last executing test programs: 9m24.718697809s ago: executing program 2 (id=1578): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x25a5, 0x4) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 9m21.929027884s ago: executing program 2 (id=1583): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x8, 0xb4a, 0x9, 0x8, 0x80000001, 0x3}, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640040000000500010006000000050005000200000005000400000000000900020073797a31000d00000c00030068"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f931", 0x63) 9m19.984377259s ago: executing program 2 (id=1588): socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000012c0)=""/102376, 0x18fe8) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x5c}}, 0x0) 9m16.305166763s ago: executing program 2 (id=1593): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000500), 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x610) socket(0xf7cac5ade88dfe49, 0x800, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 9m14.810211177s ago: executing program 2 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x800000000000001, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) 9m13.122482723s ago: executing program 2 (id=1597): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) getpid() socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x0, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8m57.623214443s ago: executing program 32 (id=1597): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) getpid() socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x0, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m0.887544356s ago: executing program 1 (id=1964): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af1510000000000000005000000000001", 0x1b}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) accept4(r0, 0x0, 0x0, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(r0, &(0x7f0000000180)='./proc/file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/udp_port\x00', 0x101002, 0x20) syz_fuse_handle_req(r4, &(0x7f0000002880)="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", 0x2000, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x37, 0x80, 0x1d}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e23, 0x3, 'nq\x00', 0x0, 0x81, 0x59}, {@local, 0x4e23, 0x2000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000000500)=""/234, 0xea) 5m56.523931362s ago: executing program 1 (id=1978): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000200)={{}, {0x5}, 0x9bd0186feba83bba, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="76930ed65c416af60db4c30a1ee6b0c573c5870e977415d0b276990f7c45b5b6ecd480830dceecea7b532120cae36b94249127f6dff3fca63ed50d3b06de8c50cfe737db6c11897827a5acc2f84ac6ab815feb37", 0x54, 0x0, &(0x7f0000000100)={0x2, 0x84, {0x1, 0xc, 0x6a, "e0b89cc206713c9bf51de2149f879dd67bd835a4adf02ec48af6c6ad9c02f1cf1ff767366d3de33767c6168b9020bfd00d0a8c7a0bbf5936c44a08f899422fd5bcc23d827d8dabed237ad3a95873085db09278bb6ad60e309fb84f81e9a3f2596a2c70f537824840c470", 0xd, "e96cf356c859271e8ff9463758"}, 0x48, "09e0d8e4eb1606ed658f88fde1ca244843571a26d09bad3d75dcbba5f198e410a70049548172faa8e6081bd3eeed0be0e206c1412bcddc0c334cf054d245c9eaf28a26ad55af0eb7"}, 0xd8}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000020904000001020d0000052406"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) listen(r0, 0x10) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000200)={{}, {0x5}, 0x9bd0186feba83bba, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="76930ed65c416af60db4c30a1ee6b0c573c5870e977415d0b276990f7c45b5b6ecd480830dceecea7b532120cae36b94249127f6dff3fca63ed50d3b06de8c50cfe737db6c11897827a5acc2f84ac6ab815feb37", 0x54, 0x0, &(0x7f0000000100)={0x2, 0x84, {0x1, 0xc, 0x6a, "e0b89cc206713c9bf51de2149f879dd67bd835a4adf02ec48af6c6ad9c02f1cf1ff767366d3de33767c6168b9020bfd00d0a8c7a0bbf5936c44a08f899422fd5bcc23d827d8dabed237ad3a95873085db09278bb6ad60e309fb84f81e9a3f2596a2c70f537824840c470", 0xd, "e96cf356c859271e8ff9463758"}, 0x48, "09e0d8e4eb1606ed658f88fde1ca244843571a26d09bad3d75dcbba5f198e410a70049548172faa8e6081bd3eeed0be0e206c1412bcddc0c334cf054d245c9eaf28a26ad55af0eb7"}, 0xd8}) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000020904000001020d0000052406"], 0x0) (async) 5m54.046700255s ago: executing program 1 (id=1985): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (fail_nth: 2) 5m53.494406215s ago: executing program 1 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x1f00) 5m53.359521853s ago: executing program 1 (id=1991): prlimit64(0x0, 0x1, &(0x7f0000000040)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x20000080) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)) readv(r6, &(0x7f0000000180)=[{&(0x7f0000001440)=""/221, 0xdd}, {&(0x7f0000000140)=""/15, 0xf}], 0x2) 5m51.524894103s ago: executing program 1 (id=1996): syz_usb_connect(0x5, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xd5, 0xfb, 0x9b, 0x40, 0x134c, 0x3, 0xe5c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0x8, 0x20, 0x80, "", [{{0x9, 0x4, 0x95, 0x1, 0x0, 0xe, 0x1, 0x0, 0x6, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x5, 0x9}]}]}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mydev\x00', 0x7) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000000000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='tcpci 0x50\n\x00', 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xcb, r4}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_dellink={0x30, 0x11, 0x100, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x20822, 0x1020}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x4850) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f0000000100)={0x3, 0xa, 0x0, 0x401, 0x7, "bb40af00008000"}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r5, &(0x7f0000000140), 0x0, 0x8000740, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xde0e}}, './file0\x00'}) 5m50.339946397s ago: executing program 33 (id=1996): syz_usb_connect(0x5, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xd5, 0xfb, 0x9b, 0x40, 0x134c, 0x3, 0xe5c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0x8, 0x20, 0x80, "", [{{0x9, 0x4, 0x95, 0x1, 0x0, 0xe, 0x1, 0x0, 0x6, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x5, 0x9}]}]}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mydev\x00', 0x7) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000000000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='tcpci 0x50\n\x00', 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xcb, r4}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_dellink={0x30, 0x11, 0x100, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x20822, 0x1020}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x4850) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f0000000100)={0x3, 0xa, 0x0, 0x401, 0x7, "bb40af00008000"}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r5, &(0x7f0000000140), 0x0, 0x8000740, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xde0e}}, './file0\x00'}) 1m18.650803057s ago: executing program 5 (id=2976): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1000084, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7f51646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x80000, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES32]) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0xc7, 0x0, r4, {0x7, 0x29, 0x57, 0x22000100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 1m18.331370898s ago: executing program 5 (id=2978): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffd8a, &(0x7f0000000680)={&(0x7f0000000480)={0x3c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}}, 0x0) 1m18.259231482s ago: executing program 5 (id=2979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x4000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 1m17.404525096s ago: executing program 5 (id=2980): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f00000f4000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, r0, 0xec776000) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1m15.811643085s ago: executing program 5 (id=2989): syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) mlockall(0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440c0}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r5, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r5, 0x5) r6 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r6, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendto$inet(r6, &(0x7f0000000600)="12", 0xfdef, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) io_uring_setup(0x1c79, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.951259969s ago: executing program 5 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x4) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c000280"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 59.923735855s ago: executing program 34 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x4) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c000280"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 17.251218442s ago: executing program 0 (id=3211): r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x2a8102, 0xb) sendmsg$alg(r1, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f00000002c0)="bf77f0741c2eda615f5a962035e4316043243129ca537cc52c77545d516443ad67161cffebff76f2891e3a0524faa3b00cadccd795952ac39caa7f8903e6c123d677e3ea8d23aac9d776647bfa1d3b1a511532d0aa40d229b0cce5f5288a7b9bfbfec16fdbee729e0afe6fa119394910", 0x70}, {&(0x7f0000000f80)="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", 0x1000}], 0x2}, 0x8010) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_dev$MSR(&(0x7f0000000340), 0xec0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020300030d00000000000000fedbdf25010009000000000005000600000000000a004e2100000001fc010000000000000000000000000001040000000000000002000100000000000000000900000000cb0005000020000002004e21ac1414aa0000000000000000a6861f39db81b034c9607376a2cefd79429adb251887dd85bd1b6b7f4a1c692b522a5d2e0502203a4bc4e66bc2b903f033e6a151584788afee3b107307391010a2512e955c5ec0e832823a9de1571eca3eb29d319c9ed848bb5086d5d4f9ad1d893d5e8ab75167376836e15d17e43d0353fa754ea69a6b66eba10b81d3ecf9dfcae8da9bf124fa1ff71290affebf4bad3a89668267695756ae8e8c9117ca423dd526beb75f55f8fa3a339589"], 0x68}, 0x1, 0x7}, 0x4010000) r5 = dup(r3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="1fa90000", @ANYRES16=r6, @ANYBLOB="000227bd7000fedbdf25050000001c000680080003007f000001080006000400000008000300ac1414250800030002000000200001801400040000000000000000000000ffffac1e0001060005004e2100000800030006000000"], 0x60}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='nfsd\x00', 0x804000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x24a, 0x10400) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r7, 0x1f, &(0x7f0000000200)={0x28, 0x1, 0x0, r5, &(0x7f0000000100)="159e1ea5a01fb181b3ee1c425da8676a94ce44f31f530734bf5e09ca8f96b54bba38dd", 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, r8, 0x100000001}}, 0x1) read$FUSE(r7, 0x0, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="8bcceb216f624c06f5ff", 0xa}, {&(0x7f0000000180)="c04b89ae113e", 0x6}], 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f0000000600)=""/123, &(0x7f0000000680)=0x7b) 15.359427583s ago: executing program 0 (id=3218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000140)={{@any, 0x3}, 0x1, 0x1, 0x8}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@local}, 0x0, 0x1, 0xfffffffe}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1, 0x2, 0x10001}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000480)=0x6) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x8040, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x5, 0x8000, 0x1, 0x4dc, 0x81, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf5, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x0, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x5, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x7, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x403, 0x4, 0x1, 0x50200523, 0xfffffffb, 0x1, 0x4, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x0, 0x7, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x8, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x2, 0x81, 0xdf1, 0x2, 0x9, 0x8, 0x40fff, 0x1ff, 0x8000, 0x18e8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x9f, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x65, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xa, 0x196, 0x91, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x100002, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0xa, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x3, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x7fffffff, 0x7ff, 0x2ace, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0xffffffff, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x0, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x403, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0x1ba5, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0xe6e, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x102, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000002, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x5, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0x4, 0xd, 0x805, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x11000, 0xc, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x5, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0xb, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x98}, 0x0) 14.016589955s ago: executing program 0 (id=3221): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x200402) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) futex_waitv(&(0x7f0000004040), 0x0, 0x0, 0x0, 0x1) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x105042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r4, 0xffffff7f00000000, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x24004850) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d0020070000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 12.772568491s ago: executing program 0 (id=3223): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff8000}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x8000200) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 12.597362863s ago: executing program 7 (id=3224): syz_open_dev$usbmon(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configs/c.1/strings/0x409\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000480)='proc\x00', 0x400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)}, {&(0x7f00000003c0)='-6', 0x2}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='640\n', 0x4) write(0xffffffffffffffff, &(0x7f00000004c0)='360', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='333333\n\x00', 0x7) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3) 12.019187923s ago: executing program 7 (id=3226): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0x2, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32, @ANYBLOB="000000000000000600000000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004603000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x77359400}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c7b7917bf00fcf90c377000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c0400140035006d6163766c616e3000000000000000000500210091000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) read$midi(r6, 0x0, 0x3b) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) 11.665979091s ago: executing program 6 (id=3227): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.846553527s ago: executing program 4 (id=3228): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) fsopen(0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x4, 0x100003, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x1004) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000007c0)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x2, 0x0, 0x9, 0x4, 0x800}, 0x20) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 10.785626913s ago: executing program 0 (id=3229): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) ioprio_set$pid(0x2, r2, 0x4004) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000240)={0x1a, 0x101, 0x4, 0xd2, 0x0, 0x4, @local}, 0x10) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="3182f5406e25e0b8506be16d95ef", 0x0, 0xd41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) 10.70538717s ago: executing program 6 (id=3230): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0xbc, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0xeb}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56171, 0x0, 0xffffbffe, {0x0, 0x0, 0x0, r4, {0x4}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) shmctl$SHM_LOCK(0x0, 0xb) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 9.799996613s ago: executing program 7 (id=3231): openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}, 0x4000080) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000180)=0x4) unshare(0x10000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000500)={0x0, {{0x2, 0x4e21, @loopback}}}, 0x88) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @loopback, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 9.253457273s ago: executing program 6 (id=3232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="7ee8fa5a5745d3881fb6b93cdeeb", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r1, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r1, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r1, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c6170623000"/64) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 8.632811699s ago: executing program 6 (id=3233): mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fb", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030b00040008010ba6b4550094011fef5534965ade08e387eef6d84a7549a121da7d425166d2ed01f70db6f595cf44c414f4f23e379d74708102170ddb4420bab4986b674a125c42a542d2e0d63b97d21d07137ec47c9b7769d5b9c29e5b0be1a6149143bdb4a45557cfa25850f8dc94206bd24524e0dd7dd985d0647c7b62f9"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x24000800) r4 = socket$inet6(0xa, 0x1, 0x7f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xff, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e0000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 8.497077569s ago: executing program 0 (id=3235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8004000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf8, 0x10, 0x7, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010102, 0x4e1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d5, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x0, 0x200000, 0x7, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x7}]}, 0xf8}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="816d43dd6b9d611b6f010027bd7000ffdbdf252e00008c180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 7.435435038s ago: executing program 7 (id=3236): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x83, 0x81, 0x4, 0x4d, 0x203, 0x466e}) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000000)="ebe301", 0x3}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x3a, 0x41, 0x0, 0x0) 7.415761852s ago: executing program 3 (id=3237): syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0xbf) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005000100000000000800074000000000100017000000000000000000"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @value=0x4}) write(r0, &(0x7f0000001100)='0000:00:06.0', 0xc) 7.309676196s ago: executing program 6 (id=3239): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = fsmount(r0, 0x0, 0x1) r6 = openat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0x0) read$FUSE(r7, &(0x7f0000004000)={0x2020}, 0x2020) 5.616625498s ago: executing program 4 (id=3240): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.556871644s ago: executing program 3 (id=3241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x800008, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x80) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002040)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x6, 0xc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x7000, 0x7, 0x0, 0x6, 0x0, [{0x4, 0x1, 0x1, '\x00', 0xe5}, {0x6, 0x73, 0x38, '\x00', 0x9}, {0x4, 0x8, 0x43, '\x00', 0xf}, {0x3, 0x81, 0xf8, '\x00', 0x9}, {0x8, 0x43, 0x4, '\x00', 0xfc}, {0x7, 0x7, 0xfd, '\x00', 0x5}, {0xa1, 0x4, 0xd, '\x00', 0x1}, {0x7, 0x40, 0x3, '\x00', 0xb}, {0xf7, 0x30, 0x4, '\x00', 0xc}, {0x8, 0x0, 0x9, '\x00', 0x1}, {0x1, 0x5, 0xd7, '\x00', 0x3}, {0x3, 0xb5, 0x81}, {0x8, 0x6, 0xa, '\x00', 0x3}, {0x4, 0x4, 0x5, '\x00', 0xd}, {0x2, 0x4, 0x3}, {0x5, 0x6, 0x1, '\x00', 0xc}, {0x4, 0x1, 0x5, '\x00', 0x4}, {0xb, 0x2, 0x70, '\x00', 0x9}, {0xa9, 0x4a, 0x8, '\x00', 0x4}, {0xb, 0x1, 0x9, '\x00', 0x1}, {0xf, 0xe0, 0xe7, '\x00', 0x3}, {0x8, 0x6, 0x5, '\x00', 0xe}, {0x42, 0x24, 0x5, '\x00', 0xb7}, {0x0, 0x9, 0x22, '\x00', 0x5}]}}) 5.435453846s ago: executing program 7 (id=3242): socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r3 = epoll_create1(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r4], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x20) 5.336733477s ago: executing program 6 (id=3243): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1f}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2}]}}, 0x0, 0x3e}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, r2}) close(r2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write(r5, &(0x7f0000000240)='1', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (async) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x4000, 0x0, 0x0, r6}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x2000, 0x0, 0x0, r6}) (async) close(r6) (async) symlinkat(&(0x7f00000001c0)='./tracing\x00', r5, &(0x7f00000002c0)='./tracing\x00') ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x10003, 0x0, 0x8080000, 0x0, 0x0, 0x0, r2}) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) 5.284757094s ago: executing program 4 (id=3244): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1f}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2}]}}, 0x0, 0x3e}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, r2}) close(r2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write(r5, &(0x7f0000000240)='1', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (async) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x4000, 0x0, 0x0, r6}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x2000, 0x0, 0x0, r6}) (async) close(r6) (async) symlinkat(&(0x7f00000001c0)='./tracing\x00', r5, &(0x7f00000002c0)='./tracing\x00') ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x10003, 0x0, 0x8080000, 0x0, 0x0, 0x0, r2}) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) 4.911448553s ago: executing program 7 (id=3245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x44000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000200)="0e00300000000100000000020000") syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000400)="0e00310000000100000078563412") syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, &(0x7f0000001500)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 4.550339411s ago: executing program 4 (id=3246): openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}, 0x4000080) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000180)=0x4) unshare(0x10000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000500)={0x0, {{0x2, 0x4e21, @loopback}}}, 0x88) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @loopback, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4.466352928s ago: executing program 3 (id=3247): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x200402) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) futex_waitv(&(0x7f0000004040), 0x0, 0x0, 0x0, 0x1) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x105042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r4, 0xffffff7f00000000, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x24004850) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d0020070000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 3.322795664s ago: executing program 4 (id=3248): mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fb", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030b00040008010ba6b4550094011fef5534965ade08e387eef6d84a7549a121da7d425166d2ed01f70db6f595cf44c414f4f23e379d74708102170ddb4420bab4986b674a125c42a542d2e0d63b97d21d07137ec47c9b7769d5b9c29e5b0be1a6149143bdb4a45557cfa25850f8dc94206bd24524e0dd7dd985d0647c7b62f9"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x24000800) r4 = socket$inet6(0xa, 0x1, 0x7f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xff, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e0000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 3.247092464s ago: executing program 3 (id=3249): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) fsopen(0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x4, 0x100003, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x1004) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000007c0)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x2, 0x0, 0x9, 0x4, 0x800}, 0x20) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 2.714493724s ago: executing program 3 (id=3250): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x4}, 0x20) getdents64(r1, &(0x7f0000000080)=""/250, 0xfa) 1.731341365s ago: executing program 3 (id=3251): prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200501, 0x44) getdents64(r6, &(0x7f0000000180)=""/33, 0x21) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108) 0s ago: executing program 4 (id=3252): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = fsmount(r0, 0x0, 0x1) r6 = openat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0x0) read$FUSE(r7, &(0x7f0000004000)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): [T17212] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1207.948554][T17212] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1207.948569][T17212] genl_family_rcv_msg_doit+0xc7/0x300 [ 1207.948582][T17212] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1207.948593][T17212] ? genl_get_cmd+0x3e7/0x760 [ 1207.948614][T17212] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1207.948627][T17212] ? ___sys_sendmsg+0x190/0x1e0 [ 1207.948640][T17212] ? __radix_tree_lookup+0x217/0x2b0 [ 1207.948655][T17212] genl_rcv_msg+0x560/0x800 [ 1207.948667][T17212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1207.948678][T17212] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1207.948694][T17212] ? __lock_acquire+0x4c5/0x1ec0 [ 1207.948716][T17212] netlink_rcv_skb+0x159/0x420 [ 1207.948732][T17212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1207.948744][T17212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1207.948766][T17212] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1207.948784][T17212] genl_rcv+0x28/0x40 [ 1207.948793][T17212] netlink_unicast+0x585/0x850 [ 1207.948812][T17212] ? __pfx_netlink_unicast+0x10/0x10 [ 1207.948832][T17212] netlink_sendmsg+0x8b0/0xda0 [ 1207.948851][T17212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.948869][T17212] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1207.948883][T17212] ____sys_sendmsg+0xa4d/0xbe0 [ 1207.948896][T17212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.948914][T17212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.948934][T17212] ___sys_sendmsg+0x190/0x1e0 [ 1207.948950][T17212] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.948965][T17212] ? get_pid_task+0x106/0x250 [ 1207.948984][T17212] ? find_held_lock+0x2b/0x80 [ 1207.949011][T17212] __sys_sendmsg+0x160/0x210 [ 1207.949023][T17212] ? __pfx___sys_sendmsg+0x10/0x10 [ 1207.949042][T17212] do_syscall_64+0x123/0x790 [ 1207.949055][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.949066][T17212] RIP: 0033:0x7f9e3539e0d9 [ 1207.949076][T17212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.949086][T17212] RSP: 002b:00007f9e36251028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.949097][T17212] RAX: ffffffffffffffda RBX: 00007f9e35625fa0 RCX: 00007f9e3539e0d9 [ 1207.949104][T17212] RDX: 0000000000040040 RSI: 0000200000000240 RDI: 0000000000000004 [ 1207.949111][T17212] RBP: 00007f9e36251090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.949117][T17212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.949123][T17212] R13: 00007f9e35626038 R14: 00007f9e35625fa0 R15: 00007ffe42cad148 [ 1207.949137][T17212] [ 1208.582023][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 1208.692559][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1208.815906][ T30] audit: type=1400 audit(1787559768.975:6495): avc: denied { mount } for pid=17239 comm="syz.5.2828" name="/" dev="hugetlbfs" ino=65517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1208.858975][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1208.875866][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1208.893445][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1208.935559][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1208.958650][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.995385][T17217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1209.021551][T17217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1209.047452][ T9] pl2303 4-1:1.0: pl2303 converter detected [ 1209.056360][T17249] FAULT_INJECTION: forcing a failure. [ 1209.056360][T17249] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.075811][ T9] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 1209.095224][T17249] CPU: 0 UID: 0 PID: 17249 Comm: syz.5.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.095241][T17249] Tainted: [L]=SOFTLOCKUP [ 1209.095245][T17249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1209.095252][T17249] Call Trace: [ 1209.095256][T17249] [ 1209.095260][T17249] dump_stack_lvl+0x100/0x190 [ 1209.095280][T17249] should_fail_ex.cold+0x5/0xa [ 1209.095295][T17249] should_failslab+0xc2/0x120 [ 1209.095306][T17249] __kmalloc_noprof+0xfc/0x820 [ 1209.095322][T17249] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1209.095338][T17249] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1209.095353][T17249] genl_family_rcv_msg_doit+0xc7/0x300 [ 1209.095366][T17249] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1209.095377][T17249] ? genl_get_cmd+0x3e7/0x760 [ 1209.095398][T17249] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1209.095412][T17249] ? ___sys_sendmsg+0x190/0x1e0 [ 1209.095425][T17249] ? __radix_tree_lookup+0x217/0x2b0 [ 1209.095439][T17249] genl_rcv_msg+0x560/0x800 [ 1209.095452][T17249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1209.095463][T17249] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1209.095479][T17249] ? __lock_acquire+0x4c5/0x1ec0 [ 1209.095498][T17249] netlink_rcv_skb+0x159/0x420 [ 1209.095515][T17249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1209.095526][T17249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1209.095548][T17249] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1209.095567][T17249] genl_rcv+0x28/0x40 [ 1209.095576][T17249] netlink_unicast+0x585/0x850 [ 1209.095594][T17249] ? __pfx_netlink_unicast+0x10/0x10 [ 1209.095615][T17249] netlink_sendmsg+0x8b0/0xda0 [ 1209.095633][T17249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.095651][T17249] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1209.095666][T17249] ____sys_sendmsg+0xa4d/0xbe0 [ 1209.095679][T17249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.095696][T17249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.095717][T17249] ___sys_sendmsg+0x190/0x1e0 [ 1209.095733][T17249] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.095747][T17249] ? get_pid_task+0x106/0x250 [ 1209.095767][T17249] ? find_held_lock+0x2b/0x80 [ 1209.095789][T17249] __sys_sendmsg+0x160/0x210 [ 1209.095800][T17249] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.095819][T17249] do_syscall_64+0x123/0x790 [ 1209.095832][T17249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.095844][T17249] RIP: 0033:0x7f9e3539e0d9 [ 1209.095853][T17249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.095864][T17249] RSP: 002b:00007f9e36251028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.095875][T17249] RAX: ffffffffffffffda RBX: 00007f9e35625fa0 RCX: 00007f9e3539e0d9 [ 1209.095882][T17249] RDX: 0000000000040040 RSI: 0000200000000240 RDI: 0000000000000004 [ 1209.095889][T17249] RBP: 00007f9e36251090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.095895][T17249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.095901][T17249] R13: 00007f9e35626038 R14: 00007f9e35625fa0 R15: 00007ffe42cad148 [ 1209.095916][T17249] [ 1209.446607][T17252] ªªªªªª: renamed from vlan0 (while UP) [ 1209.506304][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1209.533053][T17217] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1209.543671][T17217] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1209.551849][T17217] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1209.560747][T17217] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1209.569482][T17217] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1211.050142][T17215] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1211.105984][T17215] pl2303 ttyUSB0: error sending break = -32 [ 1211.132618][ T9] usb 4-1: USB disconnect, device number 57 [ 1211.142456][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1211.187496][ T9] pl2303 4-1:1.0: device disconnected [ 1211.270783][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2839'. [ 1211.414005][T17288] ªªªªªª: renamed from vlan0 (while UP) [ 1211.754047][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'. [ 1212.833402][ T30] audit: type=1400 audit(1787559772.995:6496): avc: denied { read } for pid=17311 comm="syz.4.2849" path="socket:[65809]" dev="sockfs" ino=65809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1213.479942][T17310] netlink: Unknown nat attribute (0) [ 1213.540886][T17310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.214813][T17332] FAULT_INJECTION: forcing a failure. [ 1215.214813][T17332] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.227425][T17332] CPU: 0 UID: 0 PID: 17332 Comm: syz.0.