last executing test programs: 11.322564457s ago: executing program 2 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) recvmsg(r1, &(0x7f0000000cc0)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getaddr={0x18, 0x16, 0x32b, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) 11.24500868s ago: executing program 4 (id=94): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0x40) 10.376382009s ago: executing program 2 (id=97): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10010, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r2) r6 = fcntl$dupfd(r3, 0x406, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$kcm(0x2, 0xa, 0x2) read$msr(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r8, 0x8) close(r0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) 10.065103954s ago: executing program 2 (id=99): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fanotify_mark(0xffffffffffffffff, 0x200, 0x103b, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="51a1aa32c27717b454d3044d250f71859537df9496db4833733e17fffa2bbfd9586a46909f12afea71b3c166194cf1ef2762a93e6cc83e7f3a86", 0x3a, 0x14, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer=']) 9.129319253s ago: executing program 4 (id=102): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0b00000180991a9c133776fed2d38dede1a4724090"], 0x38}], 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x43, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r11, @ANYBLOB="200001"], 0x38}}, 0x800) write(r8, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 8.034189434s ago: executing program 1 (id=104): io_uring_setup(0x7d98, &(0x7f00000011c0)={0x0, 0xdf07, 0x2, 0x2, 0x1a4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, 0x0, &(0x7f0000001180)) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)}, 0x40002102) socket$kcm(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000000)={0x20, 0x16, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 6.981541175s ago: executing program 2 (id=106): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000004a00010025bd7000000000000a0080", @ANYBLOB="000000fd"], 0x30}}, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e1f, 0x0, @loopback, 0x80000000}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="6555d8f7bca5569565ab8c8aff6e3ee2a81a3e94e5dbd803c635658ec465a196de94735b809b2e77939de90ac6fd576c34aa0645ef5d8604556ceaa380310398e903783cc1bd1c0fe0a36680a496b676990bffd218f8198144ef99c91c0a66809af7b00966a0feb179cd92e72354bcddce202356c0db74c9bf52ce6e5011af4d2154555ea05e40bfdfe68427ab8d89752199fe4e9ce02a2c6e1a3e40f3f613c74560ddd9c192f882", 0xa8}, {&(0x7f0000000200)="ea1d10a0d4adfcf255fff2493a66013a2c3b945f1c21fd31e21afe2b6623714c10af29c43cab5b2acfddf05da8afefa77cd45dbc2f053a8e254d6ad7ae5c2913c1258db21d3d38c27b48d1b08c877cb168f809fe2aa0df7d3ab57510c13cb7123d1e220d7c43254f24dfb328df90ce48d610bff6f47f17a0ab3e2a7404ffd2752d6b72fbd67a43981f91b37db1c3b1be0cee194377ef405d87f4f46be9eb6447ffb4c8aff6c8de90c3", 0xa9}, {&(0x7f00000002c0)="b632a4dcd1e03f5da4871fe5ecb97c4acb5144f69b8fd4fcfa5bbb16c6848889d778838628cb9944bc68845fab27c9479828b23b1f0645cb3c5d04d0bc3ce1ed480f1622e4d096ab9b35cfbe3a4c128eb5ed26cbcf00c58aee2d5acbed45c0952bb6430f", 0x64}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="40000000000000001501000009000000d7336694d325f440d541927a59f1ceec7696c77b8670f190fc27be0658f0834db5723ef58378ea2f160d669fd25f25c3a6c3a247a4137449706e4c2450000000000000db8ecf179761b2ff1d75618e4d25230679666fca4f09aecd9c051356bc"], 0x40}, 0x4048800) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100, 0x7ffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={r3, 0x0, 0x5, [0x9, 0x4, 0x7, 0x0, 0x5]}, 0x12) clock_nanosleep(0xfffffff4, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1024, 0x1000000000006) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x5, 0x3, 0x6, 0x0, 0x7fd]}, &(0x7f0000000080)=0x78) 6.900133881s ago: executing program 4 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10400}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x54}}, 0x810) 6.767215786s ago: executing program 4 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x23894) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x3d, &(0x7f00000002c0)="bf5277ae0aa83e6f9de6206768dbfbb55609369632f016bc2e278784f1ea8fab42d63228f433deee", &(0x7f0000000340)=""/61, 0x3ff, 0x0, 0xee, 0x98, &(0x7f0000000380)="43397dd526a0cb2b38eff4fefb3187a55116d39b229878dec5fcc16a5fd4647f90cff3abfac092c1b790708cd21a94e6c9ae9ab2c6c6585137638e0c0d0c5006e86d05c32fa9500ddf532748ac8ce00ddbd00cc4d8783bb191a1ea5e6a67d9fa8d7354595e42a340f30e939901ac87e3a9a9270a225e22edb6d645c14d252241fe27fdfb2905b924b944ae7e51299939bcd9b3d99cc77fe163b20761b5e123a83c6a7fb854e69757c26f99238f6c7b29f4eaf4f1de93903168d0e469f6775e031ec09ed4e113978caf517b434ee2032bd5dfa7b4775c97b4bbc059c1e2cc383ecd2585d37e49eda7d8e1abdb439e", &(0x7f0000000700)="03f7c804fa147105939c3bb19be7e67a381fba02216370bb84ca9e0f4f0d04b4c34e507615925211f4689321596ac42dfa91a319912e86caea812f72f854dd835a7e167cf235a5324ccd652d15885c00e8ea4d76851216a86279621e0af12f91fe1b82d6306769b82af64a23c925ce999d42f37a45aaf20e92f0783bfa02068a23929f3f7fa06098113bb20d1ec9d902969ad03ccbb65ae0", 0x3, 0x0, 0x1fffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="00000000000082000000dffafa4681c74d80e5c8bda3dc79c842d45898d07a57a87a980577701100"/49, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 5.734223277s ago: executing program 1 (id=111): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3e}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x81) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r6 = dup(r5) r7 = dup(0xffffffffffffffff) sendfile(r7, r6, 0x0, 0x89ffc) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r9, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3}, @void, @val={0xc, 0x99, {0x6, 0x53}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x4800) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r10}) 5.465917879s ago: executing program 4 (id=112): mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="757372717574cb2c000000b28f5ea05618c605dc9cc49559d5cb66bc8507f62092e220f2f753ff0ed9b914c237717e"]) (async) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() sched_setscheduler(0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x10001, 0x0, 0xfffffffffffffffa, 0x7, 0x0, 0x8000, 0x9, 0xfffffffb, 0x2}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 5.068616415s ago: executing program 1 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) recvmsg(r1, &(0x7f0000000cc0)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getaddr={0x18, 0x16, 0x32b, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) 5.064076734s ago: executing program 0 (id=114): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000040)={0x5, 0x2, 0x6, 0x0, 0x6738, 0x8, "267cedef2abdb6211f5af22bc6ccc262", 0xfc, 0x9e, 0x6, 0x3, 0x9, 0x80}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}}, 0x1c}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) mount(&(0x7f0000001980)=@filename='./file0\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='nfs\x00', 0x18800, &(0x7f0000001a40)='\x00') 4.457314987s ago: executing program 0 (id=115): io_uring_setup(0x7d98, &(0x7f00000011c0)={0x0, 0xdf07, 0x2, 0x2, 0x1a4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000100)={@initdev, @empty, @broadcast}, &(0x7f0000001180)=0xc) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002102) r7 = socket$kcm(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.999930393s ago: executing program 1 (id=116): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1a00000000000000000000ab22e8930000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="262569070274ed008513784928eb2cbece72eefe6e", @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="4b696cfbe0a2"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) r8 = syz_open_dev$usbfs(&(0x7f0000000300), 0x10000, 0x115080) ioctl$USBDEVFS_GET_CAPABILITIES(r8, 0x8004551a, &(0x7f0000000340)) 2.949616418s ago: executing program 3 (id=117): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2.729715613s ago: executing program 4 (id=118): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x22, 0xf6, {0xf6, 0xf, "63dad397917b118c8e183c5d0412c84d66590c21b501b6df7657a9a43199bb54bdb8399de008994f244c9306d1fd080882cd5af119077f36e75d14db73210189db52c80043c7d54a5b388023fbc8fa67601c16692bd7ccab5b31dcd05953b8abb0c1c998b18643d18d0658ea83e926ecf2da2343ce53aa12dc7ca55685f87213194afeefd94ed9e6060f6ad6edee7d551dfbc895593fbdadfe57c56e7d7c954b5dc9e8741c973e1ac5b887988086ca3d2f5297ef2a3016e8c5453fea46e78381126fe9d47de2b7b209707d2642609031091ccd55bb2a0907e9fa854d59d2db4bc581ff07d1fdc78a02280a11c7e621e72b6aa05b"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x20, 0xe, 0x6b, "715f550a43d242513c082ba96155061b8e56f2fceb89eef5bd426d468a25c5f1962f9d505c6780fd9120ccf94e4d982bcd68cc22624a20a867d4e992887c0250d4cd8ae266e0c00dc996d08aaeb9507b69d9cc17cc5f14b8e736978fadbb739e5c0184817286fb73a31d3f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x69}, &(0x7f00000002c0)={0x20, 0x0, 0xee, {0xec, "ec285baf660163a9184e341b6f7b1f1501656053311b9e132230d79906bef6c1cdc0ad47ff958c81b88491fff972fb03a340869eb792ef8faaec2a8ca08c182c9d25d4da6ffbc3ce539cca355d36919527bb212d1e95e1254eba2c0174c44da568d8db15dd20ee3f2dda699c3dccf663314c5565ee00afcad0fbbd2b1c185af6ed65a28e008568d9e0a2103c104631db5c1a60e7f69afd3ba8289e00232aac344013505b099842943170924389a3e17865320cc0293b7829747da970e52eef14c896ab04a64e29e5e7b60a1e2c31b0b4ecdaac774038df87cabb93a55a12e1163cd28dd86dec956432b921d9"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x9a}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x9}}) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6400011e) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008aec1, 0x0) (async, rerun: 64) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xd08, &(0x7f0000000040)={0x77359400}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000440)={0x0, 0x1, 0x6, "d0b2373916e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.449639129s ago: executing program 2 (id=119): execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (async, rerun: 64) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xad) (rerun: 64) r2 = geteuid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x820018, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}], [{@dont_appraise}, {@appraise}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_lt={'euid<', r2}}, {@euid_lt={'euid<', r3}}]}}) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4c000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000140)={{@any, 0xffffffff}, 0x1, 0x1}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000001540)={{0x12, 0x1, 0x201, 0x8d, 0x98, 0xe6, 0x10, 0xa12, 0x5d10, 0x23a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x40, 0x40, 0x5, [{{0x9, 0x4, 0x27, 0x2, 0x1, 0xcf, 0x6f, 0xb5, 0x9, [], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x1, 0xea, 0x3}}]}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 64) syz_open_dev$vcsn(&(0x7f00000004c0), 0x0, 0x0) (rerun: 64) 2.448513671s ago: executing program 0 