schedule_irq+0x50/0x90 [ 279.752466][ C0] irqentry_exit+0x205/0xa00 [ 279.757053][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.763030][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 279.768316][ C0] Code: ff 65 0f c1 05 e3 6d 7e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ed 26 7e 12 0f 85 4d 01 00 00 48 83 c4 [ 279.787925][ C0] RSP: 0018:ffffc9000469fb00 EFLAGS: 00000206 [ 279.793992][ C0] RAX: 0000000000000046 RBX: ffffffff8ebe8180 RCX: ffffc9000469fb0c [ 279.801959][ C0] RDX: 0000000000000002 RSI: ffffffff8e17f61a RDI: ffffffff8c401480 [ 279.809928][ C0] RBP: ffffffff89dbf861 R08: 0000000000000001 R09: 0000000000000000 [ 279.817899][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888054010000 [ 279.825864][ C0] R13: 0000000000000000 R14: 0000000000000202 R15: 0000000000000003 [ 279.833820][ C0] ? gc_worker+0xc71/0x1a10 [ 279.838329][ C0] gc_worker+0xc76/0x1a10 [ 279.842659][ C0] ? __pfx_gc_worker+0x10/0x10 [ 279.847423][ C0] ? rcu_is_watching+0x12/0xc0 [ 279.852195][ C0] process_one_work+0xa23/0x1940 [ 279.857136][ C0] ? __pfx_process_one_work+0x10/0x10 [ 279.862512][ C0] ? __pfx_gc_worker+0x10/0x10 [ 279.867274][ C0] worker_thread+0x5ef/0xe50 [ 279.871870][ C0] ? __pfx_worker_thread+0x10/0x10 [ 279.876969][ C0] ? kthread+0x13a/0x450 [ 279.881190][ C0] ? __pfx_worker_thread+0x10/0x10 [ 279.886273][ C0] kthread+0x370/0x450 [ 279.890340][ C0] ? __pfx_kthread+0x10/0x10 [ 279.894928][ C0] ret_from_fork+0x72b/0xd50 [ 279.899517][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 279.904631][ C0] ? __switch_to+0x800/0x10f0 [ 279.909309][ C0] ? __pfx_kthread+0x10/0x10 [ 279.913897][ C0] ret_from_fork_asm+0x1a/0x30 [ 279.918675][ C0] [ 279.921685][ C0] task:udevd state:R running task stack:25424 pid:4975 tgid:4975 ppid:1 task_flags:0x400140 flags:0x00080000 [ 279.935168][ C0] Call Trace: [ 279.938463][ C0] [ 279.941395][ C0] __schedule+0x125c/0x6730 [ 279.945914][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 279.952077][ C0] ? __pfx___schedule+0x10/0x10 [ 279.956928][ C0] ? mark_held_locks+0x40/0x70 [ 279.961692][ C0] preempt_schedule_irq+0x50/0x90 [ 279.966711][ C0] irqentry_exit+0x205/0xa00 [ 279.971303][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.977287][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 279.982495][ C0] Code: 05 fb 2d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 78 3c 0f 0f 82 ac 02 00 00 8b 35 4e ac 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 2d 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 280.002110][ C0] RSP: 0018:ffffc90003c3fa70 EFLAGS: 00000206 [ 280.008179][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 280.016151][ C0] RDX: 0000000000000000 RSI: ffffffff8e17f61a RDI: ffffffff8c401480 [ 280.024150][ C0] RBP: ffffffff8ebe8180 R08: 00000000ef68a4f1 R09: 0000000000000007 [ 280.032130][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 280.040104][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.048088][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 280.053120][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 280.058756][ C0] ? do_getname+0x35/0x390 [ 280.063174][ C0] ? vfs_fstatat+0xd0/0xe0 [ 280.067585][ C0] ? __do_sys_newfstatat+0x9d/0x120 [ 280.072781][ C0] __update_page_owner_free_handle.isra.0+0x4b/0x4b0 [ 280.079471][ C0] ? __update_page_owner_free_handle.isra.0+0x3a/0x4b0 [ 280.086296][ C0] ? page_ext_put+0x3e/0xd0 [ 280.090813][ C0] __reset_page_owner+0x93/0x190 [ 280.095761][ C0] __free_frozen_pages+0x79f/0x1090 [ 280.100964][ C0] ? __free_slab+0xd0/0x220 [ 280.105473][ C0] qlist_free_all+0x47/0xf0 [ 280.109975][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 280.115432][ C0] __kasan_slab_alloc+0x69/0x90 [ 280.120287][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 280.125735][ C0] ? do_getname+0x35/0x390 [ 280.130130][ C0] do_getname+0x35/0x390 [ 280.134354][ C0] vfs_fstatat+0xd0/0xe0 [ 280.138592][ C0] __do_sys_newfstatat+0x9d/0x120 [ 280.143610][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 280.149246][ C0] ? __x64_sys_clock_gettime+0x189/0x270 [ 280.154880][ C0] do_syscall_64+0x115/0x870 [ 280.159468][ C0] ? clear_bhb_loop+0x40/0x90 [ 280.164155][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.170066][ C0] RIP: 0033:0x7f283c911b0a [ 280.174487][ C0] RSP: 002b:00007ffddfec6438 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 280.182882][ C0] RAX: ffffffffffffffda RBX: 00005579fb88d418 RCX: 00007f283c911b0a [ 280.190853][ C0] RDX: 00007ffddfec6440 RSI: 00005579fb87bef3 RDI: 00000000ffffff9c [ 280.198827][ C0] RBP: 0000557a08fa5668 R08: 00065767a0f99094 R09: 0000000000000001 [ 280.206804][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.214772][ C0] R13: 00007ffddfec6440 R14: 0000000000000000 R15: 00065767a0f99094 [ 280.222755][ C0] [ 281.693630][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.238444][ T31] INFO: task kworker/u8:3:50 blocked for more than 142 seconds. [ 285.522732][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.537840][ T31] Not tainted syzkaller #0 [ 285.551988][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.