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.227441][T17332] Tainted: [L]=SOFTLOCKUP [ 1215.227445][T17332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1215.227451][T17332] Call Trace: [ 1215.227455][T17332] [ 1215.227459][T17332] dump_stack_lvl+0x100/0x190 [ 1215.227479][T17332] should_fail_ex.cold+0x5/0xa [ 1215.227495][T17332] should_failslab+0xc2/0x120 [ 1215.227505][T17332] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1215.227521][T17332] ? is_bpf_text_address+0x94/0x1a0 [ 1215.227533][T17332] ? alloc_empty_file+0x5b/0x1c0 [ 1215.227547][T17332] alloc_empty_file+0x5b/0x1c0 [ 1215.227559][T17332] path_openat+0xdb/0x2440 [ 1215.227578][T17332] ? __pfx_path_openat+0x10/0x10 [ 1215.227594][T17332] ? stack_trace_save+0x8e/0xc0 [ 1215.227608][T17332] ? __pfx_stack_trace_save+0x10/0x10 [ 1215.227625][T17332] do_file_open+0x20e/0x430 [ 1215.227643][T17332] ? __pfx_do_file_open+0x10/0x10 [ 1215.227659][T17332] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1215.227673][T17332] ? do_getname+0x35/0x390 [ 1215.227684][T17332] ? __x64_sys_execve+0x76/0xd0 [ 1215.227718][T17332] do_open_execat+0xd1/0x360 [ 1215.227732][T17332] ? __pfx_do_open_execat+0x10/0x10 [ 1215.227747][T17332] ? __might_fault+0xc5/0x140 [ 1215.227759][T17332] ? __might_fault+0xc5/0x140 [ 1215.227774][T17332] alloc_bprm+0x2d/0x9e0 [ 1215.227790][T17332] do_execveat_common.isra.0+0x19c/0x580 [ 1215.227805][T17332] ? do_getname+0x191/0x390 [ 1215.227818][T17332] __x64_sys_execve+0x93/0xd0 [ 1215.227833][T17332] do_syscall_64+0x123/0x790 [ 1215.227847][T17332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.227859][T17332] RIP: 0033:0x7fee0a59e0d9 [ 1215.227868][T17332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.227878][T17332] RSP: 002b:00007fee0b4d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1215.227889][T17332] RAX: ffffffffffffffda RBX: 00007fee0a826090 RCX: 00007fee0a59e0d9 [ 1215.227896][T17332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1215.227902][T17332] RBP: 00007fee0b4d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.227908][T17332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.227914][T17332] R13: 00007fee0a826128 R14: 00007fee0a826090 R15: 00007fff192b7e88 [ 1215.227927][T17332] [ 1215.811843][T17324] netlink: 284 bytes leftover after parsing attributes in process `syz.6.2851'. [ 1216.068545][T17348] FAULT_INJECTION: forcing a failure. [ 1216.068545][T17348] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.127155][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1216.162903][T17348] CPU: 0 UID: 0 PID: 17348 Comm: syz.3.2855 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.162923][T17348] Tainted: [L]=SOFTLOCKUP [ 1216.162927][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1216.162933][T17348] Call Trace: [ 1216.162942][T17348] [ 1216.162946][T17348] dump_stack_lvl+0x100/0x190 [ 1216.162966][T17348] should_fail_ex.cold+0x5/0xa [ 1216.162982][T17348] should_failslab+0xc2/0x120 [ 1216.162992][T17348] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1216.163009][T17348] ? do_getname+0x35/0x390 [ 1216.163024][T17348] do_getname+0x35/0x390 [ 1216.163037][T17348] path_setxattrat+0x360/0x3b0 [ 1216.163049][T17348] ? __pfx_path_setxattrat+0x10/0x10 [ 1216.163063][T17348] ? ksys_write+0x190/0x250 [ 1216.163077][T17348] ? ksys_write+0x190/0x250 [ 1216.163100][T17348] ? fput+0x7c/0x100 [ 1216.163110][T17348] ? ksys_write+0x1ac/0x250 [ 1216.163124][T17348] ? __pfx_ksys_write+0x10/0x10 [ 1216.163140][T17348] __x64_sys_lsetxattr+0xc9/0x140 [ 1216.163151][T17348] ? do_syscall_64+0xae/0x790 [ 1216.163163][T17348] ? lockdep_hardirqs_on+0x7d/0x110 [ 1216.163175][T17348] do_syscall_64+0x123/0x790 [ 1216.163188][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.163199][T17348] RIP: 0033:0x7fb31d99e0d9 [ 1216.163209][T17348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.163219][T17348] RSP: 002b:00007fb31e806028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1216.163229][T17348] RAX: ffffffffffffffda RBX: 00007fb31dc26090 RCX: 00007fb31d99e0d9 [ 1216.163236][T17348] RDX: 0000200000000240 RSI: 00002000000003c0 RDI: 0000200000000140 [ 1216.163243][T17348] RBP: 00007fb31e806090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.163249][T17348] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1216.163255][T17348] R13: 00007fb31dc26128 R14: 00007fb31dc26090 R15: 00007ffd3f394118 [ 1216.163269][T17348] [ 1216.592566][ T30] audit: type=1400 audit(1787559776.725:6497): avc: denied { mount } for pid=17346 comm="syz.6.2857" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1216.691628][T15608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1216.752140][T15608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1216.779870][T15608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1216.824537][T17362] FAULT_INJECTION: forcing a failure. [ 1216.824537][T17362] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.865480][T15608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1216.873457][T17362] CPU: 0 UID: 0 PID: 17362 Comm: syz.3.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.873475][T17362] Tainted: [L]=SOFTLOCKUP [ 1216.873478][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1216.873485][T17362] Call Trace: [ 1216.873489][T17362] [ 1216.873493][T17362] dump_stack_lvl+0x100/0x190 [ 1216.873512][T17362] should_fail_ex.cold+0x5/0xa [ 1216.873525][T17362] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1216.873541][T17362] should_failslab+0xc2/0x120 [ 1216.873552][T17362] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1216.873568][T17362] ? skb_clone+0x190/0x400 [ 1216.873584][T17362] skb_clone+0x190/0x400 [ 1216.873595][T17362] netlink_deliver_tap+0xaed/0xcc0 [ 1216.873615][T17362] netlink_unicast+0x62b/0x850 [ 1216.873633][T17362] ? __pfx_netlink_unicast+0x10/0x10 [ 1216.873653][T17362] netlink_sendmsg+0x8b0/0xda0 [ 1216.873672][T17362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.873690][T17362] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1216.873704][T17362] ____sys_sendmsg+0xa4d/0xbe0 [ 1216.873718][T17362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.873735][T17362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1216.873755][T17362] ___sys_sendmsg+0x190/0x1e0 [ 1216.873771][T17362] ? __pfx____sys_sendmsg+0x10/0x10 [ 1216.873786][T17362] ? get_pid_task+0x106/0x250 [ 1216.873804][T17362] ? find_held_lock+0x2b/0x80 [ 1216.873827][T17362] __sys_sendmsg+0x160/0x210 [ 1216.873839][T17362] ? __pfx___sys_sendmsg+0x10/0x10 [ 1216.873857][T17362] do_syscall_64+0x123/0x790 [ 1216.873871][T17362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.873882][T17362] RIP: 0033:0x7fb31d99e0d9 [ 1216.873892][T17362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.873902][T17362] RSP: 002b:00007fb31e827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1216.873912][T17362] RAX: ffffffffffffffda RBX: 00007fb31dc25fa0 RCX: 00007fb31d99e0d9 [ 1216.873920][T17362] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1216.873926][T17362] RBP: 00007fb31e827090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.873938][T17362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.873944][T17362] R13: 00007fb31dc26038 R14: 00007fb31dc25fa0 R15: 00007ffd3f394118 [ 1216.873958][T17362] [ 1217.361135][T15608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1217.380523][ T30] audit: type=1400 audit(1787559777.535:6498): avc: denied { mounton } for pid=17352 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1218.231677][ T30] audit: type=1400 audit(1787559778.385:6499): avc: denied { bind } for pid=17383 comm="syz.6.2867" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1218.326413][ T30] audit: type=1400 audit(1787559778.385:6500): avc: denied { name_bind } for pid=17383 comm="syz.6.2867" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1219.027687][ T30] audit: type=1400 audit(1787559778.385:6501): avc: denied { node_bind } for pid=17383 comm="syz.6.2867" saddr=172.30.1.7 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1219.149648][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.434272][T15608] Bluetooth: hci4: command tx timeout [ 1219.611618][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.638801][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.668317][T17352] bridge_slave_0: entered allmulticast mode [ 1219.694547][T17352] bridge_slave_0: entered promiscuous mode [ 1219.727474][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.758273][T17352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.791318][T17352] bridge_slave_1: entered allmulticast mode [ 1219.811712][T17352] bridge_slave_1: entered promiscuous mode [ 1219.925561][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.051951][T17352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.109898][T17416] futex_wake_op: syz.5.2875 tries to shift op by 144; fix this program [ 1220.155286][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.994022][T17416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17416 comm=syz.5.2875 [ 1221.008566][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2876'. [ 1221.018158][T17352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.072453][ T30] audit: type=1400 audit(1787559781.235:6502): avc: denied { accept } for pid=17426 comm="syz.3.2871" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1221.193565][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.794263][T15608] Bluetooth: hci4: command tx timeout [ 1221.853655][T11774] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1221.868319][T17352] team0: Port device team_slave_0 added [ 1221.981603][T17352] team0: Port device team_slave_1 added [ 1222.154910][T11774] usb 4-1: Using ep0 maxpacket: 16 [ 1222.176005][T11774] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1222.204463][T17352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.227882][T11774] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1222.247539][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.338093][T11774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1222.403670][T11774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.418816][T11774] usb 4-1: Product: syz [ 1222.423594][T17352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.442820][T11774] usb 4-1: Manufacturer: syz [ 1222.459060][T11774] usb 4-1: SerialNumber: syz [ 1222.491517][T11774] usb 4-1: config 0 descriptor?? [ 1222.526259][T11774] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1222.574977][ T30] audit: type=1400 audit(1787559782.735:6503): avc: denied { search } for pid=5257 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.599688][T17352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.620840][T11774] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1222.640601][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.310965][ T30] audit: type=1400 audit(1787559782.735:6504): avc: denied { search } for pid=5257 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.374589][T17352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.418352][ T30] audit: type=1400 audit(1787559782.735:6505): avc: denied { search } for pid=5257 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.541588][T17352] hsr_slave_0: entered promiscuous mode [ 1223.556809][ T30] audit: type=1400 audit(1787559782.735:6506): avc: denied { read } for pid=5257 comm="dhcpcd" name="n72" dev="tmpfs" ino=12615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1223.602779][T17352] hsr_slave_1: entered promiscuous mode [ 1223.628914][T17352] debugfs: 'hsr0' already exists in 'hsr' [ 1223.660077][T17352] Cannot create hsr debugfs directory [ 1223.695351][ T30] audit: type=1400 audit(1787559782.735:6507): avc: denied { open } for pid=5257 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=12615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1223.770586][T11774] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1223.812947][T11774] em28xx 4-1:0.0: Config register raw data: 0x3d [ 1223.832402][T15608] Bluetooth: hci4: command tx timeout [ 1223.849477][T11774] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1223.865536][ T151] bridge_slave_1: left allmulticast mode [ 1223.884706][ T151] bridge_slave_1: left promiscuous mode [ 1223.971317][ T30] audit: type=1400 audit(1787559782.735:6508): avc: denied { getattr } for pid=5257 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=12615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1223.996268][T11774] em28xx 4-1:0.0: No AC97 audio processor [ 1224.012474][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.141080][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1224.168540][T17454] FAULT_INJECTION: forcing a failure. [ 1224.168540][T17454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.199213][ T151] bridge_slave_0: left allmulticast mode [ 1224.205541][T11774] usb 4-1: USB disconnect, device number 58 [ 1224.233262][ T151] bridge_slave_0: left promiscuous mode [ 1224.266584][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.274099][ T30] audit: type=1400 audit(1787559784.375:6509): avc: denied { read } for pid=17458 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1224.396545][T17454] CPU: 0 UID: 0 PID: 17454 Comm: syz.0.2881 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.396562][T17454] Tainted: [L]=SOFTLOCKUP [ 1224.396566][T17454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1224.396572][T17454] Call Trace: [ 1224.396576][T17454] [ 1224.396581][T17454] dump_stack_lvl+0x100/0x190 [ 1224.396601][T17454] should_fail_ex.cold+0x5/0xa [ 1224.396617][T17454] _copy_from_user+0x2e/0xd0 [ 1224.396629][T17454] __sys_bpf+0x2f5/0x4a30 [ 1224.396649][T17454] ? __pfx___sys_bpf+0x10/0x10 [ 1224.396663][T17454] ? find_held_lock+0x2b/0x80 [ 1224.396677][T17454] ? get_pid_task+0xfc/0x250 [ 1224.396690][T17454] ? get_pid_task+0xfc/0x250 [ 1224.396706][T17454] ? find_held_lock+0x2b/0x80 [ 1224.396722][T17454] ? rcu_read_lock_any_held+0x6a/0x90 [ 1224.396736][T17454] ? find_held_lock+0x2b/0x80 [ 1224.396749][T17454] ? ksys_write+0x190/0x250 [ 1224.396763][T17454] ? ksys_write+0x190/0x250 [ 1224.396786][T17454] ? fput+0x7c/0x100 [ 1224.396795][T17454] ? ksys_write+0x1ac/0x250 [ 1224.396811][T17454] ? __x64_sys_bpf+0xce/0x140 [ 1224.396826][T17454] __x64_sys_bpf+0xce/0x140 [ 1224.396841][T17454] ? do_syscall_64+0xae/0x790 [ 1224.396855][T17454] do_syscall_64+0x123/0x790 [ 1224.396868][T17454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.396885][T17454] RIP: 0033:0x7fee0a59e0d9 [ 1224.396895][T17454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.396905][T17454] RSP: 002b:00007fee0b4f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1224.396915][T17454] RAX: ffffffffffffffda RBX: 00007fee0a825fa0 RCX: 00007fee0a59e0d9 [ 1224.396923][T17454] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 1224.396929][T17454] RBP: 00007fee0b4f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.396935][T17454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.396941][T17454] R13: 00007fee0a826038 R14: 00007fee0a825fa0 R15: 00007fff192b7e88 [ 1224.396955][T17454] [ 1224.651768][ T30] audit: type=1400 audit(1787559784.375:6510): avc: denied { read open } for pid=17458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1224.677324][ T30] audit: type=1400 audit(1787559784.375:6511): avc: denied { getattr } for pid=17458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.030723][ T30] audit: type=1400 audit(1787559785.185:6512): avc: denied { write } for pid=17452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.103058][ T30] audit: type=1400 audit(1787559785.185:6513): avc: denied { add_name } for pid=17452 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.157586][T17478] futex_wake_op: syz.0.2889 tries to shift op by 144; fix this program [ 1225.194329][ T151] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1225.892202][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1225.913469][T15608] Bluetooth: hci4: command tx timeout [ 1226.591433][T11774] kernel write not supported for file /input/event2 (pid: 11774 comm: kworker/0:1) [ 1226.626741][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.638795][T17478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17478 comm=syz.0.2889 [ 1226.792814][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.845924][ T151] bond0 (unregistering): Released all slaves [ 1226.898439][ T151] bond1 (unregistering): Released all slaves [ 1227.218715][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1229.361957][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1229.361967][ T30] audit: type=1400 audit(1787559789.515:6520): avc: denied { write } for pid=17502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.856241][ T30] audit: type=1400 audit(1787559790.015:6521): avc: denied { write } for pid=17533 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.882682][T11774] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1230.053417][T11774] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1230.096980][T11774] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1230.139014][T11774] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1230.206786][T11774] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1230.241601][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1230.268336][T11774] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1230.301043][T11774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.397522][T11774] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1230.670400][T11774] scsi