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f00000000c0)=@raw=[@printk={@lu}], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/183, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfe46, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) flistxattr(r0, &(0x7f0000000100)=""/201, 0xc9) 2.301235424s ago: executing program 0 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) recvmsg(r1, &(0x7f0000000cc0)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getaddr={0x18, 0x16, 0x32b, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) 1.617137926s ago: executing program 3 (id=122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x30d5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x5b4b, 0x0, 0x0, 0x40000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3ff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x44}}, 0x4804) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xe4, 0x0, @fd, 0x0, 0x0, 0x0, {0x414}, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.332897562s ago: executing program 0 (id=123): io_uring_setup(0x7d98, &(0x7f00000011c0)={0x0, 0xdf07, 0x1000, 0x2, 0x1a4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x9) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="725956d404aa930dc3d4434b044ea569e80e60abcd9ffafe62b1048e0d4b570b2c31afa0b4d68d94ddf4dea6c4639535169b44c31d336ceb48335d8315afb599e6c5e916d87a47b00f32527f9744b9720e32bd71db09cc59c4330a8c629d8345f5a2a5378abbc231b36ed31666465a8a795e812520cbb3607e8f05a98d7888749f9ab5d2478986b673fcbb1830d0c904a4d3eee6e22a138e7cd555b623fe521f", 0xa0}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000080)="296d47f1d7c5713ec718a71e36473b8ee22070be6f", 0x15}, {&(0x7f0000000200)="206fc4008d34648dba1ea830645bf787965586025ae429dd9f5e503e10e1e0cfebf23dd5fd9999005b90c4c545dabd04a7987b8b63b9371a9956590e8271c09ad3656e04f35d050a18f14b2f0ce79a440195a42282770c1a030ade484fa73eed4098", 0x62}, {&(0x7f0000000580)="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", 0x141}], 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x200000000007}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, 0x0, &(0x7f0000001180)) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)}, 0x40002102) socket$kcm(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r6 = inotify_init1(0x0) inotify_rm_watch(r6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$radio(0x0, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) 1.332492564s ago: executing program 2 (id=124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r4 = syz_io_uring_setup(0x14a7, &(0x7f0000000400)={0x0, 0xff80, 0x8000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) eventfd2(0x21010, 0x80000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x82403, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x200000) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB='#\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080300000000007b8af8ff00000000bfa200000000000000540000f8ffffffb703000008000000b704bb6336000000411a3a1118e18e8d000000953fbf84aa2b25eaafcf3c30c33c2e7ca9ab55d4e5364d4afd8da343df1342e4546382d3d79fb38e88d8589e4d453441955dee207ebde7a8e4b19c6727d52af1b0b140d4045578c9bd786424210edd239b25146358d669378bf0935c511dc9c192efa3311eebe14ea8099a795aa3bc99bb2050575ed012a3bfdcc10c66b69f"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r8, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x0, 0x5, "cb5f13ab31e248fe57f6499a7ec9f02f8a8bcf38ba4e48208bef0a26e58d69deb86fe2a51cae85842da342b65300bc7a0b08b72a97bc7a5aa5aa77b5f23b3c608264fdbb4fb1b387d91ce08d63910ff77f57613b3f94da2e9153917a7130adb78168fe55d34f1676f178caf5b8b8563c713f074d20eb4e6e6e73f363d9b8d23863bac85e1bbb502423a9cdb073e0167f6491cb3c0c069992e46eb9965c0a7b4941244549e5f2d96cb6f848520dce3675cc55110c8c45aaf198fdcd0daa7e837a8af759a1453f4f40ebb609e1d16ff10ad46ee6c37e83c2f54e85135cc3c166c706450328114ce03c064c1c08e3c892667072dd3e85566e4a073a0d30d8662b55", 0x0, 0x1, 0x2, 0x0, 0x5, 0x1, 0x3, 0x1}}}, 0x120) socket(0x2a, 0x3, 0x0) 839.196598ms ago: executing program 1 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) 755.42258ms ago: executing program 1 (id=126): madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) write(r0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x345400, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10) (async) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) pipe(&(0x7f00000000c0)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x13fc, 0x30, 0x8, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0xec, 0x1, [@m_bpf={0xe8, 0x18, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x7, 0x3, 0x1, 0x2}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x77d, 0x0, 0x2, 0x0, 0x6c8}}]}, {0x81, 0x6, "841c762efaa87759311a0acd86ac46a52f135dd3379d8b5c377dafc3308ce5b7c7260ff1c8cd2e4a4e113dd5b85b3401f63c7dd2bee71f2ebfa357dea64689f35442103b2a62725d2c6e2d5dab55f5d749fd40f02121d549b15a9ab615c2443c4d3c47789201782f3f4fcdd5d7e181028837230433711bf57dcea7cfe9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x126c, 0x1, [@m_skbedit={0xec, 0x16, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x7f, 0x6, "261360e8051666d5aec229aeafefa467ed47452cf7561683228277887cefe7a1fc7cee1c0cef9a4caa0c8ec28ccc55165824cdc3b2df466e1ed69f20781b5a1815c92dc20294f40931c573d5356052e42b088cc41db461062b2e6d381292781e9d1a8243442b0c203fc1bb53ba9e5d73f9043969df5c46ecbd11ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x10d0, 0x1f, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x5, 0x6, 0x3a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0xff, 0x1, 0x0, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0xc45e, 0x2, 0xf3000000, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0xef41, 0x2, 0x9, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0x4}, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xac, 0x17, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x3d, 0x6, {0x5, 'security\x00', 0x5, 0x2, "b6abfcaad969100d9bfeff0e330847810a68b7"}}]}, {0x29, 0x6, "c154c885b3869b8b3550bfd948fba8c9aca5a325572a4ad3f4b2c95732b4088c8128c7b513"}, {0xc, 0x7, {0x387a75e6f5b247b8}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x13fc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 510.587493ms ago: executing program 3 (id=127): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3d5, 0x2}, 0x20) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x80000000) 345.277177ms ago: executing program 3 (id=128): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10010, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r2) r6 = fcntl$dupfd(r3, 0x406, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$kcm(0x2, 0xa, 0x2) read$msr(r5, &(0x7f0000000280)=""/132, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r8, 0x8) close(r0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) 344.85592ms ago: executing program 0 (id=129): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000508000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r1, 0x100000000) r2 = io_uring_setup(0x10b2, &(0x7f0000000000)={0x0, 0x847a, 0x1, 0x2, 0xd0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x88, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x1b0, 0xd0, 0xd0, 0x3e0, 0x310, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) r4 = syz_io_uring_setup(0x9c, &(0x7f0000000640)={0x0, 0xec25, 0x20, 0xffffffff, 0x40000333, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r7, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x46, 0x0, r7, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r8}}) pipe(&(0x7f0000000580)) 62.029209ms ago: executing program 3 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x22c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xc, 0x3, 0x4, 0xc, 0x7, 0x2, 0x0, 0x3, 0xfe, 0x5, 0x5, 0x80, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xb5, 0x40, 0x2, 0xc, 0xfe, 0x41, 0x6, 0x18, 0xa}, {0x9, 0x8, 0x3, 0xc, 0x2, 0x78, 0x3, 0x9, 0x2, 0x5, 0x8, 0x54, 0x18bf}], 0xd9}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$isdn_base(0x22, 0x3, 0x0) bind$inet6(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xa03, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1, 0x0, 0x3500, 0xa, 0x8}]}]}, 0xec}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 43.629145][ T30] audit: type=1400 audit(1743015040.673:88): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.631901][ T5805] cgroup: Unknown subsys name 'net' [ 43.652007][ T30] audit: type=1400 audit(1743015040.673:89): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.679473][ T30] audit: type=1400 audit(1743015040.703:90): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.828186][ T5805] cgroup: Unknown subsys name 'cpuset' [ 43.835597][ T5805] cgroup: Unknown subsys name 'rlimit' [ 43.954537][ T30] audit: type=1400 audit(1743015040.993:91): avc: denied { setattr } for pid=5805 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.983254][ T30] audit: type=1400 audit(1743015040.993:92): avc: denied { create } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.005056][ T30] audit: type=1400 audit(1743015040.993:93): avc: denied { write } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.025592][ T30] audit: type=1400 audit(1743015041.003:94): avc: denied { read } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.046430][ T30] audit: type=1400 audit(1743015041.003:95): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 44.049762][ T5807] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 44.071435][ T30] audit: type=1400 audit(1743015041.003:96): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 44.105092][ T30] audit: type=1400 audit(1743015041.033:97): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 44.884551][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.761212][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.811451][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.818888][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.826881][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.834837][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 46.844598][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.852685][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.853571][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.859942][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 46.876538][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.884021][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.885312][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.891793][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.898211][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 46.905696][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 46.913289][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.920511][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.926185][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.934384][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 46.941928][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.948750][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.953942][ T5137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 46.961920][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.969424][ T5137] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 