last executing test programs: 11.169008084s ago: executing program 4 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00002b2000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.884994064s ago: executing program 0 (id=114): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x58, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f683"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2c0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYBLOB=',group_id=']) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x400, 0x0, 0x800, 0x4, 0x9, 0x4, 0x0, 0x0, 0x100, 0x1}}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0, r4, 0x1000000}}, 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x0, 0x10001, 0x5, 0x8000000000000001, 0xffff, 0xb, 0xfffffffffffffffb}, &(0x7f0000000500)={0x800, 0x3, 0x36d, 0xffffffffffffffff, 0x7, 0x3, 0x0, 0x4}, &(0x7f0000000540)={0x2, 0x10000, 0x5, 0x65, 0x3, 0x0, 0x9}, &(0x7f0000000600)={r7, r8+60000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0x8]}, 0x8}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.318487233s ago: executing program 0 (id=115): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) arch_prctl$ARCH_GET_CPUID(0x1011) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8) r3 = io_uring_setup(0x7d5, &(0x7f0000000500)) sendto$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0xfffffff7) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x2, 0x440, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20040004, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 9.442476595s ago: executing program 4 (id=117): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xffffff80, 0x4000400, 0x9, 0x81, 0x9, "ff0700000000000000000000000000008000", 0x2, 0x7}) 9.131525194s ago: executing program 4 (id=120): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x65250b2a79c9e6de) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x500, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000200)={{0x8, 0x8, 0x8000, 0xab}, 'syz1\x00', 0x45}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 8.170651902s ago: executing program 4 (id=122): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x6}, @local=@item_4={0x3, 0x2, 0x9, "5af59405"}]}}, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2c003, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b00"/111], 0x120}}, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_io_uring_setup(0x410d, 0x0, &(0x7f0000000100), 0x0) 7.100348848s ago: executing program 0 (id=127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x8, 0x1, 0x4}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'ip6erspan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0x60400) fsopen(&(0x7f0000000240)='hfsplus\x00', 0x0) socket$inet(0x2, 0x1, 0x10000b0) 6.306629169s ago: executing program 0 (id=130): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xa49) r1 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x24, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(r0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x1, r4}) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000080), &(0x7f00000000c0), 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000140), 0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xad, 0x7f, 0x401, 0x9, 0x10}}) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000280), &(0x7f00000002c0), 0x0) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000340), &(0x7f0000000380), 0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) 6.24174425s ago: executing program 1 (id=131): close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30"], 0xd4}}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "72067615774f0e456eb86cc800"}, @window={0x3, 0x3, 0x5}]}}}}}}}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 6.063205139s ago: executing program 3 (id=132): syz_create_resource$binfmt(0x0) r0 = socket$pptp(0x18, 0x1, 0x2) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3, &(0x7f0000000000)=0x80) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000001, &(0x7f0000000a00)=[{&(0x7f0000000c80)=""/197, 0xc5}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/220, 0xdc}, {0x0}, {&(0x7f0000000800)=""/203, 0xcb}, {&(0x7f0000000900)=""/182, 0xb6}, {&(0x7f0000000140)=""/125, 0x7d}, {0x0}], 0x9, 0x12}) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'veth1_to_bond\x00', {0x2, 0x4e23, @multicast2}}) r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0x100000001, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r7], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) stat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r8}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 5.76235954s ago: executing program 1 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) creat(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {0x0, 0x0, 0x7}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x279378d4c6f234ac}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 4.849767883s ago: executing program 1 (id=137): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) close(r0) 4.755390968s ago: executing program 4 (id=138): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) setresgid(0x0, 0xee01, 0x0) fanotify_init(0xf00, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x29, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x1, 0x2, 0x1, 0x8, 0xb, 0x30, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ldst={0x3, 0x0, 0x2, 0x0, 0x0, 0x18, 0x8}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x7f, 0x5b, &(0x7f00000001c0)=""/91, 0x40f00, 0x11, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x4cb, 0x395f8a78}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3, r3, r3], &(0x7f00000003c0)=[{0x1, 0x7f, 0x1, 0x6}, {0x2, 0x2, 0xa, 0xb}], 0x10, 0xd}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 4.627606398s ago: executing program 1 (id=139): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) setresgid(0x0, 0xee01, 0x0) fanotify_init(0xf00, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x29, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x1, 0x2, 0x1, 0x8, 0xb, 0x30, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ldst={0x3, 0x0, 0x2, 0x0, 0x0, 0x18, 0x8}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x7f, 0x5b, &(0x7f00000001c0)=""/91, 0x40f00, 0x11, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x4cb, 0x395f8a78}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3, r3, r3], &(0x7f00000003c0)=[{0x1, 0x7f, 0x1, 0x6}, {0x2, 0x2, 0xa, 0xb}], 0x10, 0xd}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 4.133559243s ago: executing program 3 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0x9, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000340)="67bb3762a414267911d925db865c0e6d1f5bfafaff000000f9fbf747437fb245094b271809bffcf94c7a71efe76d751a6e9f3731a91e09593e47e8f458b7d21d0ec76e9b754da5457ff57751c4ab7a4219da71f18e8d02fc7ad3ea1033b17d1620", 0x61) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(0x0, 0x80000000, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffd, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x16, &(0x7f0000000940)=ANY=[], 0x0, 0x1000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xffffffff, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000002e000100fefff7ffffdb018006000600800a00"/36, @ANYRES32, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) 3.690214372s ago: executing program 0 (id=141): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x46, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0x5f, 0x0, &(0x7f0000000380)="e4604f4470d8d400eb00c15286dd78140819f441df57a0e790983336281dc8a69609a3f70500616cad1f57aba784ac885fa2c135f95a07595cb759bd77f1694ac250e5b33339f41adfa877cd9f6907c1f4222107ee8250c6bae99d568f0cfd", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 2.788227513s ago: executing program 3 (id=143): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.717391786s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x48}}], 0x400000000000172, 0x4000000) 2.714325719s ago: executing program 2 (id=145): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') pread64(r0, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r3, 0x40047452, &(0x7f0000000100)) 2.495796732s ago: executing program 2 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000090a010100000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="7b97b784ba981375e0272c8bc8aee543c15f5b1e6fede521f99c2dc8a11464a53b4d5873", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000880)="62ec6c", 0x3}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 1.887542348s ago: executing program 2 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.759725189s ago: executing program 3 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) creat(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {0x0, 0x0, 0x7}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x279378d4c6f234ac}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.728163795s ago: executing program 2 (id=149): fsopen(0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x1100000000000000, 0x0) 1.526050236s ago: executing program 4 (id=150): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001"], 0x1e4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) fsync(r1) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002"], 0x78}}, 0x0) r3 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f00000003c0)={0x800000009, 0xa, 0x14, 0x400, 0x2, 0x3}) setuid(0xee00) mount(0x0, 0x0, 0x0, 0x189, 0x0) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x21, 0x1) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 736.189352ms ago: executing program 2 (id=151): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00080000003f09001c0012800b00010062726964676500000c000280050007000600000008000a00", @ANYRES32, @ANYBLOB="08001f00"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20044094) 668.645055ms ago: executing program 3 (id=152): close(0xffffffffffffffff) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{&(0x7f0000000280)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x4, &(0x7f0000000900)=""/69, 