host1: usb-storage 6-1:1.0 [ 1230.881654][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'. [ 1231.126456][T11774] usb 6-1: USB disconnect, device number 24 [ 1231.187943][T17352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1231.206393][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1231.249735][T17352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1231.269923][ T30] audit: type=1400 audit(1787559791.425:6522): avc: denied { write } for pid=17546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.310206][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1231.330258][T17352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1231.356993][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1231.443445][T17352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1231.478107][ T30] audit: type=1400 audit(1787559791.635:6523): avc: denied { write } for pid=17575 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.513453][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1233.148516][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.158738][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.370149][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'. [ 1233.548045][T17352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.631706][T17352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.718861][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.725938][ T7926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.829017][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.836096][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.894014][ T30] audit: type=1400 audit(1787559794.045:6524): avc: denied { write } for pid=17587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.956373][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 1234.279208][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2915'. [ 1234.357440][ T30] audit: type=1400 audit(1787559794.515:6525): avc: denied { write } for pid=17621 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.546113][ T151] hsr_slave_0: left promiscuous mode [ 1234.579032][ T151] hsr_slave_1: left promiscuous mode [ 1234.703239][ T151] veth1_macvtap: left promiscuous mode [ 1234.897469][ T151] veth0_macvtap: left promiscuous mode [ 1234.929421][ T151] veth1_vlan: left promiscuous mode [ 1234.956187][ T151] veth0_vlan: left promiscuous mode [ 1235.373849][T17648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1235.467837][T17656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1235.495034][ T30] audit: type=1400 audit(1787559795.645:6526): avc: denied { write } for pid=17629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1235.640967][ T5788] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1236.192599][ T5788] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1236.227150][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1236.239910][ T5788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.258382][ T30] audit: type=1400 audit(1787559796.415:6527): avc: denied { write } for pid=17664 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.292990][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1236.365432][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1236.398474][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1236.444396][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1236.497826][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1236.529920][ T30] audit: type=1400 audit(1787559796.685:6528): avc: denied { mount } for pid=17669 comm="syz.3.2922" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1236.577519][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1236.577537][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1236.577551][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1236.577564][ T5788] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1236.577577][ T5788] usb 6-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 1236.589815][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.589830][ T5788] usb 6-1: Product: syz [ 1236.589839][ T5788] usb 6-1: Manufacturer: syz [ 1236.589848][ T5788] usb 6-1: SerialNumber: syz [ 1236.613336][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.613402][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.613448][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.613505][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.613549][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.613594][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.613651][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.613694][T17654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1236.614528][ T5788] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1236.614964][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 1236.615805][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1236.615850][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 1236.617950][ T5788] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1236.619240][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 1236.626804][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 1236.626850][ T5788] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1236.629643][ T5788] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1236.860403][T11774] usb 6-1: USB disconnect, device number 25 [ 1236.899037][T11774] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1236.908902][T11774] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1236.909442][T11774] keyspan 6-1:1.0: device disconnected [ 1237.619303][T17352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.044900][T17708] netlink: 'syz.0.2923': attribute type 2 has an invalid length. [ 1238.044916][T17708] netlink: 'syz.0.2923': attribute type 2 has an invalid length. [ 1238.237994][T17352] veth0_vlan: entered promiscuous mode [ 1238.265149][T17352] veth1_vlan: entered promiscuous mode [ 1238.394774][T17352] veth0_macvtap: entered promiscuous mode [ 1238.398042][T17352] veth1_macvtap: entered promiscuous mode [ 1238.431365][T17352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.439711][T17352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.565109][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 1238.635181][ T7742] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.635360][ T7742] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.635494][ T7742] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.635513][ T7742] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.804308][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.804320][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.890676][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.890688][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.915813][ T30] audit: type=1400 audit(1787559799.075:6529): avc: denied { mounton } for pid=17352 comm="syz-executor" path="/root/syzkaller.BcMzFm/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1238.938788][ T30] audit: type=1400 audit(1787559799.095:6530): avc: denied { mounton } for pid=17352 comm="syz-executor" path="/root/syzkaller.BcMzFm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1238.938817][ T30] audit: type=1400 audit(1787559799.095:6531): avc: denied { mounton } for pid=17352 comm="syz-executor" path="/root/syzkaller.BcMzFm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1238.948119][ T30] audit: type=1400 audit(1787559799.105:6532): avc: denied { mounton } for pid=17352 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1238.948145][ T30] audit: type=1400 audit(1787559799.105:6533): avc: denied { mount } for pid=17352 comm="syz-executor" name="/" dev="gadgetfs" ino=7111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1238.948165][ T30] audit: type=1400 audit(1787559799.105:6534): avc: denied { mount } for pid=17352 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1238.951165][ T30] audit: type=1400 audit(1787559799.105:6535): avc: denied { mounton } for pid=17352 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1239.431004][T17740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2927'. [ 1239.435861][ T5788] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1239.683953][ T5788] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1239.683977][ T5788] usb 5-1: New USB device found, idVendor=187f, idProduct=0800, bcdDevice=36.0b [ 1239.686053][ T5788] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1239.686072][ T5788] usb 5-1: can't read configurations, error -71 [ 1240.027637][T17751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.027928][T17751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.767929][T17751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.776512][T17751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.967206][ T7927] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.967287][ T7742] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.967308][ T7742] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.967327][ T7742] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.982032][T17758] ªªªªªª: renamed from vlan0 (while UP) [ 1241.680868][T17767] No source specified [ 1241.681512][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1241.681522][ T30] audit: type=1400 audit(1787559801.835:6537): avc: denied { getopt } for pid=17762 comm="syz.6.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1241.704804][ T30] audit: type=1400 audit(1787559801.865:6538): avc: denied { create } for pid=17765 comm="syz.4.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1242.588477][T17779] Illegal XDP return value 40464384 on prog (id 166) dev syz_tun, expect packet loss! [ 1244.050999][ T30] audit: type=1400 audit(1787559804.205:6539): avc: denied { search } for pid=17794 comm="syz.4.2947" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1244.125093][T17803] futex_wake_op: syz.6.2950 tries to shift op by 144; fix this program [ 1244.157997][ T30] audit: type=1400 audit(1787559804.205:6540): avc: denied { write } for pid=17794 comm="syz.4.2947" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1244.209201][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2950'. [ 1244.273891][ T30] audit: type=1400 audit(1787559804.205:6541): avc: denied { open } for pid=17794 comm="syz.4.2947" path="/5/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1244.568264][T17808] xt_cgroup: invalid path, errno=-2 [ 1244.574464][T17808] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2937'. [ 1245.499150][ T30] audit: type=1400 audit(1787559804.295:6542): avc: denied { create } for pid=17794 comm="syz.4.2947" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1245.646847][ T30] audit: type=1400 audit(1787559804.305:6543): avc: denied { getattr } for pid=17794 comm="syz.4.2947" path="/5/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1245.695384][T17814] syzkaller0: entered promiscuous mode [ 1245.716670][T17815] futex_wake_op: syz.5.2953 tries to shift op by 144; fix this program [ 1245.725916][T17814] syzkaller0: entered allmulticast mode [ 1245.761046][ T30] audit: type=1400 audit(1787559805.645:6544): avc: denied { unmount } for pid=17352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1246.619725][ T30] audit: type=1400 audit(1787559806.775:6545): avc: denied { create } for pid=17832 comm="syz.0.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1246.682212][T17833] netlink: 'syz.0.2957': attribute type 2 has an invalid length. [ 1246.933492][ T30] audit: type=1400 audit(1787559807.085:6546): avc: denied { write } for pid=17832 comm="syz.0.2957" path="socket:[69146]" dev="sockfs" ino=69146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1247.093354][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2958'. [ 1247.900920][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 1247.926909][T17853] comedi comedi0: s526: I/O base address not correctly aligned [ 1248.877732][ T30] audit: type=1400 audit(1787559809.035:6547): avc: denied { connect } for pid=17863 comm="syz.4.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1248.971587][ T30] audit: type=1400 audit(1787559809.095:6548): avc: denied { write } for pid=17863 comm="syz.4.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1249.044858][T17871] futex_wake_op: syz.5.2968 tries to shift op by 144; fix this program [ 1250.156559][T17880] fuse: Unknown parameter '' [ 1250.519716][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 1251.378455][ T30] audit: type=1400 audit(1787559811.535:6549): avc: denied { ioctl } for pid=17892 comm="syz.4.2973" path="socket:[69464]" dev="sockfs" ino=69464 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1251.483213][ T30] audit: type=1400 audit(1787559811.635:6550): avc: denied { load_policy } for pid=17892 comm="syz.4.2973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1251.506710][T17894] SELinux: policydb magic number 0x6ef37910 does not match expected magic number 0xf97cff8c [ 1251.547758][T17894] SELinux: failed to load policy [ 1251.846747][T17903] 9pnet_fd: Insufficient options for proto=fd [ 1252.055636][T17906] futex_wake_op: syz.0.2977 tries to shift op by 144; fix this program [ 1252.605492][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1252.925735][T17906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1253.084511][ T9] usb 4-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 1253.124601][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1253.238993][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1253.253142][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1253.423962][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1253.452358][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1253.495831][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.520155][T17920] bond0: (slave bond_slave_0): Releasing backup interface [ 1253.537669][T17910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1253.579134][ T30] audit: type=1400 audit(1787559813.735:6551): avc: denied { setopt } for pid=17928 comm="syz.6.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1253.606322][T17910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1253.650050][T17920] bond_slave_0: entered promiscuous mode [ 1253.693761][T17920] bond_slave_0: entered allmulticast mode [ 1253.729547][T15608] Bluetooth: hci0: urb ffff88805d0e1a00 submission failed (90) [ 1254.526313][ T5712] usb 4-1: USB disconnect, device number 59 [ 1254.686307][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2986'. [ 1255.308857][T17949] trusted_key: encrypted_key: insufficient parameters specified [ 1255.749505][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 1255.816341][ T30] audit: type=1400 audit(1787559815.975:6552): avc: denied { sqpoll } for pid=17957 comm="syz.3.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1255.925049][T17958] team0: Port device team_slave_0 removed [ 1256.028647][ T30] audit: type=1400 audit(1787559816.185:6553): avc: denied { watch watch_reads } for pid=17965 comm="syz.0.2993" path="/proc/1913" dev="proc" ino=69818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1256.250875][ T30] audit: type=1400 audit(1787559816.405:6554): avc: denied { write } for pid=17953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.523871][ T30] audit: type=1400 audit(1787559816.675:6555): avc: denied { write } for pid=17977 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.649368][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1256.659399][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1256.666917][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1256.674842][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1256.683613][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1257.564907][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2990'. [ 1257.669610][ T30] audit: type=1400 audit(1787559817.815:6556): avc: denied { ioctl } for pid=18000 comm="syz.4.2999" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1257.705613][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 1257.705651][T18001] bridge_slave_1: left allmulticast mode [ 1257.705663][T18001] bridge_slave_1: left promiscuous mode [ 1257.705761][T18001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.708015][T18001] bridge_slave_0: left allmulticast mode [ 1257.708027][T18001] bridge_slave_0: left promiscuous mode [ 1257.708111][T18001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.716154][ T30] audit: type=1400 audit(1787559817.875:6557): avc: denied { append } for pid=18002 comm="syz.0.3001" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1257.946828][ T151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.046192][ T5788] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1258.065259][ T151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.144900][ T151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.202527][ T5788] usb 5-1: Using ep0 maxpacket: 32 [ 1258.205948][ T5788] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1258.206753][ T5788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.206767][ T5788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1258.209704][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.209718][ T5788] usb 5-1: Product: syz [ 1258.209727][ T5788] usb 5-1: Manufacturer: syz [ 1258.209737][ T5788] usb 5-1: SerialNumber: syz [ 1258.246305][ T151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.422263][ T5788] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1258.437008][ T5788] usb 5-1: USB disconnect, device number 55 [ 1258.442618][ T30] audit: type=1400 audit(1787559818.595:6558): avc: denied { connect } for pid=18013 comm="syz.6.