46.982299][ T5137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 46.984267][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.997311][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 46.997545][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 47.008036][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.011939][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.290514][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 47.325564][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 47.367212][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 47.377818][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 47.441892][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.449199][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.456887][ T5825] bridge_slave_0: entered allmulticast mode [ 47.463320][ T5825] bridge_slave_0: entered promiscuous mode [ 47.477405][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 47.494636][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.501840][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.509063][ T5825] bridge_slave_1: entered allmulticast mode [ 47.515448][ T5825] bridge_slave_1: entered promiscuous mode [ 47.531559][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.539935][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.547887][ T5815] bridge_slave_0: entered allmulticast mode [ 47.554238][ T5815] bridge_slave_0: entered promiscuous mode [ 47.574449][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.582117][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.589357][ T5815] bridge_slave_1: entered allmulticast mode [ 47.596206][ T5815] bridge_slave_1: entered promiscuous mode [ 47.602419][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.609539][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.616850][ T5822] bridge_slave_0: entered allmulticast mode [ 47.623165][ T5822] bridge_slave_0: entered promiscuous mode [ 47.645134][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.652393][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.659698][ T5822] bridge_slave_1: entered allmulticast mode [ 47.666420][ T5822] bridge_slave_1: entered promiscuous mode [ 47.673942][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.699885][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.717577][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.728503][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.750384][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.757625][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.764749][ T5819] bridge_slave_0: entered allmulticast mode [ 47.771555][ T5819] bridge_slave_0: entered promiscuous mode [ 47.793489][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.804432][ T5825] team0: Port device team_slave_0 added [ 47.811237][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.818429][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.825894][ T5819] bridge_slave_1: entered allmulticast mode [ 47.832250][ T5819] bridge_slave_1: entered promiscuous mode [ 47.844032][ T5815] team0: Port device team_slave_0 added [ 47.850918][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.860811][ T5825] team0: Port device team_slave_1 added [ 47.878918][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.886192][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.893789][ T5817] bridge_slave_0: entered allmulticast mode [ 47.900508][ T5817] bridge_slave_0: entered promiscuous mode [ 47.907925][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.914986][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.922198][ T5817] bridge_slave_1: entered allmulticast mode [ 47.928568][ T5817] bridge_slave_1: entered promiscuous mode [ 47.935833][ T5815] team0: Port device team_slave_1 added [ 47.957475][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.968573][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.991208][ T5822] team0: Port device team_slave_0 added [ 47.997632][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.004570][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.030655][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.056166][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.063144][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.089151][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.101213][ T5822] team0: Port device team_slave_1 added [ 48.107282][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.114246][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.140419][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.153012][ T5819] team0: Port device team_slave_0 added [ 48.160353][ T5819] team0: Port device team_slave_1 added [ 48.167411][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.178185][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.187572][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.194518][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.220791][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.253587][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.260679][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.287739][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.309814][ T5817] team0: Port device team_slave_0 added [ 48.317165][ T5817] team0: Port device team_slave_1 added [ 48.333721][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.340842][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.366842][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.387783][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.394745][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.420869][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.432843][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.439999][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.465978][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.500179][ T5822] hsr_slave_0: entered promiscuous mode [ 48.506384][ T5822] hsr_slave_1: entered promiscuous mode [ 48.523133][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.530315][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.556851][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.574120][ T5825] hsr_slave_0: entered promiscuous mode [ 48.580180][ T5825] hsr_slave_1: entered promiscuous mode [ 48.586104][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.593781][ T5825] Cannot create hsr debugfs directory [ 48.601443][ T5815] hsr_slave_0: entered promiscuous mode [ 48.607407][ T5815] hsr_slave_1: entered promiscuous mode [ 48.613145][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.620763][ T5815] Cannot create hsr debugfs directory [ 48.626587][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.633521][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.659660][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.701798][ T5819] hsr_slave_0: entered promiscuous mode [ 48.707756][ T5819] hsr_slave_1: entered promiscuous mode [ 48.713541][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.721500][ T5819] Cannot create hsr debugfs directory [ 48.768592][ T5817] hsr_slave_0: entered promiscuous mode [ 48.774568][ T5817] hsr_slave_1: entered promiscuous mode [ 48.782135][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.789820][ T5817] Cannot create hsr debugfs directory [ 48.952308][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.962548][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.971689][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.979943][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.999245][ T5828] Bluetooth: hci4: command tx timeout [ 49.004874][ T5823] Bluetooth: hci0: command tx timeout [ 49.022991][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.040947][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.050323][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.059423][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.075887][ T5823] Bluetooth: hci1: command tx timeout [ 49.081522][ T5823] Bluetooth: hci2: command tx timeout [ 49.087252][ T5828] Bluetooth: hci3: command tx timeout [ 49.090611][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.121110][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.134716][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.149037][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.165550][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.172723][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.184136][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.192654][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.202245][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.209352][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.239520][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.252415][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.261477][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.297148][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.360619][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.369576][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 49.369589][ T30] audit: type=1400 audit(1743015046.403:111): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.411415][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.422518][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.448615][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.459944][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.472022][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.501345][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.510281][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.535929][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.542989][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.553486][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.560574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.570739][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.577823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.592362][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.609209][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.616370][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.639150][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.676655][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.711851][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.719032][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.728424][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.735554][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.776606][ T5822] veth0_vlan: entered promiscuous mode [ 49.797319][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.819562][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.831584][ T5822] veth1_vlan: entered promiscuous mode [ 49.841145][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.878713][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.885830][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.904878][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.912029][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.938133][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.949122][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.961369][ T5815] veth0_vlan: entered promiscuous mode [ 50.011712][ T5822] veth0_macvtap: entered promiscuous mode [ 50.029107][ T5815] veth1_vlan: entered promiscuous mode [ 50.056691][ T5822] veth1_macvtap: entered promiscuous mode [ 50.071577][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.090749][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.103776][ T5815] veth0_macvtap: entered promiscuous mode [ 50.128413][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.142633][ T5815] veth1_macvtap: entered promiscuous mode [ 50.175250][ T5825] veth0_vlan: entered promiscuous mode [ 50.183808][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.199179][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.213173][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.222877][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.232424][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.242306][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.254148][ T5825] veth1_vlan: entered promiscuous mode [ 50.268927][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.280805][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.292682][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.323140][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.334628][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.345956][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.357467][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.366348][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.375003][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.383820][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.403958][ T5819] veth0_vlan: entered promiscuous mode [ 50.437423][ T5819] veth1_vlan: entered promiscuous mode [ 50.451372][ T5825] veth0_macvtap: entered promiscuous mode [ 50.483569][ T5825] veth1_macvtap: entered promiscuous mode [ 50.500521][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.510264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.542892][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.545963][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.561732][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.561960][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.572156][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.590722][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.602134][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.611082][ T5817] veth0_vlan: entered promiscuous mode [ 50.620212][ T5817] veth1_vlan: entered promiscuous mode [ 50.644751][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.646369][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.658013][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.663392][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.675014][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.691636][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.702710][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.712125][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.720983][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.730753][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.739817][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.758151][ T5819] veth0_macvtap: entered promiscuous mode [ 50.773907][ T30] audit: type=1400 audit(1743015047.813:112): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.sWPJoB/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.776841][ T5819] veth1_macvtap: entered promiscuous mode [ 50.804479][ T30] audit: type=1400 audit(1743015047.813:113): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.817037][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.831007][ T30] audit: type=1400 audit(1743015047.843:114): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.sWPJoB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.835796][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.871087][ T30] audit: type=1400 audit(1743015047.843:115): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.879148][ T5817] veth0_macvtap: entered promiscuous mode [ 50.905847][ T30] audit: type=1400 audit(1743015047.843:116): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.sWPJoB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.941396][ T5817] veth1_macvtap: entered promiscuous mode [ 50.948472][ T30] audit: type=1400 audit(1743015047.843:117): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.sWPJoB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.981457][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.985025][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.006128][ T30] audit: type=1400 audit(1743015047.873:118): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.026922][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.037013][ T30] audit: type=1400 audit(1743015047.913:119): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 51.037597][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.064600][ T30] audit: type=1400 audit(1743015047.913:120): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="gadgetfs" ino=7775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 51.071599][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.096228][ T5823] Bluetooth: hci0: command tx timeout [ 51.103051][ T56] Bluetooth: hci4: command tx timeout [ 51.108484][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.124318][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.135303][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.148096][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.159249][ T56] Bluetooth: hci2: command tx timeout [ 51.161581][ T5823] Bluetooth: hci3: command tx timeout [ 51.164685][ T56] Bluetooth: hci1: command tx timeout [ 51.185314][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.198926][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.211495][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.221596][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.231276][ T5902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 51.235202][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.253804][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.294146][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.308964][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.319389][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.330900][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.348801][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.363223][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.374042][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.389465][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.401954][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.414160][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.428111][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.438399][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.453153][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.463405][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.478819][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.538215][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.550756][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.654692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.756902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.997209][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.059190][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.075851][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.084866][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.093956][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.166436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.363097][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.376799][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.386874][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.415479][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.518533][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.531793][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.780898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.789457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.265752][ T56] Bluetooth: hci0: command tx timeout [ 53.265822][ T5828] Bluetooth: hci3: command tx timeout [ 53.271288][ T56] Bluetooth: hci2: command tx timeout [ 53.276701][ T5818] Bluetooth: hci1: command tx timeout [ 53.288616][ T5823] Bluetooth: hci4: command tx timeout [ 53.655141][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.677155][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.774209][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.796949][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.801851][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.805149][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.892895][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.917047][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.224387][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.325500][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.380114][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 54.380132][ T30] audit: type=1400 audit(1743015051.423:152): avc: denied { setopt } for pid=5930 comm="syz.2.10" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.435088][ T30] audit: type=1400 audit(1743015051.423:153): avc: denied { write } for pid=5930 comm="syz.2.10" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.475644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.624241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.766801][ T30] audit: type=1400 audit(1743015051.813:154): avc: denied { sqpoll } for pid=5934 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.795628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.033796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.165094][ T30] audit: type=1400 audit(1743015052.203:155): avc: denied { append } for pid=5944 comm="syz.1.13" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.367616][ T5823] Bluetooth: hci4: command tx timeout [ 55.374622][ T5823] Bluetooth: hci3: command tx timeout [ 55.380868][ T5823] Bluetooth: hci1: command tx timeout [ 55.385515][ T5828] Bluetooth: hci2: command tx timeout [ 55.386534][ T5823] Bluetooth: hci0: command tx timeout [ 55.642233][ T30] audit: type=1400 audit(1743015052.683:156): avc: denied { load_policy } for pid=5934 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.780047][ T5940] SELinux: ebitmap: truncated map [ 55.803397][ T5943] netlink: 'syz.2.11': attribute type 3 has an invalid length. [ 55.805144][ T5940] SELinux: failed to load policy [ 55.811211][ T5943] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 55.823817][ T5943] netlink: 124732 bytes leftover after parsing attributes in process `syz.2.11'. [ 55.995500][ T30] audit: type=1400 audit(1743015052.703:157): avc: denied { read write } for pid=5947 comm="syz.4.5" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.018733][ T30] audit: type=1400 audit(1743015052.703:158): avc: denied { open } for pid=5947 