last executing test programs: 2m47.119579187s ago: executing program 0 (id=63): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="400f06"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, 0xffffffffffffffff, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xfffffffffffffe7e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) 2m42.042059388s ago: executing program 0 (id=78): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) syz_emit_ethernet(0x102, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = accept$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r7 = getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) r8 = getuid() statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x400, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000840)={0x1, 'ip6gre0\x00', {}, 0x6}) sendmmsg$unix(r5, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000140)="0a2005474afb05", 0x7}, {&(0x7f0000000240)="fff1f2346e087074", 0x8}, {&(0x7f0000000340)="49d7355406e1703bccc2be293a8ef5f29ac934a6ae3239535bbcb3ca14b22750b63ae1c6e810dc95d7e548297088baf34440df7e086ad98b3f79605da5f5b52ee0953e0c34902a44cb1d6b3ea54d8fda648b22af5ee7c377ab1ccf65e71bcf629e5c1ba1ded2336483b6eeeac155bc072bce1a74c94b60d70ddcdd3c146e4e81a1dfd61ea822c4e88dc9533fb0286ebe1c90eb24c8cc3ada671036", 0x9b}, {&(0x7f0000000400)="943c4e37376e5403eb9487e852d44e3a1d1055e7180e763f42206979b7c8c6c18054dafa52064a8c8ef433429ac18032156b1d5c14ca19be4be767f2da44f6d7f49f1d3cc47dd413354e494588f6d87f1a872b937599727da11717806a552076a91d77f0cf91f6ed8d305de11b7840945e02b625362c23ed7333cd38b6bebeecdbedaee508ee792fb81c70b2c015f5ae8504d2562339ed9596fb10bcf5e002403fe1a7bfc95f438586132106f319abda5610e4c8c3d669ae613b84a3ea56714f3f8e0f23f24f0fadd587426f5af38a6dc6cb342171fa13daba05c4c61543a9108fd83bd355e00353da34ef6089e23cc6c9", 0xf1}, {&(0x7f0000000500)="5b63c4f3e92458662dcbb4d7761d05a59d0598c6959bbfb30eb5ae92e178ddea768b5d446d01becb954c862c7a00e8dc6f0ebe7d654b00e683e563408f4e40bf4c350b962090f5ac7c5291346251a6ff2251aa35eff5fc8a32728b2c2e44f4b86d3aa926eeaeb4658cef5539ebb3db2323e159837bf6e9dabc38b0", 0x7b}], 0x5, &(0x7f0000000780)=[@rights={{0x28, 0x1, 0x1, [r6, r3, r1, r3, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, r4, r2, r2, r4]}}], 0x78, 0x14}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @local}}) 2m40.971597163s ago: executing program 0 (id=85): mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x74bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0xeabe254c2d23c52a) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f00000000af3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe0a3210356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x24, 0x1, {0x6, 0x8002, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x43, 0xa, 0xb, 0xffff, 0x0, 0x1, 0x3, 0x80000, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000004c0)={[0x4, 0x4, 0x0, 0x0, 0x817, 0x7f5, 0x10001, 0x3, 0x23b, 0x74f595f8, 0x5, 0x6, 0x2, 0x3, 0x1000, 0x200000000], 0xdddd1000, 0x20800}) syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) open_by_handle_at(r7, &(0x7f0000000000)=@raw={0x4, 0x62, {"bc"}}, 0x54d180) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m36.987328252s ago: executing program 0 (id=100): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8a03, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x318, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1000, 'system_u:object_r:apt_var_log_t:s0\x00'}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 2m33.22215818s ago: executing program 0 (id=107): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000240)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x78, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x390, 0x0, 0xd0, 0xffffffff, 0x220, 0x220, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, &(0x7f0000000000), {[{{@ip={@local, @local, 0xff000000, 0xff, 'netpci0\x00', 'wg0\x00', {}, {}, 