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1258.660766][ T30] audit: type=1400 audit(1787559818.815:6559): avc: denied { ioctl } for pid=18021 comm="syz.6.3003" path="socket:[70242]" dev="sockfs" ino=70242 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1258.677473][ T151] bridge_slave_1: left allmulticast mode [ 1258.677487][ T151] bridge_slave_1: left promiscuous mode [ 1258.677572][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.678746][ T151] bridge_slave_0: left allmulticast mode [ 1258.678758][ T151] bridge_slave_0: left promiscuous mode [ 1258.678834][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.713158][ T5606] Bluetooth: hci0: command tx timeout [ 1258.733116][T18028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3003'. [ 1258.746004][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'. [ 1259.171571][ T30] audit: type=1400 audit(1787559819.325:6560): avc: denied { write } for pid=18025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.205599][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.206665][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.214186][ T151] bond0 (unregistering): Released all slaves [ 1259.345584][ T151] tipc: Left network mode [ 1259.370447][T18033] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1259.384862][T18033] syzkaller0: entered promiscuous mode [ 1259.384875][T18033] syzkaller0: entered allmulticast mode [ 1259.392525][ T30] audit: type=1400 audit(1787559819.545:6561): avc: denied { write } for pid=18055 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.453347][ T5712] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1259.464527][T17982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.464568][T17982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.464623][T17982] bridge_slave_0: entered allmulticast mode [ 1259.468836][T17982] bridge_slave_0: entered promiscuous mode [ 1259.475804][T17982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.475848][T17982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.475901][T17982] bridge_slave_1: entered allmulticast mode [ 1259.476595][T17982] bridge_slave_1: entered promiscuous mode [ 1259.564408][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1259.573935][T17982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.580242][T17982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.640208][T17982] team0: Port device team_slave_0 added [ 1259.655770][T17982] team0: Port device team_slave_1 added [ 1259.791680][T17982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.791692][T17982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.791706][T17982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.793875][T17982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.793884][T17982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.793898][T17982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.796782][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1259.796806][ T5712] usb 5-1: New USB device found, idVendor=187f, idProduct=0800, bcdDevice=36.0b [ 1259.797822][ T5712] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1259.797840][ T5712] usb 5-1: can't read configurations, error -71 [ 1260.522919][T17982] hsr_slave_0: entered promiscuous mode [ 1260.523349][T17982] hsr_slave_1: entered promiscuous mode [ 1260.526797][T17982] debugfs: 'hsr0' already exists in 'hsr' [ 1260.526811][T17982] Cannot create hsr debugfs directory [ 1260.556189][ T151] hsr_slave_0: left promiscuous mode [ 1260.563641][ T151] veth1_macvtap: left promiscuous mode [ 1260.563671][ T151] veth0_macvtap: left promiscuous mode [ 1260.563714][ T151] veth1_vlan: left promiscuous mode [ 1260.563748][ T151] veth0_vlan: left promiscuous mode [ 1260.792589][ T5606] Bluetooth: hci0: command tx timeout [ 1260.819465][ T30] audit: type=1400 audit(1787559820.975:6562): avc: denied { write } for pid=18065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.946300][ T30] audit: type=1400 audit(1787559821.105:6563): avc: denied { write } for pid=18080 comm="syz.4.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1260.994829][ T30] audit: type=1400 audit(1787559821.155:6564): avc: denied { write } for pid=18082 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.056788][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1261.267662][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1261.268502][ T30] audit: type=1400 audit(1787559821.425:6565): avc: denied { read } for pid=18080 comm="syz.4.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1263.492344][T18092] FAULT_INJECTION: forcing a failure. [ 1263.492344][T18092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.492365][T18092] CPU: 0 UID: 0 PID: 18092 Comm: syz.4.3013 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.492380][T18092] Tainted: [L]=SOFTLOCKUP [ 1263.492384][T18092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1263.492390][T18092] Call Trace: [ 1263.492394][T18092] [ 1263.492399][T18092] dump_stack_lvl+0x100/0x190 [ 1263.492418][T18092] should_fail_ex.cold+0x5/0xa [ 1263.492433][T18092] _copy_from_user+0x2e/0xd0 [ 1263.492446][T18092] __sys_bpf+0x2f5/0x4a30 [ 1263.492464][T18092] ? __pfx___sys_bpf+0x10/0x10 [ 1263.492479][T18092] ? find_held_lock+0x2b/0x80 [ 1263.492492][T18092] ? get_pid_task+0xfc/0x250 [ 1263.492505][T18092] ? get_pid_task+0xfc/0x250 [ 1263.492521][T18092] ? find_held_lock+0x2b/0x80 [ 1263.492537][T18092] ? rcu_read_lock_any_held+0x6a/0x90 [ 1263.492551][T18092] ? find_held_lock+0x2b/0x80 [ 1263.492570][T18092] ? ksys_write+0x190/0x250 [ 1263.492584][T18092] ? ksys_write+0x190/0x250 [ 1263.492598][T18092] ? populate_seccomp_data+0x225/0x4d0 [ 1263.492621][T18092] ? ksys_write+0x1ac/0x250 [ 1263.492636][T18092] ? __x64_sys_bpf+0xce/0x140 [ 1263.492651][T18092] __x64_sys_bpf+0xce/0x140 [ 1263.492666][T18092] ? __seccomp_permit_syscall+0x204/0x2e0 [ 1263.492681][T18092] do_syscall_64+0x123/0x790 [ 1263.492695][T18092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.492706][T18092] RIP: 0033:0x7fad1f99e0d9 [ 1263.492716][T18092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.492727][T18092] RSP: 002b:00007fad20796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1263.492737][T18092] RAX: ffffffffffffffda RBX: 00007fad1fc26180 RCX: 00007fad1f99e0d9 [ 1263.492744][T18092] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 1263.492751][T18092] RBP: 00007fad20796090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.492757][T18092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.492764][T18092] R13: 00007fad1fc26218 R14: 00007fad1fc26180 R15: 00007fff5700c188 [ 1263.492778][T18092] [ 1263.536311][ T5606] Bluetooth: hci0: command tx timeout [ 1264.348813][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3014'. [ 1264.481737][ T30] audit: type=1400 audit(1787559824.635:6566): avc: denied { append } for pid=18113 comm="syz.0.3017" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1264.507391][ T30] audit: type=1400 audit(1787559824.665:6567): avc: denied { shutdown } for pid=18113 comm="syz.0.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1264.692564][ T30] audit: type=1400 audit(1787559824.845:6568): avc: denied { write } for pid=18096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.873573][ T30] audit: type=1400 audit(1787559825.035:6569): avc: denied { write } for pid=18122 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.974179][T17982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1264.978727][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1264.982754][T17982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1264.989007][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1264.995326][T17982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1264.999832][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.004151][T17982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1265.010710][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.170771][T17982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.213148][T17982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.218438][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.218491][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.219932][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.219974][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.289429][T17982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1265.500137][T18150] futex_wake_op: syz.6.3022 tries to shift op by 144; fix this program [ 1265.594221][ T5606] Bluetooth: hci0: command tx timeout [ 1265.634617][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1265.659714][ T30] audit: type=1400 audit(1787559825.815:6570): avc: denied { write } for pid=18138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.782314][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1265.782731][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1265.787922][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1265.787941][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1265.787960][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1265.787976][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1265.787990][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1265.788004][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1265.788019][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1265.788034][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1265.789791][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1265.789809][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1265.789829][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1265.789844][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1265.789859][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1265.789873][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1265.789889][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1265.789904][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1265.791255][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1265.791274][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1265.791293][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1265.791308][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1265.791322][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1265.791337][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1265.791352][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1265.791367][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1265.795180][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1265.795234][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.803765][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1265.842651][ T30] audit: type=1400 audit(1787559826.005:6571): avc: denied { write } for pid=18165 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.979382][T17982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.045330][T17982] veth0_vlan: entered promiscuous mode [ 1266.047763][T17982] veth1_vlan: entered promiscuous mode [ 1266.101658][T17982] veth0_macvtap: entered promiscuous mode [ 1266.105568][T17982] veth1_macvtap: entered promiscuous mode [ 1266.118616][T17982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.131940][T17982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.172183][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.172208][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.172227][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.172245][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.244731][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.244744][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.298714][ T7927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.298726][ T7927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.473447][ T30] audit: type=1400 audit(1787559826.635:6572): avc: denied { append } for pid=18181 comm="syz.3.2995" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1266.478228][ T30] audit: type=1400 audit(1787559826.635:6573): avc: denied { write } for pid=18172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.637007][ T30] audit: type=1400 audit(1787559826.795:6574): avc: denied { write } for pid=18188 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.186508][ T30] audit: type=1400 audit(1787559827.345:6575): avc: denied { write } for pid=18192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.268043][T18204] 0x000000000000-0x000000020000 : "" [ 1267.314586][T18204] ftl_cs: FTL header not found. [ 1267.507586][T18206] netlink: 'syz.3.3026': attribute type 21 has an invalid length. [ 1267.507601][T18206] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3026'. [ 1267.507667][T18206] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3026'. [ 1267.508040][T18206] netlink: 'syz.3.3026': attribute type 21 has an invalid length. [ 1267.508049][T18206] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3026'. [ 1267.508067][T18206] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3026'. [ 1268.368240][T11774] usb 5-1: USB disconnect, device number 58 [ 1268.540922][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3027'. [ 1269.049235][T18235] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3032'. [ 1269.240156][T18248] futex_wake_op: syz.6.3033 tries to shift op by 144; fix this program [ 1269.271453][T18248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18248 comm=syz.6.3033 [ 1269.464154][ T5823] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1269.624701][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1269.624727][ T5823] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1269.626017][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.626029][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1269.627546][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.627560][ T5823] usb 4-1: Product: syz [ 1269.627570][ T5823] usb 4-1: Manufacturer: syz [ 1269.627578][ T5823] usb 4-1: SerialNumber: syz [ 1269.631091][ T5823] usb 4-1: selecting invalid altsetting 1 [ 1269.631438][ T5823] usb 4-1: unit 6 not found! [ 1269.762473][ T5788] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1269.918815][ T5788] usb 5-1: Using ep0 maxpacket: 8 [ 1269.923702][ T5788] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1269.925573][ T5788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1269.925610][ T5788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1269.925629][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.928710][ T5788] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 1269.930485][ T5788] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1270.275030][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1270.275040][ T30] audit: type=1400 audit(1787559830.435:6583): avc: denied { write } for pid=18246 comm="syz.3.