comm="syz.4.5" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.042429][ T30] audit: type=1400 audit(1743015052.833:159): avc: denied { ioctl } for pid=5947 comm="syz.4.5" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.223868][ T5959] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 56.234675][ T5959] SELinux: failed to load policy [ 56.253882][ T5959] netlink: 'syz.3.15': attribute type 3 has an invalid length. [ 56.261783][ T5959] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15'. [ 56.774669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.229319][ T30] audit: type=1400 audit(1743015053.023:160): avc: denied { ioctl } for pid=5949 comm="syz.1.14" path="socket:[8420]" dev="sockfs" ino=8420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.015979][ T30] audit: type=1400 audit(1743015054.933:161): avc: denied { ioctl } for pid=5965 comm="syz.4.18" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.330558][ T5976] syz.0.16: attempt to access beyond end of device [ 58.330558][ T5976] loop0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 58.343582][ T5976] hfs: can't find a HFS filesystem on dev loop0 [ 59.485811][ T5987] fuse: Bad value for 'fd' [ 59.487885][ T30] audit: type=1400 audit(1743015056.533:162): avc: denied { mounton } for pid=5983 comm="syz.3.21" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.663643][ T5987] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 59.664279][ T30] audit: type=1400 audit(1743015056.703:163): avc: denied { write } for pid=5991 comm="syz.2.23" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.563874][ T30] audit: type=1326 audit(1743015057.603:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.4.25" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd5398d169 code=0x0 [ 60.825995][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.224618][ T30] audit: type=1400 audit(1743015058.263:165): avc: denied { read write } for pid=6007 comm="syz.3.28" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.249545][ T30] audit: type=1400 audit(1743015058.263:166): avc: denied { open } for pid=6007 comm="syz.3.28" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.308094][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.323352][ T30] audit: type=1400 audit(1743015058.293:167): avc: denied { ioctl } for pid=6007 comm="syz.3.28" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.350531][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.378899][ T6013] input: syz1 as /devices/virtual/input/input5 [ 61.388449][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 61.406977][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.419891][ T30] audit: type=1400 audit(1743015058.463:168): avc: denied { read } for pid=5178 comm="acpid" name="event4" dev="devtmpfs" ino=2730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.451823][ T6015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'. [ 61.453375][ T30] audit: type=1400 audit(1743015058.463:169): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.497894][ T30] audit: type=1400 audit(1743015058.463:170): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2730 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.528113][ T30] audit: type=1400 audit(1743015058.473:171): avc: denied { bind } for pid=6014 comm="syz.0.29" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.570647][ T9] usb 3-1: config 0 descriptor?? [ 61.606921][ T6019] fuse: Bad value for 'fd' [ 61.784679][ T6030] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.33'. [ 61.816049][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.906417][ T6034] fuse: Unknown parameter 'us00000000000000000000' [ 62.021254][ T5898] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 62.032940][ T5898] usb 1-1: config 0 has no interface number 0 [ 62.068845][ T9] maltron 0003:058F:9410.0001: unknown main item tag 0x0 [ 62.076105][ T5898] usb 1-1: config 0 interface 191 has no altsetting 0 [ 62.083383][ T9] maltron 0003:058F:9410.0001: unknown main item tag 0x0 [ 62.095021][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=7f.b1 [ 62.507851][ T9] maltron 0003:058F:9410.0001: unknown main item tag 0x0 [ 62.516907][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.615839][ T9] maltron 0003:058F:9410.0001: unknown main item tag 0x0 [ 62.624420][ T5898] usb 1-1: Product: syz [ 62.649585][ T9] maltron 0003:058F:9410.0001: unknown main item tag 0x0 [ 62.690937][ T5898] usb 1-1: Manufacturer: syz [ 62.732028][ T5898] usb 1-1: SerialNumber: syz [ 62.822676][ T5898] usb 1-1: config 0 descriptor?? [ 62.833005][ T9] maltron 0003:058F:9410.0001: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.2-1/input0 [ 62.847310][ T5898] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 62.864839][ T6002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.072535][ T5867] usb 3-1: USB disconnect, device number 2 [ 63.141563][ T6051] syz_tun: entered allmulticast mode [ 63.221005][ T6052] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 63.231805][ T6052] SELinux: failed to load policy [ 63.249984][ T6052] netlink: 'syz.4.38': attribute type 3 has an invalid length. [ 63.257768][ T6052] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.38'. [ 64.105968][ T5898] usb 1-1: USB disconnect, device number 2 [ 64.118576][ T9] kernel read not supported for file /sysvipc/msg (pid: 9 comm: kworker/0:0) [ 64.159957][ T6055] 9pnet_fd: Insufficient options for proto=fd [ 64.378730][ T6062] SELinux: ebitmap: truncated map [ 64.398305][ T6062] SELinux: failed to load policy [ 64.418514][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.678022][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.700547][ T48] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 64.936806][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 64.942126][ T48] usb 4-1: device descriptor read/64, error -71 [ 64.993637][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.035516][ T6045] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 65.157858][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 65.157872][ T30] audit: type=1400 audit(1743015062.203:197): avc: denied { read write } for pid=6064 comm="syz.0.42" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.234424][ T30] audit: type=1400 audit(1743015062.203:198): avc: denied { open } for pid=6064 comm="syz.0.42" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.300527][ T30] audit: type=1400 audit(1743015062.203:199): avc: denied { ioctl } for pid=6064 comm="syz.0.42" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.319693][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 65.359537][ T30] audit: type=1400 audit(1743015062.233:200): avc: denied { ioctl } for pid=6064 comm="syz.0.42" path="socket:[9339]" dev="sockfs" ino=9339 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.397979][ T5870] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 65.407275][ T48] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 65.440066][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.541214][ T6081] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.589072][ T48] usb 4-1: device descriptor read/64, error -71 [ 65.622364][ T30] audit: type=1400 audit(1743015062.243:201): avc: denied { name_connect } for pid=6066 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 65.695167][ T5870] usb 2-1: Product: syz [ 65.716668][ T48] usb usb4-port1: attempt power cycle [ 65.746018][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.759114][ T30] audit: type=1400 audit(1743015062.423:202): avc: denied { connect } for pid=6070 comm="syz.2.44" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.780305][ T5870] usb 2-1: SerialNumber: syz [ 65.791872][ T5870] usb 2-1: config 0 descriptor?? [ 65.805852][ T30] audit: type=1400 audit(1743015062.493:203): avc: denied { create } for pid=6066 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.831677][ T30] audit: type=1400 audit(1743015062.583:204): avc: denied { write } for pid=6066 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.854661][ T30] audit: type=1400 audit(1743015062.633:205): avc: denied { listen } for pid=6066 comm="syz.4.43" lport=53501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.900717][ T30] audit: type=1400 audit(1743015062.713:206): avc: denied { accept } for pid=6066 comm="syz.4.43" lport=53501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.902425][ T6045] syz_tun: left allmulticast mode [ 65.929236][ T5870] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 65.950322][ T5870] usb 2-1: USB disconnect, device number 2 [ 65.966700][ T5867] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 65.977726][ T5867] usb 3-1: config 6 has no interface number 0 [ 65.985354][ T5867] usb 3-1: config 6 interface 57 has no altsetting 0 [ 65.994879][ T5867] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 66.004473][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.013288][ T5867] usb 3-1: Product: syz [ 66.017634][ T5867] usb 3-1: Manufacturer: syz [ 66.018268][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 66.022248][ T5867] usb 3-1: SerialNumber: syz [ 66.032380][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 66.049826][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 66.058944][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 66.241142][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.250352][ T48] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 66.256343][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.344944][ T6101] syz.0.47: attempt to access beyond end of device [ 66.344944][ T6101] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 66.358377][ T6101] FAT-fs (loop1): unable to read boot sector [ 66.512398][ T48] usb 4-1: device descriptor read/8, error -71 [ 66.547343][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.618494][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.679170][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.697556][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.732458][ T5867] ums-alauda 3-1:6.57: USB Mass Storage device detected [ 66.826287][ T5867] usb 3-1: USB disconnect, device number 3 [ 67.006510][ T48] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 67.107508][ T48] usb 4-1: device descriptor read/8, error -71 [ 67.129900][ T6113] SELinux: ebitmap: truncated map [ 67.150069][ T6113] SELinux: failed to load policy [ 67.190578][ T6113] netlink: 'syz.1.49': attribute type 3 has an invalid length. [ 67.198327][ T6113] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 67.206001][ T6113] netlink: 124732 bytes leftover after parsing attributes in process `syz.1.49'. [ 67.395206][ T48] usb usb4-port1: unable to enumerate USB device [ 68.047385][ T5867] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.213867][ T6124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.225868][ T6125] fuse: Bad value for 'fd' [ 68.272531][ T6130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.345470][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 68.386228][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.666783][ T5867] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 