0x2, 0x1, 0x28}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x6f}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @multicast1, @port=0x4e23, @port=0x4e21}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xffff00, 'wg1\x00', 'gre0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x21, @rand_addr=0x64010102, @multicast1, @gre_key=0xe8c, @port=0x4e23}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0xff, 0xffffff00, 'veth0\x00', 'syzkaller0\x00', {}, {}, 0x4, 0x2, 0x48}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x19, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @port=0x4e20, @port=0x4e20}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0xff000000, 0xff000000], 0xfc389ccd, 0x2, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) write(r0, &(0x7f0000000080)="42c51cb049c851b308b890563c04efbf6feb", 0x12) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2m32.296355482s ago: executing program 0 (id=111): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) close(r0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000000c00000000140000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000000c00000000140000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2040400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r5}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) (async) bind$bt_hci(r7, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0x6) (async) write$binfmt_misc(r7, &(0x7f0000000000), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 2m16.619333143s ago: executing program 32 (id=111): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) close(r0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000000c00000000140000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000000c00000000140000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2040400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r5}, 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) (async) bind$bt_hci(r7, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0x6) (async) write$binfmt_misc(r7, &(0x7f0000000000), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 12.678206862s ago: executing program 4 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x0, 0xa000}) 12.220477404s ago: executing program 4 (id=469): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100000000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a21", @ANYRES32=r1, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) 10.215590434s ago: executing program 5 (id=476): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = getgid() getgroups(0x1, &(0x7f00000008c0)=[0xee00]) setxattr$system_posix_acl(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x5}, [{0x2, 0x5, 0xee00}], {0x4, 0x4}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2, r5}, {0x8, 0x4, r6}], {0x10, 0x5}, {0x20, 0x7}}, 0x44, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@delqdisc={0x5b0, 0x25, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0x9}, {0xd, 0x6}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x118, 0x2, {{0x5, [0x10, 0x8, 0x6, 0x0, 0x6, 0x10, 0x2, 0x10, 0x5, 0xf, 0x7, 0x10, 0x6, 0x9, 0x7], 0x1, [0x8, 0xfffe, 0x6, 0xfff2, 0x8, 0x6, 0x1000, 0x1ff, 0x3c, 0x9, 0x6, 0x100, 0x3, 0x1, 0x80, 0xe], [0x2, 0x7, 0x1, 0x1820, 0xf, 0x3, 0xcbb, 0x9, 0x4, 0xa4, 0x2, 0x8, 0x7, 0x6, 0x7, 0x3ff]}, [@TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x88da}, {0xc, 0x4, 0x2d1}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1d}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x16}]}, @TCA_MQPRIO_MAX_RATE64={0x10, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}]}, @TCA_MQPRIO_MAX_RATE64={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7}, {0xc, 0x4, 0xc66}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6}]}}}, @qdisc_kind_options=@q_atm={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x4, 0xde, 