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1270.293406][T18262] NILFS (nbd4): device size too small [ 1270.586371][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3040'. [ 1270.612500][T15608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1270.615580][T15608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1270.616096][T15608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1270.617124][T15608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1270.617410][T15608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1270.685270][ T5823] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1270.778317][ T5823] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1270.779782][ T5823] usb 4-1: USB disconnect, device number 60 [ 1270.850465][T15615] udevd[15615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1270.894385][T18279] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3043'. [ 1271.119444][T18289] futex_wake_op: syz.6.3045 tries to shift op by 144; fix this program [ 1271.121082][T18289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18289 comm=syz.6.3045 [ 1272.629572][T18311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3049'. [ 1272.632224][T15608] Bluetooth: hci3: command tx timeout [ 1272.651601][T11774] usb 5-1: USB disconnect, device number 59 [ 1272.654800][T11774] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1272.655035][T11774] kobil_sct 5-1:1.0: device disconnected [ 1273.042137][T18271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.042179][T18271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.042233][T18271] bridge_slave_0: entered allmulticast mode [ 1273.049331][T18271] bridge_slave_0: entered promiscuous mode [ 1273.050479][T18271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.050526][T18271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.050579][T18271] bridge_slave_1: entered allmulticast mode [ 1273.060085][T18271] bridge_slave_1: entered promiscuous mode [ 1273.135818][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3051'. [ 1273.147842][T18271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.159752][T18271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.177447][ T30] audit: type=1400 audit(1787559833.335:6584): avc: denied { write } for pid=18297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1273.262981][T18271] team0: Port device team_slave_0 added [ 1273.272603][T18271] team0: Port device team_slave_1 added [ 1273.374059][T18271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.374069][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.374083][T18271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.382008][T18271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.382017][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.382031][T18271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.473016][ T30] audit: type=1400 audit(1787559833.635:6585): avc: denied { write } for pid=18332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1273.508462][T18271] hsr_slave_0: entered promiscuous mode [ 1273.508861][T18271] hsr_slave_1: entered promiscuous mode [ 1273.946848][T18342] futex_wake_op: syz.4.3055 tries to shift op by 144; fix this program [ 1274.712172][T15608] Bluetooth: hci3: command tx timeout [ 1274.840724][T18342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18342 comm=syz.4.3055 [ 1275.191164][T18271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1275.220159][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1275.220691][T18271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1275.234597][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1275.234926][T18271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1275.240475][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1275.240886][T18271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1275.247520][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1276.135540][T18366] FAULT_INJECTION: forcing a failure. [ 1276.135540][T18366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.135565][T18366] CPU: 0 UID: 0 PID: 18366 Comm: syz.4.3057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1276.135580][T18366] Tainted: [L]=SOFTLOCKUP [ 1276.135584][T18366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1276.135590][T18366] Call Trace: [ 1276.135594][T18366] [ 1276.135599][T18366] dump_stack_lvl+0x100/0x190 [ 1276.135618][T18366] should_fail_ex.cold+0x5/0xa [ 1276.135633][T18366] core_sys_select+0x938/0xbb0 [ 1276.135653][T18366] ? __pfx_core_sys_select+0x10/0x10 [ 1276.135669][T18366] ? find_held_lock+0x2b/0x80 [ 1276.135682][T18366] ? get_pid_task+0xfc/0x250 [ 1276.135706][T18366] ? __pfx_set_user_sigmask+0x10/0x10 [ 1276.135722][T18366] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1276.135739][T18366] do_pselect.constprop.0+0x238/0x270 [ 1276.135757][T18366] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1276.135776][T18366] ? ksys_write+0x1ac/0x250 [ 1276.135792][T18366] __x64_sys_pselect6+0x149/0x1c0 [ 1276.135810][T18366] do_syscall_64+0x123/0x790 [ 1276.135823][T18366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.135834][T18366] RIP: 0033:0x7fad1f99e0d9 [ 1276.135844][T18366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.135855][T18366] RSP: 002b:00007fad207b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1276.135865][T18366] RAX: ffffffffffffffda RBX: 00007fad1fc26090 RCX: 00007fad1f99e0d9 [ 1276.135872][T18366] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000040 [ 1276.135878][T18366] RBP: 00007fad207b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.135885][T18366] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1276.135891][T18366] R13: 00007fad1fc26128 R14: 00007fad1fc26090 R15: 00007fff5700c188 [ 1276.135904][T18366] [ 1276.215262][ T30] audit: type=1400 audit(1787559836.375:6586): avc: denied { write } for pid=18343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.324280][T18271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.345255][T18271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.350846][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.350889][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.365956][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.366000][ T6939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.405347][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3060'. [ 1276.470456][ T30] audit: type=1400 audit(1787559836.625:6587): avc: denied { write } for pid=18377 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.244256][T15608] Bluetooth: hci3: command tx timeout [ 1277.560782][T18400] futex_wake_op: syz.3.3065 tries to shift op by 144; fix this program [ 1278.416642][T18400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18400 comm=syz.3.3065 [ 1278.929622][T18425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64835 sclass=netlink_route_socket pid=18425 comm=syz.3.3067 [ 1278.968054][T18271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.257214][ T30] audit: type=1400 audit(1787559839.415:6588): avc: denied { cmd } for pid=18437 comm="iou-wrk-18439" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1279.272884][T15608] Bluetooth: hci3: command tx timeout [ 1279.589241][T18271] veth0_vlan: entered promiscuous mode [ 1279.602909][T18271] veth1_vlan: entered promiscuous mode [ 1279.665343][T18271] veth0_macvtap: entered promiscuous mode [ 1279.668974][T18271] veth1_macvtap: entered promiscuous mode [ 1279.678604][T18455] FAULT_INJECTION: forcing a failure. [ 1279.678604][T18455] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.678623][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.3.3074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1279.678639][T18455] Tainted: [L]=SOFTLOCKUP [ 1279.678643][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1279.678649][T18455] Call Trace: [ 1279.678653][T18455] [ 1279.678657][T18455] dump_stack_lvl+0x100/0x190 [ 1279.678677][T18455] should_fail_ex.cold+0x5/0xa [ 1279.678692][T18455] should_failslab+0xc2/0x120 [ 1279.678709][T18455] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1279.678725][T18455] ? io_submit_one+0x124/0x1fb0 [ 1279.678740][T18455] io_submit_one+0x124/0x1fb0 [ 1279.678754][T18455] ? __lock_acquire+0x4c5/0x1ec0 [ 1279.678771][T18455] ? lockdep_hardirqs_on+0x7d/0x110 [ 1279.678784][T18455] ? __pfx_io_submit_one+0x10/0x10 [ 1279.678800][T18455] ? __might_fault+0xc5/0x140 [ 1279.678816][T18455] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 1279.678829][T18455] __x64_sys_io_submit+0x1b1/0x3a0 [ 1279.678843][T18455] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1279.678863][T18455] do_syscall_64+0x123/0x790 [ 1279.678876][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.678887][T18455] RIP: 0033:0x7fd5cdf9e0d9 [ 1279.678897][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.678908][T18455] RSP: 002b:00007fd5cee7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1279.678919][T18455] RAX: ffffffffffffffda RBX: 00007fd5ce226090 RCX: 00007fd5cdf9e0d9 [ 1279.678926][T18455] RDX: 0000200000000440 RSI: 0000000000000001 RDI: 00007fd5cee7f000 [ 1279.678932][T18455] RBP: 00007fd5cee7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.678939][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.678945][T18455] R13: 00007fd5ce226128 R14: 00007fd5ce226090 R15: 00007ffdfdd28428 [ 1279.678958][T18455] [ 1279.680655][T18271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.690709][T18271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.702641][T18454] overlayfs: failed to clone upperpath [ 1279.755771][ T30] audit: type=1400 audit(1787559839.915:6589): avc: denied { connect } for pid=18453 comm="syz.6.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1279.772666][ T30] audit: type=1400 audit(1787559839.935:6590): avc: denied { read } for pid=18453 comm="syz.6.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1279.804264][T18461] futex_wake_op: syz.4.3076 tries to shift op by 144; fix this program [ 1280.695471][T18461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18461 comm=syz.4.3076 [ 1280.788108][ T7742] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.789072][ T7742] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.789095][ T7742] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.795230][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.901527][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.901539][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.985239][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.985251][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.105943][T18477] netlink: 'syz.4.3082': attribute type 1 has an invalid length. [ 1281.156086][T18477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1281.246691][ T5712] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1281.256542][T18477] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1281.288114][T18477] bond1: (slave dummy0): making interface the new active one [ 1281.288503][T18477] dummy0: entered promiscuous mode [ 1281.289430][T18477] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1281.317235][ T30] audit: type=1400 audit(1787559841.475:6591): avc: denied { unmount } for pid=18271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1281.397205][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1281.397230][ T5712] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1281.398703][ T5712] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1281.402003][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.402018][ T5712] usb 4-1: Product: syz [ 1281.402026][ T5712] usb 4-1: Manufacturer: syz [ 1281.402037][ T5712] usb 4-1: SerialNumber: syz [ 1281.503846][T18482] bond1 (unregistering): (slave veth3): Releasing active interface [ 1281.507798][T18482] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1281.508909][ T30] audit: type=1400 audit(1787559841.665:6592): avc: denied { getopt } for pid=18485 comm="syz.7.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1281.509172][T18482] bond1 (unregistering): Released all slaves [ 1281.718638][ T30] audit: type=1400 audit(1787559841.875:6593): avc: denied { map } for pid=18488 comm="syz.7.3084" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1281.733028][ T30] audit: type=1400 audit(1787559841.895:6594): avc: denied { write } for pid=18488 comm="syz.7.3084" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1281.739108][ T30] audit: type=1400 audit(1787559841.895:6595): avc: denied { open } for pid=18488 comm="syz.7.3084" path="/2/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1281.743762][ T30] audit: type=1400 audit(1787559841.905:6596): avc: denied { mounton } for pid=18488 comm="syz.7.3084" path="/2/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1281.743865][T18489] 9p: Bad value for 'rfdno' [ 1284.507825][ T5712] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 1284.557728][ T5712] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1284.628083][T18527] Bluetooth: MGMT ver 1.23 [ 1284.651901][ T5712] usb 4-1: USB disconnect, device number 61 [ 1284.675596][ T30] audit: type=1326 audit(1787559844.835:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.7.3097" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefd879e0d9 code=0x0 [ 1284.744950][T18524] netlink: 'syz.4.3095': attribute type 5 has an invalid length. [ 1284.865551][ T30] audit: type=1400 audit(1787559845.025:6598): avc: denied { map } for pid=18528 comm="syz.7.3097" path="socket:[77645]" dev="sockfs" ino=77645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1284.962001][ T30] audit: type=1400 audit(1787559845.025:6599): avc: denied { read write } for pid=18528 comm="syz.7.3097" path="socket:[77645]" dev="sockfs" ino=77645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1285.042234][ T5712] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1285.066458][ T30] audit: type=1400 audit(1787559845.225:6600): avc: denied { listen } for pid=18540 comm="syz.6.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1285.144666][T18546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1285.214113][ T5712] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1285.224052][ T6939] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.257258][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1285.269318][ T5712] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1285.292751][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.327916][ T5712] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1285.370984][ T5712] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1285.405631][ T6939] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.529037][ T6939] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.554193][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 1285.566367][ T5712] usb 4-1: USB disconnect, device number 62 [ 1285.598664][ T5712] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1285.615751][ T5712] spcp8x5 4-1:1.0: device disconnected [ 1285.650885][ T6939] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.501971][T18584] futex_wake_op: syz.4.3113 tries to shift op by 144; fix this program [ 1286.510423][ T5823] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1286.932232][ T5823] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 1287.378196][T18584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3113'. [ 1287.443487][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1287.443497][ T30] audit: type=1400 audit(1787559847.595:6605): avc: denied { write } for pid=18561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.510807][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1287.559042][ T5823] usb 4-1: Product: syz [ 1287.586781][ T5823] usb 4-1: Manufacturer: syz [ 1287.604143][ T6939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.640044][ T5823] navman 4-1:1.0: navman converter detected [ 1287.661872][ T6939] bond0 (unregistering): Released all slaves [ 1287.678662][ T5823] usb 4-1: navman converter now attached to ttyUSB0 [ 1287.701146][ T30] audit: type=1400 audit(1787559847.845:6606): avc: denied { write } for pid=18596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.847923][ T6939] tipc: Left network mode [ 1287.936178][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1288.003491][ T30] audit: type=1400 audit(1787559848.165:6607): avc: denied { read write } for pid=18607 comm="syz.0.3118" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1288.103393][ T5823] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1288.198282][ T30] audit: type=1400 audit(1787559848.165:6608): avc: denied { open } for pid=18607 comm="syz.0.3118" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1288.298447][T18626] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1288.332086][ T5823] usb 8-1: Using ep0 maxpacket: 16 [ 1288.369695][ T5823] usb 8-1: New USB device found, idVendor=0403, idProduct=a5ac, bcdDevice=49.9b [ 1288.428220][ T5823] usb 8-1: config 19 has an invalid interface number: 31 but max is 2 [ 1288.497763][ T5823] usb 8-1: config 19 has an invalid interface number: 202 but max is 2 [ 1288.569422][ T5823] usb 8-1: config 19 contains an unexpected descriptor of type 0x1, skipping [ 1288.618756][ T5823] usb 8-1: config 19 has an invalid interface number: 181 but max is 2 [ 1288.673575][ T5823] usb 8-1: config 19 has an invalid interface number: 241 but max is 2 [ 1288.718322][ T30] audit: type=1400 audit(1787559848.875:6609): avc: denied { map } for pid=18637 comm="syz.4.3123" path="socket:[78331]" dev="sockfs" ino=78331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1288.752808][ T5823] usb 8-1: config 19 has an invalid interface number: 155 but max is 2 [ 1288.784144][ T5823] usb 8-1: config 19 has 5 interfaces, different from the descriptor's value: 3 [ 1288.800910][T18638] FAULT_INJECTION: forcing a failure. [ 1288.800910][T18638] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.817361][ T5823] usb 8-1: config 19 has no interface number 0 [ 1288.830449][ T5823] usb 8-1: config 19 has no interface number 1 [ 1288.841091][T18638] CPU: 0 UID: 0 PID: 18638 Comm: syz.4.3123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.841107][T18638] Tainted: [L]=SOFTLOCKUP [ 1288.841111][T18638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1288.841118][T18638] Call Trace: [ 1288.841122][T18638] [ 1288.841126][T18638] dump_stack_lvl+0x100/0x190 [ 1288.841146][T18638] should_fail_ex.cold+0x5/0xa [ 1288.841162][T18638] should_failslab+0xc2/0x120 [ 1288.841173][T18638] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1288.841189][T18638] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1288.841199][T18638] ? prepare_creds+0x2c/0x950 [ 1288.841217][T18638] prepare_creds+0x2c/0x950 [ 1288.841234][T18638] copy_creds+0xa7/0xa50 [ 1288.841251][T18638] copy_process+0x1447/0x8370 [ 1288.841262][T18638] ? __lock_acquire+0x4c5/0x1ec0 [ 1288.841285][T18638] ? __pfx_copy_process+0x10/0x10 [ 1288.841295][T18638] ? find_held_lock+0x2b/0x80 [ 1288.841314][T18638] kernel_clone+0x176/0x9d0 [ 1288.841323][T18638] ? find_held_lock+0x2b/0x80 [ 1288.841337][T18638] ? __pfx_kernel_clone+0x10/0x10 [ 1288.841356][T18638] ? ksys_write+0x190/0x250 [ 1288.841374][T18638] __do_sys_clone+0xd9/0x120 [ 1288.841385][T18638] ? __pfx___do_sys_clone+0x10/0x10 [ 