68.685941][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 68.693349][ T5867] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 68.699185][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.703278][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.714266][ T6135] netlink: 64 bytes leftover after parsing attributes in process `syz.3.56'. [ 68.730154][ T5867] usb 1-1: Product: syz [ 68.734432][ T5867] usb 1-1: Manufacturer: syz [ 68.740237][ T5867] usb 1-1: SerialNumber: syz [ 68.786307][ T6133] SELinux: ebitmap: truncated map [ 68.816135][ T6132] netlink: 'syz.4.55': attribute type 3 has an invalid length. [ 68.823758][ T6132] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 68.831420][ T6132] netlink: 124732 bytes leftover after parsing attributes in process `syz.4.55'. [ 68.862497][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.890550][ T6133] SELinux: failed to load policy [ 68.950744][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.037250][ T5898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 69.133494][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.233632][ T6141] Zero length message leads to an empty skb [ 69.283375][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 69.332067][ T5867] usb 1-1: config 0 descriptor?? [ 69.338831][ T6119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.349079][ T5898] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 69.377576][ T5898] usb 2-1: Manufacturer: syz [ 69.383960][ T5867] hub 1-1:0.0: bad descriptor, ignoring hub [ 69.384301][ T5898] usb 2-1: config 0 descriptor?? [ 69.413487][ T5867] hub 1-1:0.0: probe with driver hub failed with error -5 [ 69.438509][ T5867] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 69.447505][ T6147] fuse: Unknown parameter '0x0000000000000004' [ 69.605514][ T48] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.615585][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 69.624923][ T10] usb 1-1: USB disconnect, device number 3 [ 69.817341][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.837835][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.867151][ T6153] SELinux: ebitmap: truncated map [ 69.890971][ T6153] SELinux: failed to load policy [ 69.975568][ T5898] rc_core: IR keymap rc-hauppauge not found [ 70.010732][ T5898] Registered IR keymap rc-empty [ 70.051848][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.080852][ T48] usb 3-1: device descriptor read/64, error -71 [ 70.105809][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.220534][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 70.378654][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 70.446396][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 70.479891][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 70.479908][ T30] audit: type=1400 audit(1743015067.523:229): avc: denied { append } for pid=6157 comm="syz.4.61" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.511074][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.528636][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.578411][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.600975][ T6156] hsr_slave_1 (unregistering): left promiscuous mode [ 70.610576][ T6164] delete_channel: no stack [ 70.611473][ T30] audit: type=1400 audit(1743015067.653:230): avc: denied { getopt } for pid=6160 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.615369][ T6164] delete_channel: no stack [ 70.636292][ T30] audit: type=1400 audit(1743015067.653:231): avc: denied { create } for pid=6160 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 70.641183][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.677491][ T6167] delete_channel: no stack [ 70.685445][ T48] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.689977][ T6167] delete_channel: no stack [ 70.716067][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.765852][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 70.777117][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'. [ 70.833338][ T30] audit: type=1400 audit(1743015067.783:232): avc: denied { mount } for pid=6162 comm="syz.0.64" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 70.895016][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 71.016352][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 71.085995][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 71.105947][ T30] audit: type=1400 audit(1743015067.793:233): avc: denied { remount } for pid=6162 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.201391][ T5898] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 71.262234][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301916][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.358169][ T5898] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 71.410777][ T30] audit: type=1400 audit(1743015067.803:234): avc: denied { shutdown } for pid=6162 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.420559][ T48] usb 3-1: device descriptor read/64, error -71 [ 71.522939][ T5898] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 71.559073][ T30] audit: type=1326 audit(1743015067.833:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.64" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51dd58d169 code=0x0 [ 71.581762][ T30] audit: type=1400 audit(1743015067.903:236): avc: denied { write } for pid=6162 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.600966][ T30] audit: type=1400 audit(1743015067.913:237): avc: denied { create } for pid=6162 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 71.614676][ T5898] usb 2-1: USB disconnect, device number 3 [ 71.629822][ T30] audit: type=1400 audit(1743015068.673:238): avc: denied { create } for pid=6171 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.665925][ T48] usb usb3-port1: attempt power cycle [ 72.027582][ T48] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 72.376355][ T48] usb 3-1: device descriptor read/8, error -71 [ 72.726257][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 72.950307][ T48] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 73.005577][ T5867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 73.031059][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.054903][ T48] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 73.085949][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 73.104244][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.116355][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 73.133190][ T48] usb 3-1: config 0 descriptor?? [ 73.139993][ T24] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 73.140161][ T6196] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 73.149366][ T24] usb 2-1: config 3 has no interface number 0 [ 73.164205][ T6196] netlink: 228 bytes leftover after parsing attributes in process `syz.0.73'. [ 73.164516][ T24] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 73.213916][ T24] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 73.228905][ T24] usb 2-1: config 3 interface 106 has no altsetting 0 [ 73.237236][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.246009][ T5867] usb 4-1: config 0 has no interface number 0 [ 73.521117][ T5867] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.532310][ T6206] fuse: Unknown parameter '0x0000000000000004' [ 73.541749][ T5867] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.551955][ T5867] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 73.562225][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.572198][ T24] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 73.587384][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.596391][ T48] elo 0003:04E7:0030.0002: hidraw0: USB HID v80.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 73.610369][ T24] usb 2-1: Product: syz [ 73.614325][ T6204] SELinux: ebitmap: truncated map [ 73.633804][ T6204] SELinux: failed to load policy [ 73.889464][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.968238][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.169013][ T24] usb 2-1: Manufacturer: syz [ 74.173668][ T24] usb 2-1: SerialNumber: syz [ 74.194065][ T6187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.205456][ T5867] usb 4-1: config 0 descriptor?? [ 74.205666][ T6187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.353781][ T5867] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 75.405569][ T5867] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 75.414076][ T24] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 75.424228][ T5867] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 75.433678][ T24] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 75.445030][ T5867] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 75.465658][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.476005][ T5867] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 75.483297][ T5867] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 75.491102][ T24] usb 2-1: USB disconnect, device number 4 [ 75.531940][ T9] usb 3-1: USB disconnect, device number 7 [ 75.623318][ T5867] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 75.659218][ T5867] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 75.671159][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 75.674961][ T10] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 75.685914][ T24] kobil_sct 2-1:3.106: device disconnected [ 75.694854][ T10] usb 5-1: config 0 has no interface number 0 [ 75.694893][ T10] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 75.707772][ T5867] hid_prodikeys: hid-prodikeys: failed to find output report [ 75.707772][ T5867] [ 75.714107][ T10] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.229082][ T6231] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 76.235359][ T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 76.238507][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.245851][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.245872][ T10] usb 5-1: Product: syz [ 76.253704][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.275749][ T10] usb 5-1: Manufacturer: syz [ 76.275911][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.287486][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.291809][ T10] usb 5-1: SerialNumber: syz [ 76.295462][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.306361][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.316349][ T6231] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 76.343750][ T5867] usb 4-1: USB disconnect, device number 6 [ 76.356532][ T975] cfg80211: failed to load regulatory.db [ 76.366908][ T10] usb 5-1: config 0 descriptor?? [ 76.374622][ T6223] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 76.383441][ T10] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 76.401099][ T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 76.599808][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 76.617641][ T6248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.935580][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.958604][ T6255] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 76.969314][ T6255] SELinux: failed to load policy [ 77.005359][ T6257] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 77.015323][ T6257] SELinux: failed to load policy [ 77.607516][ T6256] netlink: 'syz.1.86': attribute type 3 has an invalid length. [ 77.615207][ T6256] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.86'. [ 77.863338][ T10] usb 5-1: USB disconnect, device number 2 [ 77.904026][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 77.915599][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 77.926915][ T10] cyberjack 5-1:0.69: device disconnected [ 77.930939][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 77.949942][ T24] usb 1-1: config 0 has no interface number 0 [ 77.981357][ T24] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.010009][ T24] usb 1-1: config 0 interface 2 has no altsetting 0 [ 78.041085][ T24] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 78.080946][ T6274] block nbd1: shutting down sockets [ 78.100933][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.198767][ T6274] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 78.217387][ T6274] afs: Unknown parameter '' [ 78.232695][ T24] usb 1-1: Product: syz [ 78.368875][ T24] usb 1-1: Manufacturer: syz [ 78.383251][ T24] usb 1-1: SerialNumber: syz [ 78.456902][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 78.456937][ T30] audit: type=1400 audit(1743015075.473:253): avc: denied { create } for pid=6271 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.593399][ T6280] SELinux: failed to load policy [ 78.622377][ T24] usb 1-1: config 0 descriptor?? [ 78.807321][ T30] audit: type=1400 audit(1743015075.473:254): avc: denied { connect } for pid=6271 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.947229][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.509820][ T30] audit: type=1400 audit(1743015076.553:255): avc: denied { read } for pid=6284 comm="syz.3.93" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.534393][ T30] audit: type=1400 audit(1743015076.553:256): avc: denied { open } for pid=6284 comm="syz.3.93" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.583611][ T30] audit: type=1400 audit(1743015076.573:257): avc: denied { ioctl } for pid=6284 comm="syz.3.93" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.627268][ T24] usb 1-1: USB disconnect, device number 4 [ 79.701244][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.043141][ T30] audit: type=1400 audit(1743015076.773:258): avc: denied { read } for pid=6282 comm="syz.2.92" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.145880][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.200617][ T30] audit: type=1400 audit(1743015077.243:259): avc: denied { create } for pid=6292 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.226966][ T30] audit: type=1400 audit(1743015077.253:260): avc: denied { mount } for pid=6292 comm="syz.1.96" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.317723][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 80.384277][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 80.416135][ T6296] fuse: Unknown parameter '0x0000000000000004' [ 80.422423][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.444453][ T10] usb 5-1: Product: syz [ 80.449610][ T10] usb 5-1: Manufacturer: syz [ 80.454606][ T10] usb 5-1: SerialNumber: syz [ 80.469665][ T10] usb 5-1: config 0 descriptor?? [ 80.576006][ T30] audit: type=1400 audit(1743015077.613:261): avc: denied { write } for pid=6292 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.684088][ T10] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 80.693733][ T30] audit: type=1400 audit(1743015077.733:262): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.712693][ T10] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 80.861922][ T10] usb 5-1: USB disconnect, device number 3 [ 81.200225][ T6305] netlink: 68 bytes leftover after parsing attributes in process `syz.2.99'. [ 81.224314][ T6305] bridge0: port 3(gretap0) entered blocking state [ 81.231713][ T6305] bridge0: port 3(gretap0) entered disabled state [ 81.460640][ T6305] gretap0: entered allmulticast mode [ 81.483318][ T6305] gretap0: entered promiscuous mode [ 81.557017][ T6305] bridge0: port 3(gretap0) entered blocking state [ 81.564245][ T6305] bridge0: port 3(gretap0) entered forwarding state [ 81.600140][ T6309] gretap0: left allmulticast mode [ 81.605226][ T6309] gretap0: left promiscuous mode [ 82.183410][ T6309] bridge0: port 3(gretap0) entered disabled state [ 82.384949][ T6315] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 82.395533][ T6315] SELinux: failed to load policy [ 82.407700][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.102'. [ 82.420079][ T6315] netlink: 'syz.1.100': attribute type 3 has an invalid length. [ 82.427856][ T6315] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.100'. [ 82.971596][ T6304] ======================================================= [ 82.971596][ T6304] WARNING: The mand mount option has been deprecated and [ 82.971596][ T6304] and is ignored by this kernel. Remove the mand [ 82.971596][ T6304] option from the mount to silence this warning. [ 82.971596][ T6304] ======================================================= [ 83.006960][ T6304] tmpfs: Bad value for 'mpol' [ 83.686613][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 83.686628][ T30] audit: type=1400 audit(1743015080.733:268): avc: denied { write } for pid=6329 comm="syz.3.105" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.940506][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 83.952251][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 84.866113][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 84.932687][ T30] audit: type=1400 audit(1743015081.953:269): avc: denied { create } for pid=6332 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.075959][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 85.133951][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.217764][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 85.220681][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 85.238464][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.247401][ T30] audit: type=1400 audit(1743015082.293:270): avc: denied { write } for pid=6332 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.423062][ T24] usb 4-1: config 0 descriptor?? [ 85.716466][ T6344] input: syz1 as /devices/virtual/input/input9 [ 86.359501][ T5898] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 87.111832][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 87.465072][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 87.476785][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 87.494133][ T5898] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 87.504060][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.512214][ T5898] usb 5-1: Product: syz [ 87.516466][ T5898] usb 5-1: Manufacturer: syz [ 87.521149][ T5898] usb 5-1: SerialNumber: syz [ 87.534316][ T5898] usb 5-1: config 0 descriptor?? [ 87.539953][ T6362] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 87.550407][ T6362] SELinux: failed to load policy [ 87.589342][ T6352] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 87.612025][ T6363] netlink: 'syz.0.115': attribute type 3 has an invalid length. [ 87.619854][ T6363] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.115'. [ 87.679201][ T6352] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 87.756490][ T5898] usb 5-1: ucan: probing device on interface #0 [ 87.941553][ T24] usb 4-1: string descriptor 0 read error: -71 [ 87.952981][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 87.979608][ T5178] bcm5974 4-1:0.0: could not read from device [ 87.980568][ T5898] usb 5-1: ucan: failed to retrieve device info [ 87.986106][ T24] usb 4-1: USB disconnect, device number 7 [ 88.053751][ T5898] usb 5-1: ucan: probe failed; try to update the device firmware [ 88.073392][ T6369] veth0_vlan: entered allmulticast mode [ 88.195457][ T30] audit: type=1400 audit(1743015085.223:271): avc: denied { setopt } for pid=6372 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.240152][ T6378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.266468][ T5898] usb 5-1: USB disconnect, device number 4 [ 88.633670][ T5898] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 89.205715][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.224547][ T5898] usb 5-1: config 0 has no interface number 0 [ 89.234897][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 89.248911][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 89.413965][ T5898] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.435493][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.463540][ T5898] usb 5-1: config 0 descriptor?? [ 89.507462][ T6375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.886375][ T5898] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 89.980696][ T6397] SELinux: ebitmap: truncated map [ 90.017210][ T6397] SELinux: failed to load policy [ 90.058152][ T975] usb 5-1: USB disconnect, device number 5 [ 90.064067][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 90.084332][ T30] audit: type=1400 audit(1743015087.123:272): avc: denied { create } for pid=6405 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.180197][ T30] audit: type=1400 audit(1743015087.153:273): avc: denied { connect } for pid=6405 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.278445][ T30] audit: type=1400 audit(1743015087.313:274): avc: denied { bind } for pid=6413 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.300022][ T30] audit: type=1400 audit(1743015087.343:275): avc: denied { connect } for pid=6413 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.324665][ T30] audit: type=1400 audit(1743015087.343:276): avc: denied { map } for pid=6413 comm="syz.3.127" path="socket:[10845]" dev="sockfs" ino=10845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.359903][ T30] audit: type=1400 audit(1743015087.343:277): avc: denied { read accept } for pid=6413 comm="syz.3.127" path="socket:[10845]" dev="sockfs" ino=10845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.418264][ T30] audit: type=1400 audit(1743015087.363:278): avc: denied { ioctl } for pid=6373 comm="syz.4.118" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.455485][ T975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.467395][ T30] audit: type=1400 audit(1743015087.503:279): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.514960][ T6416] fuse: Unknown parameter '0x0000000000000004' [ 90.532138][ T30] audit: type=1400 audit(1743015087.503:280): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.564949][ T30] audit: type=1400 audit(1743015087.503:281): avc: denied { create } for pid=5175 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.688796][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 90.702922][ T975] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.711557][ T975] usb 5-1: config 0 has no interface number 0 [ 90.719203][ T975] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.795441][ T975] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.821157][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.845346][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 