0xd2c9, 0xe4, 0x9, 0xfc2ee8a8, 0x0, 0x8e, 0x7, 0xd, 0x8, 0x8001, 0x8, 0x4, 0x9, 0xc, 0x1, 0xe7b6, 0x9, 0x4, 0x8000, 0x800, 0x4, 0xfffffe00, 0xf, 0x72e9, 0x4, 0x7, 0x5, 0x0, 0xfffffff7, 0x1200, 0x9, 0xca, 0x2, 0x5, 0x4, 0x0, 0x1, 0x0, 0x9, 0x7, 0xfffffff9, 0xff, 0x4, 0x0, 0x29c273bf, 0x3, 0x6, 0x40, 0x6, 0x7, 0x3, 0x175, 0x8, 0x81, 0x6, 0x7, 0xa3, 0x8af0, 0x0, 0x8, 0x6, 0x7f, 0xff, 0xf, 0x7, 0x2, 0x1, 0x7ff, 0x81, 0xa, 0x3, 0x400, 0x3, 0x8, 0x1, 0x9, 0x1ff, 0x9, 0x6, 0x6, 0x1, 0x3, 0x6, 0xad9, 0xb, 0x3ff, 0x2, 0x0, 0x12, 0x6, 0x7, 0x9, 0xfffffffe, 0x7, 0x0, 0x200, 0x8f, 0xfffff8b4, 0x1, 0x8, 0xfffffff8, 0x9, 0x9, 0x7, 0xb55, 0x40, 0x6, 0x2, 0x4, 0x9, 0x6, 0x3, 0x0, 0x3, 0xfff, 0xfffffffd, 0x4, 0x7e000000, 0x7f, 0x0, 0x0, 0xfff, 0x0, 0x6, 0xe41, 0x1, 0x8, 0x10, 0x1, 0x5, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x2b, 0x4, 0x848, 0xfffffffd, 0x1, 0x0, 0x5, 0xc, 0x8, 0x50, 0xd4, 0x6, 0xaf, 0x80000000, 0x0, 0x800, 0xa7f, 0x0, 0x2, 0xfffffffe, 0x80000000, 0x8, 0x1, 0xfffffff6, 0x6, 0x192907ba, 0xe0d, 0x8, 0x8, 0xfffffffe, 0xf, 0x400, 0x8, 0x5, 0x3c, 0x7, 0xfffffffc, 0x5, 0x80000000, 0x9, 0x7, 0x1, 0x4, 0xd, 0x100, 0xd36, 0x4, 0x1, 0x80000001, 0x6, 0x7, 0x1, 0x9, 0xffff, 0x4, 0xffffff97, 0x1, 0x10001, 0x0, 0x9, 0x8c, 0x8, 0xdb, 0x8, 0x1, 0x8, 0xe, 0x0, 0x7, 0x48, 0x8, 0x5796e7af, 0x8, 0x5, 0x7ff, 0x6, 0x8000, 0x5, 0x0, 0x5, 0xa9a78c0, 0x0, 0x8, 0xffff, 0x2, 0xc4, 0xc, 0xffb1, 0x10, 0x1c9, 0x4, 0x2769, 0x8, 0x1, 0x81, 0x8, 0x81, 0x5e, 0x2, 0x23, 0x50, 0x1, 0xf4, 0xa0c1, 0x18000, 0x9, 0x81, 0x7f, 0x7d3c, 0xdb, 0x3ff, 0x200, 0x5e79bdc6, 0x6, 0x2d61adf2, 0x4, 0x5, 0x1, 0x1800]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xdd22d1a6b73375be}]}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0xf, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 9.870433297s ago: executing program 5 (id=478): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef64, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.83182426s ago: executing program 5 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 8.665046091s ago: executing program 2 (id=480): unshare(0x66000080) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r2 = getpid() unshare(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x94, &(0x7f00000007c0)='\x17Y\x03\x00\x00\x00\xd1?<.)[u\x84\xe0.+\xb4\xd4\x92\xbc\xe6\xce\xb2\x02\x00 \x00\xdd\xc08\xf1\xb7*\x84#-A\x96*\xfb\x11\x1a\xd3\xfd\x14\x00\x00\x00\x00\x00\x00\x00\x91\xb1\xaf\x85\x1c\x85\x1b\x96\xe8\xc0\x89_\x83g\x9f\xaf\x16\x00\x00\x00\xcf\xb7\xcb\xca\xb8\xc3WZ\x8bA\xd9Jmf\xa8\x9b\xbf+\xaff\x965\xacs\xc3\xb9\x0eZG\xcd\xfeo\x91\xc5\xcc\xba\xfc\xba\xe7\"\xd9\xb5\xf7\xc9\xb2\xf7E\xaeD:\x18S\xe8\xc0as\xe4t\xfd\xd1\xf1\xc8\xa8\x10\xd9M\x16Ro\xe9\xa9|\x9a\xdd['}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000140)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = gettid() socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRESHEX=r7, @ANYRESDEC=r5, @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) 8.426012383s ago: executing program 4 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a21", @ANYRES32=r3, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) 8.402383715s ago: executing program 5 (id=482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0], 0x50) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 7.993637058s ago: executing program 5 (id=485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x880, 0x10000000002, 0x0, 0x124, 0x0, 0x0, {0x2}}) io_uring_enter(r5, 0x6efc, 0x3900, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) pwritev2(r4, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x2, 0x1, 0x10) sendfile(r3, r3, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310900000010fe1406584afd8d74b8830793b848194e1df82d00", [0x6, 0x9]}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000340)={r3, 0x7, {0x0, 0x0, 0x0, 0x9, 0xa0d, 0x0, 0x2, 0x12, 