0x45}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="517012229f230d2adece0aae329adffc056253b90a900a7d92bae4a8ccd5ed9f0544067a3f32748220c845c319e4fc705a818ef8cf7e1d120f80e98c41aa18c71670089c56573d171f6fa8c36f5997a76c87729b46762dc38984b4060f96bdacdbac1e75a873a91c11a710d8fe7fbaecf483729619821733a81d2c34bd5869359e930bfb5ef713d62e674b1adcacb40658506ce903c4c43d55e51f7621cbd7c4939d189aad9580b4537aaa072c3367e5ca8ab8c0a8941b0a977f4e610234366474b354f51b6f7b617797ad20edc52d1f21ec3a1e7068afc18f8da4b72178244316a8bdbf8d2359e5043e0d649e5c0531566260ec898ae767c6a3578d340c4fba6028be8ef7a3f68670524c59b7d048530f2f6365c5d0520d7d1cee7986b8798cf479f7429319f3b0dd4d6d6e6e", @ANYRES64=0x0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000008,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000800,allow_other,blksize=0x0000000000000400,default_permissions,\x00']) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000004c0)='./file0\x00', 0x105) lremovexattr(&(0x7f0000000040)='./file0\x00', 0x0) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) 614.838542ms ago: executing program 1 (id=153): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$vcsn(0x0, 0x6c90, 0x480c1) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c048010}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r3 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0x9362, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000000076620a08000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000101000085000000060000008520000004000000851000000500000018290000", @ANYRES32, @ANYBLOB="000000000100000018220000", @ANYRES32=r1, @ANYBLOB="00000000ffff950b010001000000c307ffe33ff7c302000000000000000000004f46923b60fb48401ebad7e866716bf1ebf1958606f215f5c49207b58bf34269105bf389155fe8d224d2ca0514a3880c5cef27753e6ba944ff150162aedc58c42013f03405c7e8870539319f33"], &(0x7f0000000300)='syzkaller\x00', 0x81, 0x62, &(0x7f0000000440)=""/98, 0x41100, 0x2, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000540)=[{0x2, 0x3, 0x7, 0x4}, {0x0, 0x5, 0x6, 0x9}, {0x0, 0x1, 0xb, 0x1}, {0x4, 0x3, 0x2, 0xb}, {0x3, 0x5, 0xc, 0x3}, {0x4, 0x2, 0x5, 0x8}, {0x3, 0x101, 0xf, 0x9}, {0x5, 0x1, 0x3, 0x6}, {0x0, 0x3, 0x4, 0x9}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0xc2d8d58c9f6cdd2b, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendto$inet(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0xffff, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) 411.791343ms ago: executing program 2 (id=154): r0 = socket$caif_stream(0x25, 0x1, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt(r0, 0x0, 0x7f, &(0x7f0000001240)="d28fd8eb", 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x2c00c2) 200.479957ms ago: executing program 1 (id=155): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 0s ago: executing program 0 (id=156): fanotify_init(0x8, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4000004, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 55.220763][ T30] audit: type=1400 audit(1767419598.700:62): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.244188][ T30] audit: type=1400 audit(1767419598.720:63): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.246676][ T5802] cgroup: Unknown subsys name 'net' [ 55.274132][ T30] audit: type=1400 audit(1767419598.750:64): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.392540][ T5802] cgroup: Unknown subsys name 'cpuset' [ 55.399977][ T5802] cgroup: Unknown subsys name 'rlimit' [ 55.591655][ T30] audit: type=1400 audit(1767419599.060:65): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.624112][ T30] audit: type=1400 audit(1767419599.070:66): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.652649][ T30] audit: type=1400 audit(1767419599.070:67): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.677095][ T30] audit: type=1400 audit(1767419599.070:68): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.697811][ T30] audit: type=1400 audit(1767419599.070:69): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.702837][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.723039][ T30] audit: type=1400 audit(1767419599.070:70): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.754507][ T30] audit: type=1400 audit(1767419599.210:71): avc: denied { relabelto } for pid=5804 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.680878][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.385131][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 60.385146][ T30] audit: type=1400 audit(1767419603.860:76): avc: denied { create } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.450012][ T30] audit: type=1400 audit(1767419603.860:77): avc: denied { read write } for pid=5812 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.473685][ T30] audit: type=1400 audit(1767419603.860:78): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.497351][ T30] audit: type=1400 audit(1767419603.900:79): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="socket:[4429]" dev="sockfs" ino=4429 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.504004][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.528828][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.537365][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.545356][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.553281][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.560985][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.561305][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.568263][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.581299][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.583492][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.590057][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.596296][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.602948][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.611593][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.623055][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.624400][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.632132][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.645996][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.646919][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.653527][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.666742][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.679288][ T30] audit: type=1400 audit(1767419604.120:80): avc: denied { read } for pid=5812 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.680528][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.708051][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.715657][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.726228][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.770291][ T30] audit: type=1400 audit(1767419604.140:81): avc: denied { open } for pid=5812 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.802137][ T30] audit: type=1400 audit(1767419604.140:82): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.057207][ T30] audit: type=1400 audit(1767419604.530:83): avc: denied { module_request } for pid=5820 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.155191][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 61.186464][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 61.200036][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 61.399835][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 61.409949][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.417752][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.427324][ T5827] bridge_slave_0: entered allmulticast mode [ 61.434006][ T5827] bridge_slave_0: entered promiscuous mode [ 61.441635][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.448707][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.455894][ T5820] bridge_slave_0: entered allmulticast mode [ 61.462518][ T5820] bridge_slave_0: entered promiscuous mode [ 61.486100][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.493181][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.500295][ T5827] bridge_slave_1: entered allmulticast mode [ 61.506845][ T5827] bridge_slave_1: entered promiscuous mode [ 61.513896][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.521076][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.528118][ T5820] bridge_slave_1: entered allmulticast mode [ 61.535032][ T5820] bridge_slave_1: entered promiscuous mode [ 61.553034][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.560137][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.567257][ T5812] bridge_slave_0: entered allmulticast mode [ 61.573967][ T5812] bridge_slave_0: entered promiscuous mode [ 61.587258][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.594348][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.601771][ T5812] bridge_slave_1: entered allmulticast mode [ 61.608379][ T5812] bridge_slave_1: entered promiscuous mode [ 61.621929][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 61.665375][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.687268][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.703844][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.717677][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.728301][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.756474][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.817360][ T5820] team0: Port device team_slave_0 added [ 61.837870][ T5827] team0: Port device team_slave_0 added [ 61.847873][ T5820] team0: Port device team_slave_1 added [ 61.853681][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.860875][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.868041][ T5815] bridge_slave_0: entered allmulticast mode [ 61.875037][ T5815] bridge_slave_0: entered promiscuous mode [ 61.883054][ T5812] team0: Port device team_slave_0 added [ 61.890144][ T5827] team0: Port device team_slave_1 added [ 61.917808][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.925037][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.932179][ T5815] bridge_slave_1: entered allmulticast mode [ 61.938778][ T5815] bridge_slave_1: entered promiscuous mode [ 61.946468][ T5812] team0: Port device team_slave_1 added [ 61.966527][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.973516][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.999545][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.032665][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.040451][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.047833][ T5817] bridge_slave_0: entered allmulticast mode [ 62.054903][ T5817] bridge_slave_0: entered promiscuous mode [ 62.062050][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.068988][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.095305][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.120918][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.127871][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.153894][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.165253][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.172544][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.179660][ T5817] bridge_slave_1: entered allmulticast mode [ 62.186693][ T5817] bridge_slave_1: entered promiscuous mode [ 62.203474][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.213087][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.220019][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.246750][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.258635][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.265795][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.291675][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.311519][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.330127][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.337092][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.362980][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.399497][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.416178][ T5815] team0: Port device team_slave_0 added [ 62.430352][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.447453][ T5815] team0: Port device team_slave_1 added [ 62.476689][ T5820] hsr_slave_0: entered promiscuous mode [ 62.483446][ T5820] hsr_slave_1: entered promiscuous mode [ 62.498582][ T5827] hsr_slave_0: entered promiscuous mode [ 62.504735][ T5827] hsr_slave_1: entered promiscuous mode [ 62.510739][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 62.516490][ T5827] Cannot create hsr debugfs directory [ 62.543694][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.550747][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.577328][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.592032][ T5812] hsr_slave_0: entered promiscuous mode [ 62.598012][ T5812] hsr_slave_1: entered promiscuous mode [ 62.604052][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 62.609763][ T5812] Cannot create hsr debugfs directory [ 62.617413][ T5817] team0: Port device team_slave_0 added [ 62.623896][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.630899][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.656860][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.681509][ T5817] team0: Port device team_slave_1 added [ 62.721023][ T5831] Bluetooth: hci3: command tx timeout [ 62.721227][ T5818] Bluetooth: hci0: command tx timeout [ 62.762195][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.769123][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.795934][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.800420][ T5818] Bluetooth: hci2: command tx timeout [ 62.806626][ T5828] Bluetooth: hci4: command tx timeout [ 62.817505][ T5831] Bluetooth: hci1: command tx timeout [ 62.843335][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.850496][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.876518][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.922226][ T5815] hsr_slave_0: entered promiscuous mode [ 62.928230][ T5815] hsr_slave_1: entered promiscuous mode [ 62.934416][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 62.940124][ T5815] Cannot create hsr debugfs directory [ 63.023040][ T5817] hsr_slave_0: entered promiscuous mode [ 63.029034][ T5817] hsr_slave_1: entered promiscuous mode [ 63.035160][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 63.041607][ T5817] Cannot create hsr debugfs directory [ 63.229551][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.244090][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.261756][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.281336][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.332312][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.343677][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.358833][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.372519][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.416726][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.438483][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.447610][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.457263][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.534912][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.545569][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.558719][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.572494][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.583465][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.642403][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.673656][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.686836][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.693955][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.706948][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.719139][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.726216][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.736651][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.747313][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.765650][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.811502][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.835161][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.853830][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.860900][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.895196][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.902392][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.918913][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.927063][ T30] audit: type=1400 audit(1767419607.400:84): avc: denied { sys_module } for pid=5827 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.939600][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.987011][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.994151][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.027689][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.034844][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.052846][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.086079][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.093159][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.111318][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.118371][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.154467][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.189481][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.237008][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.261918][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.268981][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.310058][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.317169][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.410179][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.474117][ T5827] veth0_vlan: entered promiscuous mode [ 64.531855][ T5827] veth1_vlan: entered promiscuous mode [ 64.545822][ T5820] veth0_vlan: entered promiscuous mode [ 64.600887][ T5820] veth1_vlan: entered promiscuous mode [ 64.621745][ T5827] veth0_macvtap: entered promiscuous mode [ 64.645259][ T5827] veth1_macvtap: entered promiscuous mode [ 64.674051][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.707040][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.731966][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.747181][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.769803][ T5820] veth0_macvtap: entered promiscuous mode [ 64.789845][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.798751][ T3811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.808578][ T5831] Bluetooth: hci0: command tx timeout [ 64.808586][ T5828] Bluetooth: hci3: command tx timeout [ 64.815630][ T3811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.830114][ T5820] veth1_macvtap: entered promiscuous mode [ 64.845451][ T3811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.862166][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.882309][ T5828] Bluetooth: hci1: command tx timeout [ 64.882326][ T5831] Bluetooth: hci4: command tx timeout [ 64.887690][ T5818] Bluetooth: hci2: command tx timeout [ 64.923875][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.959604][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.979456][ T5812] veth0_vlan: entered promiscuous mode [ 64.997147][ T145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.007879][ T145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.017153][ T145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.039362][ T145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.052337][ T5812] veth1_vlan: entered promiscuous mode [ 65.089265][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.102866][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.131156][ T5815] veth0_vlan: entered promiscuous mode [ 65.175025][ T5815] veth1_vlan: entered promiscuous mode [ 65.181664][ T5817] veth0_vlan: entered promiscuous mode [ 65.188498][ T3811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.204023][ T3811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.209826][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.219687][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.242707][ T30] audit: type=1400 audit(1767419608.720:85): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.abaCwS/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.278008][ T5812] veth0_macvtap: entered promiscuous mode [ 65.293858][ T5812] veth1_macvtap: entered promiscuous mode [ 65.308921][ T5817] veth1_vlan: entered promiscuous mode [ 65.319169][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.331554][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.342511][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.356522][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.376506][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.393287][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 65.393299][ T30] audit: type=1400 audit(1767419608.860:97): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.448102][ T5815] veth0_macvtap: entered promiscuous mode [ 65.458066][ T5817] veth0_macvtap: entered promiscuous mode [ 65.484496][ T30] audit: type=1400 audit(1767419608.910:98): avc: denied { open } for pid=5827 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.494878][ T5815] veth1_macvtap: entered promiscuous mode [ 65.515730][ T30] audit: type=1400 audit(1767419608.910:99): avc: denied { ioctl } for pid=5827 