1288.841395][T18638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1288.841414][T18638] ? ksys_write+0x1ac/0x250 [ 1288.841427][T18638] ? __pfx_ksys_write+0x10/0x10 [ 1288.841445][T18638] do_syscall_64+0x123/0x790 [ 1288.841459][T18638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.841470][T18638] RIP: 0033:0x7fad1f99e0d9 [ 1288.841480][T18638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.841490][T18638] RSP: 002b:00007fad207d7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1288.841501][T18638] RAX: ffffffffffffffda RBX: 00007fad1fc25fa0 RCX: 00007fad1f99e0d9 [ 1288.841508][T18638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1288.841514][T18638] RBP: 00007fad207d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.841520][T18638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1288.841527][T18638] R13: 00007fad1fc26038 R14: 00007fad1fc25fa0 R15: 00007fff5700c188 [ 1288.841540][T18638] [ 1289.067047][ T5823] usb 8-1: config 19 has no interface number 2 [ 1289.073234][ T5823] usb 8-1: config 19 has no interface number 3 [ 1289.079360][ T5823] usb 8-1: config 19 has no interface number 4 [ 1289.085550][ T5823] usb 8-1: config 19 interface 31 altsetting 127 bulk endpoint 0xD has invalid maxpacket 64 [ 1289.095623][ T5823] usb 8-1: config 19 interface 31 altsetting 127 endpoint 0xE has invalid maxpacket 46056, setting to 64 [ 1289.106820][ T5823] usb 8-1: config 19 interface 31 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1289.117854][ T5823] usb 8-1: config 19 interface 31 altsetting 127 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 1289.129666][ T5823] usb 8-1: config 19 interface 31 altsetting 127 endpoint 0x82 has invalid maxpacket 991, setting to 64 [ 1289.141395][ T5823] usb 8-1: config 19 interface 31 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1289.152423][ T5823] usb 8-1: config 19 interface 31 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 1289.163272][ T5823] usb 8-1: config 19 interface 31 altsetting 127 has 10 endpoint descriptors, different from the interface descriptor's value: 15 [ 1289.176658][ T5823] usb 8-1: config 19 interface 202 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1289.187589][ T5823] usb 8-1: config 19 interface 202 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1289.198531][ T5823] usb 8-1: config 19 interface 202 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1289.209311][ T5823] usb 8-1: config 19 interface 181 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1289.220070][ T5823] usb 8-1: config 19 interface 181 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1289.230996][ T5823] usb 8-1: config 19 interface 181 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1289.242176][ T5823] usb 8-1: config 19 interface 181 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 1289.254137][ T5823] usb 8-1: config 19 interface 181 altsetting 0 endpoint 0x8D has an invalid bInterval 125, changing to 7 [ 1289.265420][ T5823] usb 8-1: config 19 interface 181 altsetting 0 endpoint 0x8D has invalid maxpacket 50166, setting to 1024 [ 1289.276808][ T5823] usb 8-1: config 19 interface 181 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1289.292115][ T5823] usb 8-1: config 19 interface 181 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1289.305323][ T5823] usb 8-1: too many endpoints for config 19 interface 241 altsetting 91: 131, using maximum allowed: 30 [ 1289.316453][ T5823] usb 8-1: config 19 interface 241 altsetting 91 has a duplicate endpoint with address 0x9, skipping [ 1289.332090][ T5823] usb 8-1: config 19 interface 241 altsetting 91 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1289.351555][ T5823] usb 8-1: config 19 interface 241 altsetting 91 has a duplicate endpoint with address 0xE, skipping [ 1289.370361][ T5823] usb 8-1: config 19 interface 241 altsetting 91 has 4 endpoint descriptors, different from the interface descriptor's value: 131 [ 1289.392843][ T5823] usb 8-1: too many endpoints for config 19 interface 155 altsetting 216: 100, using maximum allowed: 30 [ 1289.410961][ T5823] usb 8-1: config 19 interface 155 altsetting 216 has a duplicate endpoint with address 0x5, skipping [ 1289.440256][ T5823] usb 8-1: config 19 interface 155 altsetting 216 endpoint 0x4 has invalid maxpacket 12239, setting to 1024 [ 1289.460147][ T5823] usb 8-1: config 19 interface 155 altsetting 216 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1289.485576][ T5823] usb 8-1: config 19 interface 155 altsetting 216 has a duplicate endpoint with address 0x8, skipping [ 1289.502335][ T5823] usb 8-1: config 19 interface 155 altsetting 216 has 3 endpoint descriptors, different from the interface descriptor's value: 100 [ 1289.530550][ T5823] usb 8-1: config 19 interface 31 has no altsetting 0 [ 1289.537488][T11774] usb 4-1: USB disconnect, device number 63 [ 1289.551381][ T5823] usb 8-1: config 19 interface 202 has no altsetting 0 [ 1289.564722][ T5823] usb 8-1: config 19 interface 241 has no altsetting 0 [ 1289.578075][T11774] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 1289.603616][ T5823] usb 8-1: config 19 interface 155 has no altsetting 0 [ 1289.616763][T11774] navman 4-1:1.0: device disconnected [ 1289.668695][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.678621][ T30] audit: type=1800 audit(1787559849.825:6610): pid=18644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.3124" name="/" dev="sockfs" ino=78345 res=0 errno=0 [ 1289.701915][ T5823] usb 8-1: Product: syz [ 1289.723710][ T5823] usb 8-1: Manufacturer: syz [ 1289.736155][ T5823] usb 8-1: SerialNumber: syz [ 1289.767620][T18602] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1289.825780][ T6939] hsr_slave_0: left promiscuous mode [ 1289.855308][ T6939] hsr_slave_1: left promiscuous mode [ 1289.868739][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.897018][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.923855][T18652] futex_wake_op: syz.4.3127 tries to shift op by 144; fix this program [ 1289.939499][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.967140][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.987505][ T30] audit: type=1400 audit(1787559850.145:6611): avc: denied { write } for pid=18627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.027164][T18654] kernel read not supported for file /bus (pid: 18654 comm: syz.0.3126) [ 1290.037950][ T5823] ftdi_sio 8-1:19.31: FTDI USB Serial Device converter detected [ 1290.071392][ T5823] ftdi_sio ttyUSB0: unknown device type: 0x499b [ 1290.095331][ T6939] veth1_macvtap: left promiscuous mode [ 1290.138670][T18658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3127'. [ 1290.193873][ T6939] veth0_macvtap: left promiscuous mode [ 1290.213025][ T5823] ftdi_sio 8-1:19.202: FTDI USB Serial Device converter detected [ 1290.227435][ T6939] veth1_vlan: left promiscuous mode [ 1291.236715][ T5823] ftdi_sio ttyUSB1: unknown device type: 0x499b [ 1291.243867][ T6939] veth0_vlan: left promiscuous mode [ 1291.904890][ T30] audit: type=1800 audit(1787559852.065:6612): pid=18654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3126" name="bus" dev="mqueue" ino=78369 res=0 errno=0 [ 1291.964632][ T5823] ftdi_sio 8-1:19.181: FTDI USB Serial Device converter detected [ 1292.014703][ T5823] ftdi_sio ttyUSB2: unknown device type: 0x499b [ 1292.049527][ T30] audit: type=1400 audit(1787559852.095:6613): avc: denied { write } for pid=18665 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.083227][ T5823] ftdi_sio 8-1:19.241: FTDI USB Serial Device converter detected [ 1292.118723][ T5823] ftdi_sio ttyUSB3: unknown device type: 0x499b [ 1292.154045][ T5823] ftdi_sio 8-1:19.155: FTDI USB Serial Device converter detected [ 1292.198881][ T5823] ftdi_sio ttyUSB4: unknown device type: 0x499b [ 1292.258206][ T5823] usb 8-1: USB disconnect, device number 2 [ 1292.297677][ T5823] ftdi_sio 8-1:19.31: device disconnected [ 1292.336036][ T5823] ftdi_sio 8-1:19.202: device disconnected [ 1292.416777][ T5823] ftdi_sio 8-1:19.181: device disconnected [ 1292.449286][ T5823] ftdi_sio 8-1:19.241: device disconnected [ 1292.500725][ T5823] ftdi_sio 8-1:19.155: device disconnected [ 1292.563468][T18675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9756 sclass=netlink_route_socket pid=18675 comm=syz.3.3129 [ 1292.578380][ T6939] team0 (unregistering): Port device team_slave_1 removed [ 1292.604399][ T6939] team0 (unregistering): Port device team_slave_0 removed [ 1292.628777][ T30] audit: type=1400 audit(1787559852.785:6614): avc: denied { getopt } for pid=18674 comm="syz.3.3129" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1293.679321][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1294.117915][ T6939] IPVS: stop unused estimator thread 0... [ 1294.404236][ T30] audit: type=1400 audit(1787559854.565:6615): avc: denied { map } for pid=18701 comm="syz.3.3138" path="pipe:[78554]" dev="pipefs" ino=78554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1295.118077][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.124732][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.410787][ T30] audit: type=1400 audit(1787559855.565:6616): avc: denied { write } for pid=18687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.727446][T18725] fuse: Bad value for 'fd' [ 1295.745688][ T30] audit: type=1400 audit(1787559855.905:6617): avc: denied { write } for pid=18722 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.928633][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1296.867835][ T30] audit: type=1400 audit(1787559857.025:6618): avc: denied { write } for pid=18730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.096720][ T30] audit: type=1400 audit(1787559857.255:6619): avc: denied { write } for pid=18766 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.267872][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1297.384361][ T30] audit: type=1400 audit(1787559857.545:6620): avc: denied { setopt } for pid=18774 comm="syz.7.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1298.615563][ T30] audit: type=1400 audit(1787559858.775:6621): avc: denied { write } for pid=18782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.800863][ T30] audit: type=1400 audit(1787559858.955:6622): avc: denied { write } for pid=18807 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.878746][ T7926] IPVS: starting estimator thread 0... [ 1298.992486][T18813] IPVS: using max 78 ests per chain, 187200 per kthread [ 1299.125709][ T30] audit: type=1400 audit(1787559859.285:6623): avc: denied { unmount } for pid=17982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1299.164828][T18820] Bluetooth: MGMT ver 1.23 [ 1299.203774][T18826] syz_tun: entered allmulticast mode [ 1299.425680][T18818] syz_tun: left allmulticast mode [ 1299.433070][T11774] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1299.540799][ T30] audit: type=1400 audit(1787559859.695:6624): avc: denied { write } for pid=18816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1300.175526][T11774] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1300.215678][T11774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.247276][T18837] FAULT_INJECTION: forcing a failure. [ 1300.247276][T18837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.303881][T11774] usb 5-1: config 0 descriptor?? [ 1300.313736][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 1300.355025][T11774] cp210x 5-1:0.0: cp210x converter detected [ 1300.360949][ T30] audit: type=1400 audit(1787559860.505:6625): avc: denied { write } for pid=18846 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1300.462947][T18837] CPU: 0 UID: 0 PID: 18837 Comm: syz.7.3163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.462967][T18837] Tainted: [L]=SOFTLOCKUP [ 1300.462972][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1300.462978][T18837] Call Trace: [ 1300.462984][T18837] [ 1300.462989][T18837] dump_stack_lvl+0x100/0x190 [ 1300.463009][T18837] should_fail_ex.cold+0x5/0xa [ 1300.463024][T18837] _copy_from_iter+0x1f4/0x1690 [ 1300.463038][T18837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1300.463058][T18837] ? __pfx__copy_from_iter+0x10/0x10 [ 1300.463071][T18837] ? alloc_pages_mpol+0x260/0x550 [ 1300.463083][T18837] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1300.463095][T18837] copy_page_from_iter+0x238/0x300 [ 1300.463110][T18837] anon_pipe_write+0xaf1/0x1b50 [ 1300.463133][T18837] ? __pfx_anon_pipe_write+0x10/0x10 [ 1300.463149][T18837] ? selinux_file_permission+0x8f/0x6d0 [ 1300.463162][T18837] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1300.463179][T18837] ? bpf_lsm_file_permission+0x9/0x10 [ 1300.463190][T18837] ? security_file_permission+0x76/0x210 [ 1300.463204][T18837] ? rw_verify_area+0xce/0x6d0 [ 1300.463218][T18837] vfs_write+0x6af/0x1050 [ 1300.463232][T18837] ? __pfx_anon_pipe_write+0x10/0x10 [ 1300.463250][T18837] ? __pfx_vfs_write+0x10/0x10 [ 1300.463268][T18837] ? find_held_lock+0x2b/0x80 [ 1300.463291][T18837] ksys_write+0x1f8/0x250 [ 1300.463304][T18837] ? __pfx_ksys_write+0x10/0x10 [ 1300.463322][T18837] do_syscall_64+0x123/0x790 [ 1300.463336][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.463349][T18837] RIP: 0033:0x7fefd879e0d9 [ 1300.463359][T18837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.463369][T18837] RSP: 002b:00007fefd96eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1300.463380][T18837] RAX: ffffffffffffffda RBX: 00007fefd8a25fa0 RCX: 00007fefd879e0d9 [ 1300.463387][T18837] RDX: 00000000200002e6 RSI: 0000200000000380 RDI: 0000000000000006 [ 1300.463393][T18837] RBP: 00007fefd8835024 R08: 0000000000000000 R09: 0000000000000000 [ 1300.463399][T18837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.463405][T18837] R13: 00007fefd8a26038 R14: 00007fefd8a25fa0 R15: 00007ffc7cae4a78 [ 1300.463420][T18837] [ 1301.012672][T18849] FAULT_INJECTION: forcing a failure. [ 1301.012672][T18849] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.079388][T18849] CPU: 0 UID: 0 PID: 18849 Comm: syz.0.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 1301.079408][T18849] Tainted: [L]=SOFTLOCKUP [ 1301.079412][T18849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1301.079418][T18849] Call Trace: [ 1301.079422][T18849] [ 1301.079427][T18849] dump_stack_lvl+0x100/0x190 [ 1301.079446][T18849] should_fail_ex.cold+0x5/0xa [ 1301.079464][T18849] should_failslab+0xc2/0x120 [ 1301.079475][T18849] __kmalloc_noprof+0xfc/0x820 [ 1301.079489][T18849] ? rcu_is_watching+0x13/0xc0 [ 1301.079503][T18849] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1301.079520][T18849] tomoyo_realpath_from_path+0xb6/0x690 [ 1301.079537][T18849] tomoyo_path_number_perm+0x23c/0x580 [ 1301.079547][T18849] ? tomoyo_path_number_perm+0x22e/0x580 [ 1301.079559][T18849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1301.079584][T18849] ? find_held_lock+0x2b/0x80 [ 1301.079598][T18849] ? hook_file_ioctl_common+0x140/0x440 [ 1301.079616][T18849] ? __fget_files+0x21f/0x3d0 [ 1301.079635][T18849] security_file_ioctl+0xd3/0x230 [ 1301.079648][T18849] __x64_sys_ioctl+0xb7/0x210 [ 1301.079663][T18849] do_syscall_64+0x123/0x790 [ 1301.079678][T18849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.079690][T18849] RIP: 0033:0x7fee0a59e0d9 [ 1301.079699][T18849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.079710][T18849] RSP: 002b:00007fee0b4f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1301.079720][T18849] RAX: ffffffffffffffda RBX: 00007fee0a825fa0 RCX: 00007fee0a59e0d9 [ 1301.079727][T18849] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1301.079734][T18849] RBP: 00007fee0b4f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.079740][T18849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.079746][T18849] R13: 00007fee0a826038 R14: 00007fee0a825fa0 R15: 00007fff192b7e88 [ 1301.079760][T18849] [ 1301.079794][T18849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1301.588837][T11774] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1301.813575][T18864] kAFS: Can only specify source 'none' with -o dyn [ 1301.823688][T11774] usb 5-1: USB disconnect, device number 60 [ 1301.838487][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3168'. [ 1301.853774][T11774] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1303.497976][ T30] audit: type=1400 audit(1787559863.655:6626): avc: denied { write } for pid=18873 comm="syz.4.3172" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1303.526788][T11774] cp210x 5-1:0.0: device disconnected [ 1304.491890][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1304.575264][ T30] audit: type=1400 audit(1787559864.705:6627): avc: denied { setopt } for pid=18885 comm="syz.6.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1304.661557][ T30] audit: type=1400 audit(1787559864.725:6628): avc: denied { listen } for pid=18885 comm="syz.6.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1304.780799][ T30] audit: type=1400 audit(1787559864.765:6629): avc: denied { ioctl } for pid=18885 comm="syz.6.3174" path="socket:[80219]" dev="sockfs" ino=80219 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1304.816634][T18895] IPVS: length: 4096 != 8 [ 1304.902211][ T30] audit: type=1400 audit(1787559864.975:6630): avc: denied { getopt } for pid=18885 comm="syz.6.