0x10, "dd3f69943eebef80e9574e512a76b415b58af03d88444ad31a3f9ea01c259a99e160f54a91298688cd5460884d46cc0c76c95039b4b23f611de83a86b3f04b8e", "35d42d1c52961cb58491048d190b2ab895d5bdf57430812e4db320c0dab2f4aed97a139b2563926931afecea2b83507e1e3a6dd1d91063f5750b209457b99efe", "b7b0d261e620e7c5ce3dad114bf61645ea5edba56ed7aa2c47ef95aea141ada2", [0x200, 0x6f]}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xd0, 0xe, [{{0x9, 0x4, 0x0, 0x35, 0x1, 0x7, 0x1, 0x1, 0xe, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x70, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x5, 0xff, 0x4, 0x40}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x8, [{0x1a, &(0x7f00000001c0)=@string={0x1a, 0x3, "4ac9aab2aca31e4194a88edc535273ec7f6afc9c7322ca4d"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41a}}, {0xb9, &(0x7f0000000540)=@string={0xb9, 0x3, "2d11fd5ca4b0e1ad15c1905f18c582691001969cb99e952032be2ffff763d762634390e68e1522111bde84574cb8dc454bd559c122aa4f2e49ba11fc86d1ade68352e45f314eb4d5bf914df1d07cc4600753850f0f8abb252bda3b583cba998f9793b53b6421d043899887d4d3a026983546d9f8dbe64d4d768bfcd7e91237c645b9ef735de9ccce95646ea74c41dcdf055fbd2c162655e60ab5c37c5a5cc30793b058616079faba4623226e88a25c8e89f0ab19bb2e6f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1809}}, {0x0, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c01}}]}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000040)) 7.946124879s ago: executing program 3 (id=486): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0x2b, 0x2000003c) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.767001568s ago: executing program 2 (id=488): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6, r5, r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c010000030101030000000000000000060000022c0006"], 0x14c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008040) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) timer_getoverrun(r1) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) close(r7) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x2000c894) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) 5.15081502s ago: executing program 2 (id=490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf, 0x0, @thr={&(0x7f0000000000)="4159366d0cc92fecc8bba04a84", &(0x7f00000004c0)="4d96353825b2eeb7ce198bdcf3259328279115609854324f837625769968676e568f50174f67ad9bb63f326700351edfa85e3d35500572ecad2ce8f4f4ff69e065389ad91ad941bccb51e4f9e821c29ad8c3bf1d94d2b2ee34a0f1b7608c1b8c10fa66b868a4b372869feced49963e2d9cf025129c0fdc37e7723d20e928f1854fb5efcfe867f847ebee0a97b533d7a52ca8054979094a2c395beafac3357d2faf49d6749885ea8256b104eddaddc3b1c4aff9e0828333a8d3eae8b4312ab1c57365bd5a52ab0ff923c168d74ae4ae240b017737373b17677cab93f1af189272"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xbf1e}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbe4250400000008000c00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f00000001c0)={0x6, 0x100, 0x80000000, 0x2, 0x96, "f6a881613aa50e15c43572430be97800", 0x6c, 0x8}) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendfile(r9, r5, 0x0, 0x20000023893) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000300)=""/228) 4.839867845s ago: executing program 1 (id=491): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.241952555s ago: executing program 4 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 4.04324605s ago: executing program 5 (id=493): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) bind$alg(0xffffffffffffffff, 0x0, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) poll(&(0x7f0000000240)=[{r8, 0xe402}], 0x1, 0xfffeffff) ioctl$VHOST_NET_SET_BACKEND(r8, 0xaf02, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 3.728953496s ago: executing program 2 (id=494): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000780)=""/120, 0x78}], 0x2}, 0x2}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x31, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f000080c000/0x1000)=nil, 