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.543405][ T3915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.550587][ T30] audit: type=1400 audit(1767419608.960:100): avc: denied { read write } for pid=5935 comm="syz.2.3" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.587117][ T5817] veth1_macvtap: entered promiscuous mode [ 65.597310][ T30] audit: type=1400 audit(1767419608.960:101): avc: denied { open } for pid=5935 comm="syz.2.3" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.602434][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.623268][ T30] audit: type=1400 audit(1767419609.080:102): avc: denied { create } for pid=5935 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.652906][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.667708][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.680545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.117844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.220235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 66.770439][ T30] audit: type=1400 audit(1767419609.310:103): avc: denied { read } for pid=5937 comm="syz.3.4" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.817011][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.843335][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.877180][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.885276][ T30] audit: type=1400 audit(1767419609.310:104): avc: denied { open } for pid=5937 comm="syz.3.4" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.890859][ T5818] Bluetooth: hci3: command tx timeout [ 66.910593][ T5938] ucma_write: process 3 (syz.2.3) changed security contexts after opening file descriptor, this is not allowed. [ 66.913970][ T5818] Bluetooth: hci0: command tx timeout [ 66.951975][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.960462][ T5818] Bluetooth: hci2: command tx timeout [ 66.960652][ T5831] Bluetooth: hci1: command tx timeout [ 66.971298][ T5828] Bluetooth: hci4: command tx timeout [ 66.977017][ T3811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.977061][ T4015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.986430][ T3811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.006054][ T4015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013528][ T30] audit: type=1400 audit(1767419609.400:105): avc: denied { read } for pid=5937 comm="syz.3.4" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.037422][ T30] audit: type=1400 audit(1767419609.400:106): avc: denied { open } for pid=5937 comm="syz.3.4" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.074074][ T3811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.094509][ T3811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.125983][ T3968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.164908][ T3968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.191500][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.200108][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.231514][ T3968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.258717][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.275684][ T3968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.333471][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 67.377715][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.389300][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 67.398068][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.498725][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.523035][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.611692][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.620284][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.753811][ T974] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.795068][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.824306][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.130332][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 68.151123][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.183388][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.206739][ T974] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 68.230115][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.265831][ T974] usb 2-1: config 0 descriptor?? [ 68.826388][ T5953] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.826447][ T5956] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 68.960789][ T5828] Bluetooth: hci3: command tx timeout [ 68.968750][ T5831] Bluetooth: hci0: command tx timeout [ 69.040683][ T5828] Bluetooth: hci1: command tx timeout [ 69.043206][ T5818] Bluetooth: hci4: command tx timeout [ 69.046169][ T5831] Bluetooth: hci2: command tx timeout [ 69.063605][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.077071][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.086521][ T974] usbhid 2-1:0.0: can't add hid device: -32 [ 69.243445][ T974] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 69.251263][ T5977] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 69.264775][ T5977] syz_tun: entered promiscuous mode [ 69.274985][ T5977] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 69.297348][ T5979] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 69.840765][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.875409][ T974] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.975185][ T5981] input: syz0 as /devices/virtual/input/input5 [ 70.040351][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 70.052696][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.075313][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.087486][ T5899] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 70.096733][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.113983][ T974] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.123786][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.136447][ T5899] usb 5-1: config 0 descriptor?? [ 70.150257][ T974] usb 3-1: Product: syz [ 70.174166][ T974] usb 3-1: Manufacturer: syz [ 70.178783][ T974] usb 3-1: SerialNumber: syz [ 70.316649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.370350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.521463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.623841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.736123][ T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 70.748315][ T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 70.761681][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 70.761694][ T30] audit: type=1400 audit(1767419614.240:161): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.902744][ T5993] input: syz0 as /devices/virtual/input/input6 [ 70.958605][ T30] audit: type=1400 audit(1767419614.430:162): avc: denied { setopt } for pid=6000 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.984254][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.991214][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.062564][ T30] audit: type=1400 audit(1767419614.540:163): avc: denied { create } for pid=5983 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.094669][ T30] audit: type=1400 audit(1767419614.540:164): avc: denied { bind } for pid=5983 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.099097][ T5887] usb 2-1: USB disconnect, device number 2 [ 71.241084][ T30] audit: type=1400 audit(1767419614.720:165): avc: denied { create } for pid=6007 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.290531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.302738][ T30] audit: type=1400 audit(1767419614.740:166): avc: denied { getopt } for pid=6007 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.322430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.340514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 71.340582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 71.438108][ T30] audit: type=1400 audit(1767419614.750:167): avc: denied { node_bind } for pid=6007 comm="syz.1.20" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.496217][ T30] audit: type=1400 audit(1767419614.780:168): avc: denied { create } for pid=6009 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.517183][ T30] audit: type=1400 audit(1767419614.780:169): avc: denied { write } for pid=6009 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.610640][ T30] audit: type=1400 audit(1767419614.870:170): avc: denied { create } for pid=6007 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.642069][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.968525][ T5887] usb 2-1: config 2 interface 0 has no altsetting 0 [ 71.983994][ T5887] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 71.993462][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.003717][ T5887] usb 2-1: Product: syz [ 72.007917][ T5887] usb 2-1: Manufacturer: syz [ 72.012570][ T5887] usb 2-1: SerialNumber: syz [ 72.433568][ T5948] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.448055][ T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 72.462031][ T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 72.474863][ T974] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 72.488195][ T974] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 72.501035][ T974] usb 3-1: USB disconnect, device number 2 [ 72.582255][ T48] usb 5-1: USB disconnect, device number 2 [ 72.622709][ T5948] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.639582][ T5948] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.660399][ T5948] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.749688][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.788369][ T6017] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 72.817119][ T5948] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.821107][ T5887] usb 2-1: USB disconnect, device number 3 [ 73.497683][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.630463][ T5887] usb 1-1: device descriptor read/64, error -71 [ 73.857728][ T6035] ntfs3(nullb0): Primary boot signature is not NTFS. [ 73.865887][ T6035] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 74.172224][ T5887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.310800][ T5887] usb 1-1: device descriptor read/64, error -71 [ 75.306575][ T5887] usb usb1-port1: attempt power cycle [ 75.352342][ T5948] usb 4-1: USB disconnect, device number 2 [ 75.970351][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 75.970367][ T30] audit: type=1400 audit(1767419619.090:197): avc: denied { connect } for pid=6051 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.445924][ T6057] loop7: detected capacity change from 0 to 7 [ 76.454107][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.463749][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.476363][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.485942][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.490388][ T5887] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.494535][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.510725][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.518960][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.528544][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.537432][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.547009][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.645479][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.655110][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.663403][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.672969][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.680874][ T6057] ldm_validate_partition_table(): Disk read failed. [ 76.692886][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.702463][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.713048][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.722627][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.738916][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 76.748493][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 76.757454][ T6057] Dev loop7: unable to read RDB block 0 [ 76.768298][ T6057] loop7: unable to read partition table [ 76.774070][ T6057] loop7: partition table beyond EOD, truncated [ 76.780227][ T6057] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 76.802939][ T6057] fuse: Bad value for 'fd' [ 76.813827][ T30] audit: type=1400 audit(1767419620.280:198): avc: denied { mounton } for pid=6023 comm="syz.0.24" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.890895][ T5887] usb 1-1: device descriptor read/8, error -71 [ 76.932702][ T30] audit: type=1400 audit(1767419620.340:199): avc: denied { read } for pid=6061 comm="syz.2.35" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.008016][ T30] audit: type=1400 audit(1767419620.480:200): avc: denied { write } for pid=6064 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.053328][ T974] IPVS: starting estimator thread 0... [ 78.080752][ T5887] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.101947][ T6067] IPVS: using max 78 ests per chain, 187200 per kthread [ 78.185850][ T5887] usb 1-1: device descriptor read/8, error -71 [ 78.327393][ T5887] usb usb1-port1: unable to enumerate USB device [ 78.445341][ T6076] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 78.451981][ T6076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.460096][ T6076] vhci_hcd vhci_hcd.0: Device attached [ 78.562375][ T30] audit: type=1400 audit(1767419621.970:201): avc: denied { write } for pid=6074 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.810393][ T5933] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 78.844992][ T30] audit: type=1400 audit(1767419621.970:202): avc: denied { nlmsg_write } for pid=6074 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.276934][ T6077] vhci_hcd: connection reset by peer [ 79.394990][ T6050] vhci_hcd vhci_hcd.0: stop threads [ 79.415446][ T30] audit: type=1400 audit(1767419622.840:203): avc: denied { setopt } for pid=6084 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.493763][ T6050] vhci_hcd vhci_hcd.0: release socket [ 79.571315][ T6050] vhci_hcd vhci_hcd.0: disconnect device [ 79.752457][ T30] audit: type=1400 audit(1767419622.860:204): avc: denied { accept } for pid=6084 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.846385][ T6086] macvlan2: entered promiscuous mode [ 79.851740][ T6086] macvlan2: entered allmulticast mode [ 79.939235][ T30] audit: type=1400 audit(1767419622.950:205): avc: denied { write } for pid=6084 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.979684][ T30] audit: type=1400 audit(1767419623.080:206): avc: denied { read } for pid=6084 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.221695][ T6095] SELinux: syz.1.33 (6095) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.308549][ T974] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.317602][ T6098] Zero length message leads to an empty skb [ 80.480286][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 80.486692][ T974] usb 1-1: config index 0 descriptor too short (expected 255, got 27) [ 80.495216][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.570287][ T5928] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.680249][ T974] usb 1-1: config 0 has no interfaces? [ 80.692263][ T974] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 80.709413][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.724464][ T974] usb 1-1: Product: syz [ 80.730258][ T974] usb 1-1: Manufacturer: syz [ 80.743382][ T974] usb 1-1: SerialNumber: syz [ 80.755482][ T974] usb 1-1: config 0 descriptor?? [ 80.800286][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 80.807231][ T5928] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 80.820178][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.835754][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.845996][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.857406][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.873553][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.918399][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.989511][ T6112] input: syz0 as /devices/virtual/input/input7 [ 81.084284][ T5948] usb 1-1: USB disconnect, device number 6 [ 81.177423][ T5928] usb 5-1: GET_CAPABILITIES returned 0 [ 81.185361][ T5928] usbtmc 5-1:16.0: can't read capabilities [ 81.217631][ T10] cfg80211: failed to load regulatory.db [ 81.349235][ T30] audit: type=1400 audit(1767419624.800:207): avc: denied { unlink } for pid=6120 comm="syz.3.51" name="#1" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.377293][ T30] audit: type=1400 audit(1767419624.800:208): avc: denied { mount } for pid=6120 comm="syz.3.51" name="/" dev="overlay" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.468787][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 81.914658][ T30] audit: type=1400 audit(1767419625.390:209): avc: denied { write } for pid=6096 comm="syz.4.44" name="usbtmc0" dev="devtmpfs" ino=2824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.572891][ T30] audit: type=1400 audit(1767419625.490:210): avc: denied { getopt } for pid=6122 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.644760][ T30] audit: type=1400 audit(1767419625.490:211): avc: denied { name_connect } for pid=6122 comm="syz.2.52" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.766535][ T30] audit: type=1400 audit(1767419625.490:212): avc: denied { setopt } for pid=6122 comm="syz.2.52" lport=55538 faddr=::ffff:172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.774670][ T10] usb 5-1: USB disconnect, device number 3 [ 82.790388][ T6099] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 82.811453][ T30] audit: type=1400 audit(1767419626.280:213): avc: denied { execute } for pid=6120 comm="syz.3.51" path="/14/bus/file1" dev="overlay" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.899112][ T6137] process 'syz.2.54' launched './file0' with NULL argv: empty string added [ 83.513093][ T30] audit: type=1400 audit(1767419626.380:214): avc: denied { execute_no_trans } for pid=6132 comm="syz.2.54" path="/13/file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.562323][ T30] audit: type=1400 audit(1767419626.720:215): avc: denied { create } for pid=6096 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.621834][ T30] audit: type=1400 audit(1767419626.720:216): avc: denied { setopt } for pid=6096 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.070427][ T5933] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 85.387824][ T6162] fuse: Bad value for 'fd' [ 86.057868][ T6170] netlink: 92 bytes leftover after parsing attributes in process `syz.1.64'. [ 86.569630][ T6176] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 86.577207][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 86.639100][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.647691][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 86.647704][ T30] audit: type=1400 audit(1767419630.110:227): avc: denied { name_bind } for pid=6164 comm="syz.3.61" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 86.647805][ T5933] IPVS: starting estimator thread 0... [ 86.780275][ T6181] IPVS: using max 46 ests per chain, 110400 per kthread [ 86.840328][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 86.855242][ T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 86.864578][ T10] usb 5-1: config 1 has no interface number 0 [ 86.876926][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 86.897146][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 86.920426][ T10] usb 5-1: config 1 interface 105 has no altsetting 0 [ 86.942796][ T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 86.956718][ T30] audit: type=1400 audit(1767419630.340:228): avc: denied { create } for pid=6171 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.979235][ T30] audit: type=1400 audit(1767419630.410:229): avc: denied { setopt } for pid=6171 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.991583][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.010368][ T5948] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.030635][ T10] usb 5-1: Product: syz [ 87.042210][ T10] usb 5-1: Manufacturer: syz [ 87.050730][ T30] audit: type=1400 audit(1767419630.530:230): avc: denied { create } for pid=6185 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.051167][ T10] usb 5-1: SerialNumber: syz [ 87.077229][ T30] audit: type=1400 audit(1767419630.550:231): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.101604][ T6184] ntfs3(nullb0): Primary boot signature is not NTFS. [ 87.108356][ T6184] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 87.149425][ T6167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.158981][ T6167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.165098][ T6184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.65'. [ 87.210303][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 87.222534][ T5948] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.230745][ T5948] usb 3-1: config 0 has no interface number 0 [ 87.236821][ T5948] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.253139][ T5948] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 87.265752][ T5948] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.277791][ T5948] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.292173][ T5948] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.302129][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.336049][ T5948] usb 3-1: config 0 descriptor?? [ 87.346593][ T5948] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 87.360555][ T5933] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.470293][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.533519][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.543710][ T5933] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.574673][ T5933] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.584915][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.592124][ T30] audit: type=1400 audit(1767419631.060:232): avc: denied { create } for pid=6166 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.630474][ T6167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.638361][ T6167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.648289][ T30] audit: type=1400 audit(1767419631.100:233): avc: denied { write } for pid=6166 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.672987][ T5928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.685281][ T5928] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.700075][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.709309][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.837518][ T5933] usb 4-1: usb_control_msg returned -32 [ 87.859350][ T5933] usbtmc 4-1:16.0: can't read capabilities [ 87.882670][ T6190] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 87.901027][ T5880] usb 3-1: USB disconnect, device number 3 [ 87.901139][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 87.908394][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 88.027830][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.028964][ T10] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 88.150264][ T5880] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 88.156940][ T6183] ldusb: No device or device unplugged -19 [ 88.428075][ T10] usb 5-1: USB disconnect, device number 4 [ 88.489517][ T6195] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 88.537015][ T30] audit: type=1400 audit(1767419632.010:234): avc: denied { ioctl } for pid=6187 comm="syz.3.68" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.858054][ T30] audit: type=1400 audit(1767419632.330:235): avc: denied { create } for pid=6201 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.249309][ T30] audit: type=1400 audit(1767419632.430:236): avc: denied { getopt } for pid=6201 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.635104][ T6222] capability: warning: `syz.4.73' uses 32-bit capabilities (legacy support in use) [ 89.759275][ T6223] Invalid ELF header magic: != ELF [ 90.166814][ T5928] usb 2-1: USB disconnect, device number 4 [ 90.384589][ T6226] ======================================================= [ 90.384589][ T6226] WARNING: The mand mount option has been deprecated and [ 90.384589][ T6226] and is ignored by this kernel. Remove the mand [ 90.384589][ T6226] option from the mount to silence this warning. [ 90.384589][ T6226] ======================================================= [ 91.285555][ T10] usb 4-1: USB disconnect, device number 3 [ 92.357628][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 92.357643][ T30] audit: type=1400 audit(1767419635.830:241): avc: denied { read write } for pid=6244 comm="syz.0.81" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.420062][ T30] audit: type=1400 audit(1767419635.860:242): avc: denied { open } for pid=6244 comm="syz.0.81" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.558770][ T6247] ntfs3(nullb0): Primary boot signature is not NTFS. [ 92.565839][ T6247] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 92.573799][ T5928] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.723613][ T6247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.78'. [ 92.734065][ T6250] ntfs3(nullb0): Primary boot signature is not NTFS. [ 92.740826][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 92.794911][ T6250] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 92.825613][ T5928] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 92.870829][ T5928] usb 3-1: config 0 has no interface number 0 [ 92.927232][ T5928] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 92.937067][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.988572][ T5928] usb 3-1: Product: syz [ 92.995405][ T5928] usb 3-1: Manufacturer: syz [ 93.001962][ T6250] netlink: 48 bytes leftover after parsing attributes in process `syz.3.79'. [ 93.036312][ T5928] usb 3-1: SerialNumber: syz [ 93.381652][ T5928] usb 3-1: config 0 descriptor?? [ 93.393548][ T5928] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 93.491991][ T5933] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.737722][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.760707][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.769828][ T30] audit: type=1400 audit(1767419637.150:243): avc: denied { create } for pid=6241 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.950756][ T5928] gspca_sn9c2028: read1 error -110 [ 93.952154][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.956090][ T30] audit: type=1400 audit(1767419637.150:244): avc: denied { connect } for pid=6241 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.991141][ T5928] gspca_sn9c2028: read1 error -32 [ 94.003505][ T5933] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 94.041928][ T5928] gspca_sn9c2028: read1 error -32 [ 94.055064][ T5928] sn9c2028 3-1:0.119: probe with driver sn9c2028 failed with error -32 [ 94.055083][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.091789][ T30] audit: type=1400 audit(1767419637.150:245): avc: denied { write } for pid=6241 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.120412][ T30] audit: type=1400 audit(1767419637.440:246): avc: denied { read write } for pid=6263 comm="syz.0.85" name="mouse0" dev="devtmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 94.143994][ T30] audit: type=1400 audit(1767419637.440:247): avc: denied { open } for pid=6263 comm="syz.0.85" path="/dev/input/mouse0" dev="devtmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 94.167986][ T30] audit: type=1400 audit(1767419637.470:248): avc: denied { bind } for pid=6263 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.190489][ T30] audit: type=1400 audit(1767419637.480:249): avc: denied { connect } for pid=6263 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.210526][ T30] audit: type=1400 audit(1767419637.480:250): avc: denied { shutdown } for pid=6263 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.275838][ T5933] usb 5-1: config 0 descriptor?? [ 94.283760][ T10] usb 3-1: USB disconnect, device number 4 [ 94.708962][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.740325][ T5933] usbhid 5-1:0.0: can't add hid device: -32 [ 94.749848][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 94.775904][ T5933] usb 5-1: USB disconnect, device number 5 [ 95.056633][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'. [ 95.650284][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.684350][ T5948] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.705009][ T5948] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.800541][ T5929] usb 4-1: device descriptor read/64, error -71 [ 96.080287][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.224993][ T5929] usb 4-1: device descriptor read/64, error -71 [ 96.351614][ T5929] usb usb4-port1: attempt power cycle [ 96.369374][ T6293] ubi31: attaching mtd0 [ 96.374817][ T6293] ubi31: scanning is finished [ 96.379476][ T6293] ubi31: empty MTD device detected [ 96.449434][ T6293] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 96.457063][ T6293] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 96.464363][ T6293] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 96.471371][ T6293] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 96.478809][ T6293] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 96.485658][ T6293] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 96.493742][ T6293] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 979781900 [ 96.503727][ T6293] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 96.514709][ T6295] ubi31: background thread "ubi_bgt31d" started, PID 6295 [ 96.582431][ T5948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.760163][ T6302] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.030541][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.039035][ T5929] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.070241][ T5948] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.070729][ T5929] usb 4-1: device descriptor read/8, error -71 [ 97.110247][ T5948] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 97.119276][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.127527][ T5899] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.158100][ T5948] usb 5-1: config 0 descriptor?? [ 97.310285][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 97.316340][ T5899] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 97.321142][ T5929] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.333560][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.341756][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.348779][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.357980][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.366883][ T5929] usb 4-1: device descriptor read/8, error -71 [ 97.374004][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.383398][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.390272][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.398351][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.405410][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.413518][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.420618][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.428837][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.435664][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.443887][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.450831][ T5899] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 97.459707][ T5899] usb 2-1: config 0 has no interface number 0 [ 97.468629][ T5899] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df [ 97.478330][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.486360][ T5899] usb 2-1: Product: syz [ 97.490736][ T5899] usb 2-1: Manufacturer: syz [ 97.491968][ T5929] usb usb4-port1: unable to enumerate USB device [ 97.495337][ T5899] usb 2-1: SerialNumber: syz [ 97.497455][ T5899] usb 2-1: config 0 descriptor?? [ 97.520325][ T5930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.607513][ T5948] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 97.617052][ T5948] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 97.624780][ T5948] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 97.632674][ T5948] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 97.639614][ T5948] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 97.647772][ T5948] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 97.654894][ T5948] ortek 0003:1223:3F07.0002: item fetching failed at offset 6/69 [ 97.671537][ T5948] ortek 0003:1223:3F07.0002: probe with driver ortek failed with error -22 [ 97.741054][ T5930] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.749898][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.777678][ T5930] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.787805][ T5930] usb 3-1: config 1 has no interface number 1 [ 98.062321][ T6312] netlink: 'syz.1.95': attribute type 10 has an invalid length. [ 98.080861][ T5930] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.102682][ T5948] usb 5-1: USB disconnect, device number 6 [ 98.136055][ T5930] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.171467][ T6312] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.192278][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.215787][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.224072][ T5930] usb 3-1: Product: syz [ 98.228294][ T5930] usb 3-1: Manufacturer: syz [ 98.233307][ T5930] usb 3-1: SerialNumber: syz [ 98.275691][ T6298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.370634][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 98.370666][ T30] audit: type=1400 audit(1767419641.820:264): avc: denied { bind } for pid=6317 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.684284][ T6320] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 98.758771][ T6326] Attempt to restore checkpoint with obsolete wellknown handles [ 98.763269][ T6320] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 98.846192][ T5899] usb 2-1: USB disconnect, device number 5 [ 99.311790][ T5930] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 99.325847][ T5930] usb 3-1: MIDIStreaming interface descriptor not found [ 99.372980][ T5930] usb 3-1: USB disconnect, device number 5 [ 99.748456][ T6316] ntfs3(nullb0): Primary boot signature is not NTFS. [ 99.755380][ T6316] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 99.785997][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.857756][ T6316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.101'. [ 99.870156][ T30] audit: type=1400 audit(1767419643.330:265): avc: denied { getopt } for pid=6337 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.309886][ T30] audit: type=1400 audit(1767419643.780:266): avc: denied { create } for pid=6342 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.443618][ T30] audit: type=1400 audit(1767419643.920:267): avc: denied { create } for pid=6344 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.808952][ T30] audit: type=1400 audit(1767419645.280:268): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.840960][ T6355] ntfs3(nullb0): Primary boot signature is not NTFS. [ 102.087142][ T6355] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 102.187037][ T30] audit: type=1400 audit(1767419645.650:269): avc: denied { name_bind } for pid=6365 comm="syz.1.111" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 102.355897][ T6367] netlink: 'syz.1.111': attribute type 6 has an invalid length. [ 102.802440][ T30] audit: type=1400 audit(1767419646.240:270): avc: denied { append } for pid=6371 comm="syz.4.113" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 103.582112][ T30] audit: type=1400 audit(1767419647.040:271): avc: denied { ioctl } for pid=6378 comm="syz.0.115" path="socket:[10553]" dev="sockfs" ino=10553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.680454][ T6379] openvswitch: netlink: IPv4 tunnel dst address is zero [ 103.732140][ T30] audit: type=1400 audit(1767419647.040:272): avc: denied { connect } for pid=6378 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.817904][ T6360] ntfs3(nullb0): Primary boot signature is not NTFS. [ 103.825485][ T6360] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 104.051358][ T30] audit: type=1400 audit(1767419647.270:273): avc: denied { create } for pid=6378 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.080791][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 104.499682][ T30] audit: type=1400 audit(1767419647.280:274): avc: denied { bind } for pid=6378 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.562093][ T10] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 104.583951][ T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 104.644440][ T10] usb 1-1: config 8 has no interface number 0 [ 104.673808][ T10] usb 1-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 104.715016][ T10] usb 1-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.850886][ T10] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 104.949376][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 105.568393][ T30] audit: type=1400 audit(1767419648.840:275): avc: denied { getopt } for pid=6392 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.616498][ T10] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 105.711442][ T10] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 105.756237][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.815405][ T10] usb 1-1: NFC: intf ffff8880592ff000 id ffffffff8f325480 [ 105.909817][ T30] audit: type=1400 audit(1767419649.380:276): avc: denied { read write } for pid=6405 comm="syz.3.124" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.003537][ T30] audit: type=1400 audit(1767419649.380:277): avc: denied { open } for pid=6405 comm="syz.3.124" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.071420][ T30] audit: type=1400 audit(1767419649.380:278): avc: denied { ioctl } for pid=6405 comm="syz.3.124" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.110007][ T5933] usb 1-1: USB disconnect, device number 7 [ 106.130284][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.144362][ T30] audit: type=1400 audit(1767419649.530:279): avc: denied { read } for pid=6408 comm="syz.2.125" path="socket:[11444]" dev="sockfs" ino=11444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.169043][ T30] audit: type=1400 audit(1767419649.570:280): avc: denied { connect } for pid=6378 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.303629][ T6407] : renamed from wg2 (while UP) [ 106.692113][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 106.698401][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.709303][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.719077][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 106.728394][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.737867][ T10] usb 5-1: config 0 descriptor?? [ 106.960649][ T6420] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 106.968779][ T6420] netlink: 'syz.0.127': attribute type 2 has an invalid length. [ 107.328976][ T10] kone 0003:1E7D:2CED.0003: item fetching failed at offset 1/5 [ 107.370730][ T10] kone 0003:1E7D:2CED.0003: parse failed [ 107.376436][ T10] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -22 [ 107.490798][ T6424] syz.1.129 (6424): attempted to duplicate a private mapping with mremap. This is not supported. [ 107.659087][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.699821][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.880663][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.018353][ T48] usb 5-1: USB disconnect, device number 7 [ 108.240553][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 108.247286][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 108.255817][ T10] usb 1-1: config 0 has no interface number 0 [ 108.277914][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.706146][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 108.720165][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.748584][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.773452][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 108.859049][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.031106][ T10] usb 1-1: config 0 descriptor?? [ 109.063796][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 109.241954][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 109.241970][ T30] audit: type=1400 audit(1767419652.720:285): avc: denied { connect } for pid=6447 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.282964][ T10] usb 1-1: USB disconnect, device number 8 [ 109.306030][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 109.480403][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.499130][ T30] audit: type=1400 audit(1767419652.970:286): avc: denied { execute } for pid=6427 comm="syz.0.130" name="file1" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.650334][ T5928] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.684467][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.714106][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.734986][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.755342][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.773815][ T6457] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 109.811534][ T5928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.811892][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.823051][ T5928] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.864906][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.894648][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.933908][ T6460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.949420][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.169631][ T30] audit: type=1400 audit(1767419653.640:287): avc: denied { setopt } for pid=6451 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.010337][ T89] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.114298][ T30] audit: type=1400 audit(1767419654.590:288): avc: denied { mount } for pid=6468 