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1304.935813][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 1305.025817][ T30] audit: type=1400 audit(1787559865.085:6631): avc: denied { nlmsg_read } for pid=18898 comm="syz.4.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1305.146374][ T30] audit: type=1400 audit(1787559865.185:6632): avc: denied { write } for pid=18870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1305.279634][ T30] audit: type=1400 audit(1787559865.365:6633): avc: denied { name_bind } for pid=18909 comm="syz.6.3178" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1305.387383][ T30] audit: type=1400 audit(1787559865.435:6634): avc: denied { write } for pid=18916 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.026998][T18940] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3183'. [ 1306.050838][ T30] audit: type=1400 audit(1787559866.205:6635): avc: denied { write } for pid=18921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.375947][T18940] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3183'. [ 1307.576619][T18958] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1307.657017][ T30] audit: type=1400 audit(1787559867.795:6636): avc: denied { write } for pid=18949 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.536863][T18958] CIFS mount error: No usable UNC path provided in device string! [ 1308.536863][T18958] [ 1309.252207][T18987] No control pipe specified [ 1309.356344][T18958] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1309.626595][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1309.626605][ T30] audit: type=1400 audit(1787559869.785:6640): avc: denied { write } for pid=18997 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.017345][T19003] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1310.027795][T19003] batman_adv: batadv0: Adding interface: gretap1 [ 1310.034145][T19003] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.059417][T19003] batman_adv: batadv0: Interface activated: gretap1 [ 1310.954392][ T30] audit: type=1400 audit(1787559871.115:6641): avc: denied { execmod } for pid=19006 comm="syz.7.3200" path="/25/bus/memory.events" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1311.385737][ T30] audit: type=1400 audit(1787559871.545:6642): avc: denied { write } for pid=19007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1311.621473][ T30] audit: type=1400 audit(1787559871.775:6643): avc: denied { write } for pid=19035 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.846769][T19053] No control pipe specified [ 1313.000648][T19059] xt_hashlimit: size too large, truncated to 1048576 [ 1313.172679][ T30] audit: type=1400 audit(1787559873.325:6644): avc: denied { write } for pid=19061 comm="syz.3.3204" name="functions" dev="configfs" ino=61827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1313.415995][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3213'. [ 1313.430053][T19059] xt_hashlimit: size too large, truncated to 1048576 [ 1316.550895][T19100] futex_wake_op: syz.0.3221 tries to shift op by 144; fix this program [ 1317.822223][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1317.931776][ T30] audit: type=1400 audit(1787559878.085:6645): avc: denied { write } for pid=19116 comm="syz.7.3224" name="strings" dev="configfs" ino=61829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1318.053978][ T9] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1318.098725][ T30] audit: type=1400 audit(1787559878.135:6646): avc: denied { write } for pid=19116 comm="syz.7.3224" name="configs" dev="configfs" ino=61828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1318.146250][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.250391][ T30] audit: type=1400 audit(1787559878.135:6647): avc: denied { write } for pid=19116 comm="syz.7.3224" name="strings" dev="configfs" ino=81929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1318.429026][ T30] audit: type=1400 audit(1787559878.145:6648): avc: denied { write } for pid=19116 comm="syz.7.3224" name="functions" dev="configfs" ino=61827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1318.591547][ T30] audit: type=1400 audit(1787559878.205:6649): avc: denied { write } for pid=19116 comm="syz.7.3224" name="uncompressed" dev="configfs" ino=81948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1318.615583][ T9] dln2 4-1:1.0: USB write failed: -110 [ 1318.650033][ T9] dln2 4-1:1.0: failed to initialize hardware [ 1319.397037][T19135] No control pipe specified [ 1319.415027][ C0] dln2 4-1:1.0: bad/late response 1/0 [ 1319.432022][ T9] dln2 4-1:1.0: probe with driver dln2 failed with error -110 [ 1319.545788][ T30] audit: type=1400 audit(1787559878.225:6650): avc: denied { write } for pid=19116 comm="syz.7.3224" name="u" dev="configfs" ino=81957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1319.677443][ T30] audit: type=1400 audit(1787559878.335:6651): avc: denied { write } for pid=19116 comm="syz.7.3224" name="g1" dev="configfs" ino=61825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1320.512509][T19149] xt_cgroup: invalid path, errno=-2 [ 1320.530729][ T30] audit: type=1400 audit(1787559878.345:6652): avc: denied { write } for pid=19116 comm="syz.7.3224" name="g1" dev="configfs" ino=61825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1321.552276][ T30] audit: type=1400 audit(1787559878.365:6653): avc: denied { write } for pid=19104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1321.675777][ T30] audit: type=1400 audit(1787559878.375:6654): avc: denied { write } for pid=19116 comm="syz.7.3224" name="g1" dev="configfs" ino=61825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1321.757843][ T9] usb 4-1: USB disconnect, device number 64 [ 1321.878132][T19161] futex_wake_op: syz.3.3234 tries to shift op by 144; fix this program [ 1321.915827][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3233'. [ 1324.677252][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3237'. [ 1324.859232][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1324.870138][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1324.886458][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1324.896612][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1324.905546][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1325.151120][T19203] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3242'. [ 1325.210914][T19210] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3242'. [ 1325.339893][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1325.339903][ T30] audit: type=1400 audit(1787559885.495:6658): avc: denied { write } for pid=19181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.602576][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1325.625413][ T30] audit: type=1400 audit(1787559885.775:6659): avc: denied { write } for pid=19220 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.816004][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1325.971878][ T7927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.011849][T19231] futex_wake_op: syz.3.3247 tries to shift op by 144; fix this program [ 1326.023757][ T9] usb 8-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1326.052914][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.035351][ T5606] Bluetooth: hci5: command tx timeout [ 1327.122145][ T9] dln2 8-1:1.0: Diolan DLN2 serial 305419896 [ 1327.243747][ T7927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.339355][ C0] dln2 8-1:1.0: short response: 0 [ 1327.395549][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1327.406225][ T9] dln2 8-1:1.0: USB write failed: -110 [ 1327.447169][ T9] dln2-gpio dln2-gpio.1.auto: failed to get pin count: -110 [ 1327.603015][ C0] dln2 8-1:1.0: short response: 0 [ 1327.632964][ T9] dln2-gpio dln2-gpio.1.auto: probe with driver dln2-gpio failed with error -110 [ 1327.804635][ T7927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.126344][ T9] dln2 8-1:1.0: USB write failed: -110 [ 1329.112346][ T5606] Bluetooth: hci5: command tx timeout [ 1329.205481][ T9] dln2-i2c dln2-i2c.2.auto: error -ETIMEDOUT: failed to initialize adapter [ 1329.268742][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3243'. [ 1329.296553][ T9] dln2-i2c dln2-i2c.2.auto: probe with driver dln2-i2c failed with error -110 [ 1329.366603][ T9] dln2 8-1:1.0: USB write failed: -71 [ 1331.245899][ T5606] Bluetooth: hci5: command tx timeout [ 1333.272837][T15608] Bluetooth: hci5: command tx timeout [ 1333.892164][ C0] sched: DL replenish lagged too much [ 1335.560419][ T9] dln2-spi dln2-spi.3.auto: Failed to disable SPI module [ 1335.567899][ T30] audit: type=1400 audit(1787559895.085:6660): avc: denied { write } for pid=19235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.643004][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1348.309917][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1358.699731][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1441.912175][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1441.919121][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19266/1:b..l P19040/1:b..l [ 1441.928689][ C0] rcu: (detected by 0, t=10502 jiffies, g=134361, q=1512 ncpus=1) [ 1441.936545][ C0] task:syz.0.3203 state:R running task stack:22968 pid:19040 tgid:19040 ppid:5590 task_flags:0x40064c flags:0x00080003 [ 1441.950393][ C0] Call Trace: [ 1441.953646][ C0] [ 1441.956552][ C0] __schedule+0x1259/0x6920 [ 1441.961029][ C0] ? lock_acquire+0x1b9/0x370 [ 1441.965682][ C0] ? lock_acquire+0x1b9/0x370 [ 1441.970333][ C0] ? __pfx___schedule+0x10/0x10 [ 1441.975159][ C0] ? rcu_is_watching+0x13/0xc0 [ 1441.979893][ C0] preempt_schedule_irq+0x4e/0x90 [ 1441.984889][ C0] irqentry_exit+0x205/0xa10 [ 1441.989449][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1441.995404][ C0] RIP: 0010:unwind_next_frame+0x2c2/0x2090 [ 1442.001181][ C0] Code: cf 8b 14 95 08 d7 a6 92 48 8d 04 7f 48 8d 84 00 ac 30 dd 91 83 c2 01 48 3d 08 d7 a6 92 0f 83 ab 08 00 00 41 89 d0 4f 8d 04 40 <4f> 8d 84 00 ac 30 dd 91 49 81 f8 08 d7 a6 92 0f 87 8f 08 00 00 29 [ 1442.020756][ C0] RSP: 0018:ffffc90003386f20 EFLAGS: 00000297 [ 1442.026790][ C0] RAX: ffffffff91f7ce90 RBX: 0000000000000001 RCX: 0000000000046fa6 [ 1442.034728][ C0] RDX: 0000000000046fa7 RSI: 00000000000acfd6 RDI: 0000000000046fa6 [ 1442.042666][ C0] RBP: ffffc90003386fd8 R08: 00000000000d4ef5 R09: 0000000000000007 [ 1442.050603][ C0] R10: 0000000000000200 R11: 00000000000192e2 R12: ffffc90003386fe0 [ 1442.058541][ C0] R13: ffffc90003386f90 R14: ffffc90003386fc5 R15: ffffffff8292e248 [ 1442.066479][ C0] ? __fput+0x518/0xb50 [ 1442.070608][ C0] ? __fput+0x519/0xb50 [ 1442.074732][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1442.080856][ C0] arch_stack_walk+0x94/0xf0 [ 1442.085416][ C0] ? __fput+0x519/0xb50 [ 1442.089540][ C0] stack_trace_save+0x8e/0xc0 [ 1442.094186][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1442.099529][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 1442.104439][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1442.109612][ C0] save_stack+0x162/0x1e0 [ 1442.113915][ C0] ? __pfx_save_stack+0x10/0x10 [ 1442.118737][ C0] ? free_unref_folios+0xa4a/0x1790 [ 1442.123909][ C0] ? folios_put_refs+0x585/0xaa0 [ 1442.128815][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 1442.133968][ C0] ? shmem_evict_inode+0x3b1/0xca0 [ 1442.139054][ C0] ? evict+0x3c2/0xad0 [ 1442.143095][ C0] ? iput.part.0+0x989/0x1050 [ 1442.147744][ C0] ? iput+0x35/0x40 [ 1442.151527][ C0] ? dentry_unlink_inode+0x284/0x470 [ 1442.156777][ C0] ? dentry_kill+0x25d/0xc20 [ 1442.161336][ C0] ? dput.part.0+0xd7/0x240 [ 1442.165808][ C0] ? dput+0x1f/0x30 [ 1442.169584][ C0] ? __fput+0x519/0xb50 [ 1442.173707][ C0] ? page_ext_put+0x3e/0xd0 [ 1442.178193][ C0] __reset_page_owner+0x84/0x190 [ 1442.183098][ C0] free_unref_folios+0xa4a/0x1790 [ 1442.188099][ C0] ? folios_put_refs+0x51d/0xaa0 [ 1442.193008][ C0] ? folios_put_refs+0x51d/0xaa0 [ 1442.197913][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1442.203688][ C0] folios_put_refs+0x585/0xaa0 [ 1442.208421][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1442.213686][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1442.219990][ C0] shmem_undo_range+0x5e5/0x1570 [ 1442.224900][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1442.230274][ C0] shmem_evict_inode+0x3b1/0xca0 [ 1442.235185][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1442.240612][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1442.246658][ C0] ? find_held_lock+0x2b/0x80 [ 1442.251304][ C0] ? evict+0x37e/0xad0 [ 1442.255342][ C0] ? evict+0x37e/0xad0 [ 1442.259382][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1442.264811][ C0] evict+0x3c2/0xad0 [ 1442.268676][ C0] ? __pfx_evict+0x10/0x10 [ 1442.273063][ C0] ? iput.part.0+0x981/0x1050 [ 1442.277713][ C0] iput.part.0+0x989/0x1050 [ 1442.282188][ C0] iput+0x35/0x40 [ 1442.285796][ C0] dentry_unlink_inode+0x284/0x470 [ 1442.290875][ C0] dentry_kill+0x25d/0xc20 [ 1442.295262][ C0] dput.part.0+0xd7/0x240 [ 1442.299568][ C0] dput+0x1f/0x30 [ 1442.303172][ C0] __fput+0x519/0xb50 [ 1442.307125][ C0] task_work_run+0x150/0x240 [ 1442.311696][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1442.316783][ C0] do_exit+0x951/0x2ae0 [ 1442.320917][ C0] ? __pfx_do_exit+0x10/0x10 [ 1442.325475][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1442.331427][ C0] do_group_exit+0xd5/0x2a0 [ 1442.335907][ C0] get_signal+0x1ec7/0x21e0 [ 1442.340390][ C0] ? __pfx_get_signal+0x10/0x10 [ 1442.345210][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1442.350727][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1442.356858][ C0] irqentry_exit+0x402/0xa10 [ 1442.361424][ C0] asm_exc_page_fault+0x26/0x30 [ 1442.366243][ C0] RIP: 0033:0x7fee0a59e0e1 [ 1442.370626][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1442.376658][ C0] RAX: 0000000000000000 RBX: 00007fee0a826180 RCX: 00007fee0a59e0d9 [ 1442.384597][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1442.392535][ C0] RBP: 00007fee0a635024 R08: 0000000000000000 R09: 0000000000000000 [ 1442.400472][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1442.408417][ C0] R13: 00007fee0a826218 R14: 00007fee0a826180 R15: 00007fff192b7e88 [ 1442.416364][ C0] [ 1442.419352][ C0] task:syz.3.3251 state:R running task stack:25880 pid:19266 tgid:19265 ppid:17982 task_flags:0x40044c flags:0x00080002 [ 1442.432790][ C0] Call Trace: [ 1442.436038][ C0] [ 1442.438941][ C0] __schedule+0x1259/0x6920 [ 1442.443422][ C0] ? lock_acquire+0x1b9/0x370 [ 1442.448072][ C0] ? find_held_lock+0x2b/0x80 [ 1442.452723][ C0] ? __pfx___schedule+0x10/0x10 [ 1442.457541][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1442.462885][ C0] preempt_schedule_common+0x3c/0xb0 [ 1442.468136][ C0] preempt_schedule_thunk+0x16/0x40 [ 1442.473305][ C0] _raw_spin_unlock+0x3e/0x50 [ 1442.477956][ C0] __zap_vma_range+0x16b0/0x48c0 [ 1442.482876][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1442.488132][ C0] ? mas_next_slot+0x10a3/0x1960 [ 1442.493046][ C0] ? find_held_lock+0x2b/0x80 [ 1442.497694][ C0] unmap_vmas+0x299/0x5f0 [ 1442.502005][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1442.506828][ C0] ? mas_next_slot+0x10a3/0x1960 [ 1442.511749][ C0] exit_mmap+0x1ef/0xa00 [ 1442.515966][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1442.520701][ C0] ? rcu_is_watching+0x13/0xc0 [ 1442.525437][ C0] ? find_held_lock+0x2b/0x80 [ 1442.530084][ C0] ? uprobe_clear_state+0x5f/0x250 [ 1442.535168][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1442.540778][ C0] __mmput+0x12a/0x410 [ 1442.544821][ C0] mmput+0x67/0x80 [ 1442.548514][ C0] do_exit+0x8b1/0x2ae0 [ 1442.552639][ C0] ? rcu_is_watching+0x13/0xc0 [ 1442.557375][ C0] ? __pfx_do_exit+0x10/0x10 [ 1442.561933][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1442.566926][ C0] ? find_held_lock+0x2b/0x80 [ 1442.571572][ C0] ? get_signal+0x7e0/0x21e0 [ 1442.576131][ C0] do_group_exit+0xd5/0x2a0 [ 1442.580603][ C0] get_signal+0x1ec7/0x21e0 [ 1442.585074][ C0] ? up_write+0x2dc/0x5b0 [ 1442.589375][ C0] ? __pfx_get_signal+0x10/0x10 [ 1442.594190][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1442.599278][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1442.604795][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1442.610923][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1442.616182][ C0] exit_to_user_mode_loop+0x139/0x700 [ 1442.621523][ C0] ? rcu_is_watching+0x13/0xc0 [ 1442.626264][ C0] do_syscall_64+0x661/0x790 [ 1442.630824][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.636685][ C0] RIP: 0033:0x7fd5cdf9e0d9 [ 1442.641070][ C0] RSP: 002b:00007fd5ceea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1442.649454][ C0] RAX: 0000200000000000 RBX: 00007fd5ce225fa0 RCX: 00007fd5cdf9e0d9 [ 1442.657395][ C0] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 1442.665334][ C0] RBP: 00007fd5ce035024 R08: ffffffffffffffff R09: 0000000000000000 [ 1442.673274][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1442.681218][ C0] R13: 00007fd5ce226038 R14: 00007fd5ce225fa0 R15: 00007ffdfdd28428 [ 1442.689169][ C0] [ 1442.692586][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1442.767457][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1442.775549][ T1303] ieee802154 phy1 wpan1: encryption failed: -22