195.852372][ C0] rcu: 1-...!: (0 ticks this GP) idle=432c/1/0x4000000000000000 softirq=14943/14943 fqs=6 [ 195.862895][ C0] rcu: (detected by 0, t=10502 jiffies, g=9225, q=634 ncpus=2) [ 195.870525][ C0] Sending NMI from CPU 0 to CPUs 1: [ 195.870552][ C1] NMI backtrace for cpu 1 [ 195.870563][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 195.870578][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.870587][ C1] Workqueue: rcu_gp process_srcu [ 195.870609][ C1] RIP: 0010:find_held_lock+0x2b/0x80 [ 195.870623][ C1] Code: 56 41 89 d6 41 55 49 89 cd 41 54 49 89 f4 55 8d 6a ff 48 63 c5 53 48 8d 04 80 48 8d 9c c7 f0 0a 00 00 48 89 df e8 75 33 c6 09 <85> c0 75 37 48 83 eb 28 41 83 ee 02 44 89 f5 79 1d eb 26 4c 89 e6 [ 195.870634][ C1] RSP: 0018:ffffc90000a08d08 EFLAGS: 00000046 [ 195.870643][ C1] RAX: 0000000000000001 RBX: ffff88801e2b0b40 RCX: ffffc90000a08d44 [ 195.870651][ C1] RDX: 0000000000000003 RSI: ffff888079f57300 RDI: ffff88801e2b0b40 [ 195.870659][ C1] RBP: 0000000000000002 R08: 0000000000000004 R09: 0000000000000002 [ 195.870665][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888079f57300 [ 195.870673][ C1] R13: ffffc90000a08d44 R14: 0000000000000003 R15: 0000000000000003 [ 195.870680][ C1] FS: 0000000000000000(0000) GS:ffff888124b54000(0000) knlGS:0000000000000000 [ 195.870694][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.870702][ C1] CR2: 0000200000343030 CR3: 000000002b40c000 CR4: 00000000003526f0 [ 195.870709][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.870716][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.870723][ C1] Call Trace: [ 195.870729][ C1] [ 195.870734][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 195.870754][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 195.870766][ C1] ? nmi_handle.part.0+0x1a7/0x5d0 [ 195.870781][ C1] ? nmi_handle+0x86/0xc0 [ 195.870792][ C1] ? find_held_lock+0x2b/0x80 [ 195.870803][ C1] ? default_do_nmi+0x6a/0x160 [ 195.870823][ C1] ? exc_nmi+0x170/0x1e0 [ 195.870839][ C1] ? end_repeat_nmi+0xf/0x53 [ 195.870853][ C1] ? find_held_lock+0x2b/0x80 [ 195.870864][ C1] ? find_held_lock+0x2b/0x80 [ 195.870876][ C1] ? find_held_lock+0x2b/0x80 [ 195.870893][ C1] [ 195.870896][ C1] [ 195.870900][ C1] ? advance_sched+0x62b/0xc80 [ 195.870918][ C1] lock_release+0xe4/0x2f0 [ 195.870934][ C1] _raw_spin_unlock+0x16/0x50 [ 195.870945][ C1] advance_sched+0x62b/0xc80 [ 195.870964][ C1] ? __pfx_advance_sched+0x10/0x10 [ 195.870980][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 195.870993][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 195.871004][ C1] ? read_tsc+0x9/0x20 [ 195.871021][ C1] hrtimer_interrupt+0x397/0x8e0 [ 195.871036][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 195.871050][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 195.871063][ C1] [ 195.871066][ C1] [ 195.871070][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.871082][ C1] RIP: 0010:queue_delayed_work_on+0x89/0x200 [ 195.871097][ C1] Code: 37 00 45 84 e4 74 3a e8 15 66 37 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 63 61 37 00 48 85 db 0f 85 57 01 00 00 45 31 e4 f2 65 37 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc [ 195.871107][ C1] RSP: 0018:ffffc900001e7c30 EFLAGS: 00000293 [ 195.871116][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81839101 [ 195.871123][ C1] RDX: ffff88801e2b0000 RSI: ffffffff8183910b RDI: 0000000000000007 [ 195.871130][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 195.871137][ C1] R10: 0000000000000000 R11: 0000000000002bb3 R12: 0000000000000001 [ 195.871144][ C1] R13: 0000000000000008 R14: ffff88801b47ac00 R15: 0000000000000000 [ 195.871153][ C1] ? queue_delayed_work_on+0x141/0x200 [ 195.871165][ C1] ? queue_delayed_work_on+0x14b/0x200 [ 195.871179][ C1] process_one_work+0x9cc/0x1b70 [ 195.871193][ C1] ? __pfx_process_srcu+0x10/0x10 [ 195.871210][ C1] ? __pfx_process_one_work+0x10/0x10 [ 195.871223][ C1] ? assign_work+0x1a0/0x250 [ 195.871234][ C1] worker_thread+0x6c1/0xef0 [ 195.871248][ C1] ? __pfx_worker_thread+0x10/0x10 [ 195.871260][ C1] kthread+0x3a4/0x760 [ 195.871270][ C1] ? __pfx_kthread+0x10/0x10 [ 195.871279][ C1] ? __pfx_kthread+0x10/0x10 [ 195.871289][ C1] ? __pfx_kthread+0x10/0x10 [ 195.871298][ C1] ? __pfx_kthread+0x10/0x10 [ 195.871308][ C1] ? rcu_is_watching+0x12/0xc0 [ 195.871320][ C1] ? __pfx_kthread+0x10/0x10 [ 195.871330][ C1] ret_from_fork+0x45/0x80 [ 195.871340][ C1] ? __pfx_kthread+0x10/0x10 [ 195.871349][ C1] ret_from_fork_asm+0x1a/0x30 [ 195.871369][ C1] [ 195.871545][ C0] rcu: rcu_preempt kthread starved for 10319 jiffies! g9225 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 196.319214][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 196.329173][ C0] rcu: RCU grace-period kthread stack dump: [ 196.335050][ C0] task:rcu_preempt state:R running task stack:28712 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 196.348621][ C0] Call Trace: [ 196.351896][ C0] [ 196.354825][ C0] __schedule+0x1129/0x5c00 [ 196.359333][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 196.364292][ C0] ? __pfx___schedule+0x10/0x10 [ 196.369140][ C0] ? find_held_lock+0x2b/0x80 [ 196.373809][ C0] ? schedule+0x2d7/0x3a0 [ 196.378132][ C0] schedule+0xe7/0x3a0 [ 196.382193][ C0] schedule_timeout+0x123/0x280 [ 196.387043][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 196.392414][ C0] ? __pfx_process_timeout+0x10/0x10 [ 196.397694][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 196.403514][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 196.408971][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 196.413731][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 196.419022][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 196.423901][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 196.429703][ C0] rcu_gp_kthread+0x270/0x380 [ 196.434377][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 196.439574][ C0] ? rcu_is_watching+0x12/0xc0 [ 196.444331][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.449611][ C0] ? __kthread_parkme+0x148/0x220 [ 196.454641][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 196.459838][ C0] kthread+0x3a4/0x760 [ 196.463906][ C0] ? __pfx_kthread+0x10/0x10 [ 196.468484][ C0] ? __pfx_kthread+0x10/0x10 [ 196.473062][ C0] ? __pfx_kthread+0x10/0x10 [ 196.477640][ C0] ? __pfx_kthread+0x10/0x10 [ 196.482228][ C0] ? rcu_is_watching+0x12/0xc0 [ 196.486982][ C0] ? __pfx_kthread+0x10/0x10 [ 196.491565][ C0] ret_from_fork+0x45/0x80 [ 196.495973][ C0] ? __pfx_kthread+0x10/0x10 [ 196.500554][ C0] ret_from_fork_asm+0x1a/0x30 [ 196.505320][ C0] [ 196.508328][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 196.514639][ C0] CPU: 0 UID: 0 PID: 2890 Comm: kworker/u8:6 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 196.526428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.536470][ C0] Workqueue: events_unbound toggle_allocation_gate [ 196.542970][ C0] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 196.549638][ C0] Code: 89 ee e8 4e 1e 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 fd 22 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 196.569239][ C0] RSP: 0018:ffffc9000b90f938 EFLAGS: 00000293 [ 196.575300][ C0] RAX: 0000000000000000 RBX: ffff8880b853f500 RCX: ffffffff81aed369 [ 196.583263][ C0] RDX: ffff888031282440 RSI: ffffffff81aed343 RDI: 0000000000000005 [ 196.591223][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 196.599180][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170a7ea1 [ 196.607139][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b843b000 [ 196.615101][ C0] FS: 0000000000000000(0000) GS:ffff888124a54000(0000) knlGS:0000000000000000 [ 196.624027][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.630621][ C0] CR2: 0000001b2f50bff8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 196.638592][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.646575][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.654547][ C0] Call Trace: [ 196.657823][ C0] [ 196.660658][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 196.666982][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 196.672172][ C0] ? rcu_sched_clock_irq+0x22b9/0x2fe0 [ 196.677627][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 196.683248][ C0] ? find_held_lock+0x2b/0x80 [ 196.687923][ C0] ? find_held_lock+0x2b/0x80 [ 196.692593][ C0] ? timekeeping_advance+0x72f/0xa90 [ 196.697883][ C0] ? rcu_is_watching+0x12/0xc0 [ 196.702639][ C0] ? update_process_times+0x178/0x2d0 [ 196.708016][ C0] ? __pfx_update_process_times+0x10/0x10 [ 196.713733][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 196.719188][ C0] ? update_wall_time+0x1c/0x40 [ 196.724036][ C0] ? tick_nohz_handler+0x37e/0x540 [ 196.729144][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 196.734338][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 196.739809][ C0] ? __hrtimer_run_queues+0x5ea/0xad0 [ 196.745176][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 196.750892][ C0] ? read_tsc+0x9/0x20 [ 196.754963][ C0] ? hrtimer_interrupt+0x397/0x8e0 [ 196.760071][ C0] ? __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 196.766217][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 196.772017][ C0] [ 196.774939][ C0] [ 196.777861][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.784015][ C0] ? smp_call_function_many_cond+0x4c9/0x1290 [ 196.790073][ C0] ? smp_call_function_many_cond+0x4a3/0x1290 [ 196.796131][ C0] ? smp_call_function_many_cond+0x4a5/0x1290 [ 196.802188][ C0] ? smp_call_function_many_cond+0x4a3/0x1290 [ 196.808249][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 196.813267][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 196.818369][ C0] text_poke_bp_batch+0x220/0x760 [ 196.823390][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 196.828927][ C0] ? __jump_label_patch+0x1db/0x400 [ 196.834123][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 196.840364][ C0] text_poke_finish+0x30/0x40 [ 196.845035][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 196.851011][ C0] jump_label_update+0x1d7/0x400 [ 196.855995][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 196.861890][ C0] static_key_enable+0x1a/0x20 [ 196.866647][ C0] toggle_allocation_gate+0xfa/0x280 [ 196.871925][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 196.877810][ C0] ? rcu_is_watching+0x12/0xc0 [ 196.882568][ C0] process_one_work+0x9cc/0x1b70 [ 196.887506][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 196.893138][ C0] ? __pfx_process_one_work+0x10/0x10 [ 196.898509][ C0] ? assign_work+0x1a0/0x250 [ 196.903096][ C0] worker_thread+0x6c1/0xef0 [ 196.907686][ C0] ? __kthread_parkme+0x148/0x220 [ 196.912711][ C0] ? __pfx_worker_thread+0x10/0x10 [ 196.917816][ C0] kthread+0x3a4/0x760 [ 196.921885][ C0] ? __pfx_kthread+0x10/0x10 [ 196.926468][ C0] ? __pfx_kthread+0x10/0x10 [ 196.931049][ C0] ? __pfx_kthread+0x10/0x10 [ 196.935628][ C0] ? __pfx_kthread+0x10/0x10 [ 196.940210][ C0] ? rcu_is_watching+0x12/0xc0 [ 196.944968][ C0] ? __pfx_kthread+0x10/0x10 [ 196.949547][ C0] ret_from_fork+0x45/0x80 [ 196.953955][ C0] ? __pfx_kthread+0x10/0x10 [ 196.958539][ C0] ret_from_fork_asm+0x1a/0x30 [ 196.963309][ C0]