comm="syz.2.142" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 111.192070][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 111.200051][ T89] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.215877][ T89] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.232360][ T89] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.340483][ T89] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.365330][ T89] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.813965][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.853275][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.146'. [ 112.031654][ T89] usb 1-1: GET_CAPABILITIES returned 0 [ 112.038018][ T89] usbtmc 1-1:16.0: can't read capabilities [ 112.308838][ T89] usb 5-1: USB disconnect, device number 8 [ 112.309939][ T30] audit: type=1400 audit(1767419655.780:289): avc: denied { bind } for pid=6466 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.648035][ T6493] netlink: 60 bytes leftover after parsing attributes in process `syz.4.150'. [ 112.730506][ T30] audit: type=1400 audit(1767419655.810:290): avc: denied { setopt } for pid=6466 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.086861][ T30] audit: type=1400 audit(1767419656.120:291): avc: denied { ioctl } for pid=6492 comm="syz.4.150" path="socket:[10709]" dev="sockfs" ino=10709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.217063][ T10] usb 1-1: USB disconnect, device number 9 [ 113.249776][ T5880] usb 2-1: USB disconnect, device number 6 [ 113.287416][ T30] audit: type=1400 audit(1767419656.760:292): avc: denied { append } for pid=6496 comm="syz.3.152" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.332672][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.151'. [ 113.685006][ T30] audit: type=1400 audit(1767419657.160:293): avc: denied { create } for pid=6505 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.800358][ T89] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.856394][ T30] audit: type=1400 audit(1767419657.330:294): avc: denied { watch watch_reads } for pid=6496 comm="syz.3.152" path="/33/file0" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 218.880170][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 218.887158][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6503/1:b..l [ 218.895367][ C1] rcu: (detected by 1, t=10502 jiffies, g=11733, q=814 ncpus=2) [ 218.903070][ C1] task:syz.3.152 state:R running task stack:28600 pid:6503 tgid:6496 ppid:5820 task_flags:0x400140 flags:0x00080000 [ 218.917017][ C1] Call Trace: [ 218.920290][ C1] [ 218.923212][ C1] ? __schedule+0x10b9/0x6150 [ 218.927884][ C1] __schedule+0x1139/0x6150 [ 218.932380][ C1] ? __lock_acquire+0x436/0x2890 [ 218.937325][ C1] ? __pfx___schedule+0x10/0x10 [ 218.942167][ C1] ? mark_held_locks+0x49/0x80 [ 218.946926][ C1] preempt_schedule_irq+0x51/0x90 [ 218.951943][ C1] irqentry_exit+0x1d8/0x8c0 [ 218.956528][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.962499][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2b/0x40 [ 218.968732][ C1] Code: 0f 1e fa 8b 05 56 b2 10 05 85 c0 74 20 8b 05 00 e2 10 05 85 c0 74 16 65 48 8b 05 98 a8 3a 08 8b 80 2c 0b 00 00 85 c0 0f 94 c0 <0f> b6 c0 e9 0d 2c 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 [ 218.988325][ C1] RSP: 0018:ffffc900034b7560 EFLAGS: 00000246 [ 218.994381][ C1] RAX: 0000000000000001 RBX: ffffc900034b7f18 RCX: ffffc900034b8001 [ 219.002353][ C1] RDX: ffffc900034b7f20 RSI: ffffc900034b7ee8 RDI: ffffc900034b75e8 [ 219.010321][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 000000003e36b0f9 [ 219.018288][ C1] R10: 0000000000000002 R11: 000000000003a176 R12: ffffc900034b7628 [ 219.026264][ C1] R13: ffffc900034b75d8 R14: ffffc900034b7f18 R15: ffffc900034b760c [ 219.034252][ C1] unwind_next_frame+0x3de/0x20b0 [ 219.039287][ C1] ? __do_sys_io_uring_enter+0xd6b/0x1630 [ 219.045003][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 219.051155][ C1] arch_stack_walk+0x94/0x100 [ 219.055832][ C1] ? do_syscall_64+0xcd/0xf80 [ 219.060508][ C1] stack_trace_save+0x8e/0xc0 [ 219.065174][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 219.070540][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.075811][ C1] kasan_save_stack+0x33/0x60 [ 219.080478][ C1] ? kasan_save_stack+0x33/0x60 [ 219.085319][ C1] ? kasan_save_track+0x14/0x30 [ 219.090153][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 219.094899][ C1] ? __kmalloc_node_noprof+0x355/0x930 [ 219.100346][ C1] ? alloc_slab_obj_exts+0x43/0xf0 [ 219.105456][ C1] ? new_slab+0x353/0x430 [ 219.109787][ C1] ? ___slab_alloc+0xe18/0x1c90 [ 219.114651][ C1] ? __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 219.120273][ C1] ? kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 219.126331][ C1] ? __io_alloc_req_refill+0x9d/0x5e0 [ 219.131703][ C1] ? io_submit_sqes+0xf94/0x28e0 [ 219.136637][ C1] ? __do_sys_io_uring_enter+0xd6b/0x1630 [ 219.142389][ C1] kasan_save_track+0x14/0x30 [ 219.147066][ C1] __kasan_kmalloc+0xaa/0xb0 [ 219.151653][ C1] __kmalloc_node_noprof+0x355/0x930 [ 219.156931][ C1] ? alloc_slab_obj_exts+0x43/0xf0 [ 219.162041][ C1] ? policy_nodemask+0x431/0x4e0 [ 219.166975][ C1] ? alloc_slab_obj_exts+0x43/0xf0 [ 219.172082][ C1] alloc_slab_obj_exts+0x43/0xf0 [ 219.177015][ C1] new_slab+0x353/0x430 [ 219.181168][ C1] ___slab_alloc+0xe18/0x1c90 [ 219.185842][ C1] ? lock_acquire+0x179/0x330 [ 219.190510][ C1] ? kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 219.196575][ C1] ? __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 219.202200][ C1] __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 219.207667][ C1] kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 219.213579][ C1] __io_alloc_req_refill+0x9d/0x5e0 [ 219.218791][ C1] ? io_nop+0x35e/0x630 [ 219.222944][ C1] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 219.228760][ C1] ? io_issue_sqe+0xba/0x1410 [ 219.233437][ C1] io_submit_sqes+0xf94/0x28e0 [ 219.238212][ C1] __do_sys_io_uring_enter+0xd6b/0x1630 [ 219.243759][ C1] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 219.249743][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 219.254676][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 219.259611][ C1] ? xfd_validate_state+0x61/0x180 [ 219.264714][ C1] ? __pfx___x64_sys_inotify_add_watch+0x10/0x10 [ 219.271043][ C1] do_syscall_64+0xcd/0xf80 [ 219.275545][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.281428][ C1] RIP: 0033:0x7f153878f749 [ 219.285829][ C1] RSP: 002b:00007f1539559038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 219.294233][ C1] RAX: ffffffffffffffda RBX: 00007f15389e6090 RCX: 00007f153878f749 [ 219.302193][ C1] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 000000000000000b [ 219.310148][ C1] RBP: 00007f1538813f91 R08: 0000000000000000 R09: 0000000000000000 [ 219.318107][ C1] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 219.326064][ C1] R13: 00007f15389e6128 R14: 00007f15389e6090 R15: 00007ffd6bdd0498 [ 219.334037][ C1] [ 219.337043][ C1] rcu: rcu_preempt kthread starved for 10429 jiffies! g11733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 219.348220][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 219.358170][ C1] rcu: RCU grace-period kthread stack dump: [ 219.364036][ C1] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 219.377519][ C1] Call Trace: [ 219.380782][ C1] [ 219.383703][ C1] ? __schedule+0x10b9/0x6150 [ 219.388373][ C1] __schedule+0x1139/0x6150 [ 219.392878][ C1] ? __pfx___schedule+0x10/0x10 [ 219.397719][ C1] ? find_held_lock+0x2b/0x80 [ 219.402393][ C1] ? schedule+0x2d7/0x3a0 [ 219.406723][ C1] schedule+0xe7/0x3a0 [ 219.410783][ C1] schedule_timeout+0x123/0x290 [ 219.415625][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 219.420985][ C1] ? __pfx_process_timeout+0x10/0x10 [ 219.426264][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 219.432060][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 219.437511][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 219.442272][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 219.447550][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.452739][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 219.457664][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 219.462508][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 219.468305][ C1] rcu_gp_kthread+0x26d/0x380 [ 219.472972][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 219.478160][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.482908][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.488096][ C1] ? __kthread_parkme+0x19e/0x250 [ 219.493111][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 219.498302][ C1] kthread+0x3c5/0x780 [ 219.502365][ C1] ? __pfx_kthread+0x10/0x10 [ 219.506948][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.511699][ C1] ? __pfx_kthread+0x10/0x10 [ 219.516282][ C1] ret_from_fork+0x983/0xb10 [ 219.520866][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 219.525965][ C1] ? __switch_to+0x7af/0x10d0 [ 219.530633][ C1] ? __pfx_kthread+0x10/0x10 [ 219.535216][ C1] ret_from_fork_asm+0x1a/0x30 [ 219.539987][ C1] [ 219.542991][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 219.549301][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 219.558220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.568261][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 219.573883][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 219.593474][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 219.599527][ C1] RAX: 000000000048ff8d RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 219.607482][ C1] RDX: 0000000000000000 RSI: ffffffff8dace0b2 RDI: ffffffff8bf2b400 [ 219.615437][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 219.623393][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 219.631352][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 219.639311][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 219.648227][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.654800][ C1] CR2: 000000110c390559 CR3: 000000002abe9000 CR4: 00000000003526f0 [ 219.662759][ C1] Call Trace: [ 219.666023][ C1] [ 219.668938][ C1] default_idle+0x13/0x20 [ 219.673262][ C1] default_idle_call+0x6c/0xb0 [ 219.678016][ C1] do_idle+0x38d/0x510 [ 219.682080][ C1] ? __pfx_do_idle+0x10/0x10 [ 219.686668][ C1] cpu_startup_entry+0x4f/0x60 [ 219.691425][ C1] start_secondary+0x21d/0x2d0 [ 219.696186][ C1] ? __pfx_start_secondary+0x10/0x10 [ 219.701483][ C1] common_startup_64+0x13e/0x148 [ 219.706436][ C1]