0x1000) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback=r4, r0, 0x2, 0x4004, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000f4c000/0x1000)=nil, 0x1000, 0x2, 0x13, 0xffffffffffffffff, 0xfffff000) 3.664985146s ago: executing program 3 (id=495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0], 0x50) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 3.554352109s ago: executing program 1 (id=496): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock2(&(0x7f0000419000/0x2000)=nil, 0x2000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) clock_gettime(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000100039042abd7000eaffffff000003e47a88fb4ff79b12459fc0261dc214a45adb061364837c88a28e61f151f4fc6c45b832487716b5856f95c7df212495e5f3a282c8229b3561d96460156825318ba4ff3d0ed269a637e5b65e29b70792c76cb7535c66513d2b35b02f6af21e9ae686b245bb41cf735e64bf5da0c73862bd51d182dc0000", @ANYRES32=0x0, @ANYBLOB="03000000c01006001800128008000100736974000c0002800500090029000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x401}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.337393859s ago: executing program 4 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defaplt user:syz 00000000000004093\x00'], 0x2a, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000009880), 0x44800, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x6) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000240)={'\x00', 0x5, 0x1, 0x4}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 2.714170763s ago: executing program 3 (id=498): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x100000005, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.489991905s ago: executing program 1 (id=499): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec0000001400000429bd7000ffdbdf257a042b0001006570038ed47ceb439e98e89d3716cfb9c046e6e44cbf81b986481d262341bee908c6c5622b335200a90001003ac564b2c3a3d9fa68d4ca0aa4447a4818a6d906fb4578a23832d1594ddb25e62e4900ad8a2709e4932820da250e38e837f384a2b10c2b91e5c6ca480d2ab6ea4ec16adeef84a5c77d4922950d254b13a72a5efbb0fc431410ee195268207d758ad2f2d93285114c687a7d8ca78d31c09cd21ee756afab2195c3bb2e801f8b07cce9ed2575a87dd7d28d0d2a2d980c5a70ec06ce5ea7afb3230901369c263ece166c45b637c30d0def82"], 0xec}, 0x1, 0x0, 0x0, 0x4044050}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x40000010) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000840000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000300000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r6, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 2.336394728s ago: executing program 3 (id=500): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.641255683s ago: executing program 2 (id=501): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400101, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x20}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'vlan1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf94f7449f23b5615249ed92a29df50c02df251200000008", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000c0043000200000000080000"], 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x0, 0x0, @ioapic={0x1, 0x400, 0x3, 0x9, 0x0, [{0xa, 0x9, 0x5, '\x00', 0x3}, {0xa1, 0x4, 0x7, '\x00', 0x15}, {0x9, 0x44, 0xe, '\x00', 0x4d}, {0x5, 0x6, 0x2, '\x00', 0x6}, {0x5, 0x2, 0x9, '\x00', 0x3}, {0x6, 0x5, 0x9, '\x00', 0x4}, {0x5a, 0x9, 0x4, '\x00', 0xa3}, {0x8, 0x7, 0x4, '\x00', 0x4}, {0x0, 0xf, 0x0, '\x00', 0xd7}, {0x2, 0x3, 0x4, '\x00', 0x9}, {0x8, 0x0, 0x7, '\x00', 0x36}, {0x4, 0x2, 0xa3, '\x00', 0x9}, {0xfa, 0x2, 0x9, '\x00', 0x34}, {0x4, 0x3, 0xff, '\x00', 0x2}, {0x3, 0x7, 0x0, '\x00', 0x7f}, {0xb8, 0x1, 0x2, '\x00', 0x2}, {0x1, 0x4, 0x9, '\x00', 0xa8}, {0x1, 0x4, 0x2, '\x00', 0x81}, {0x7, 0x1, 0x3, '\x00', 0x81}, {0x4, 0x28, 0x7f, '\x00', 0x81}, {0x7, 0x4, 0x0, '\x00', 0x7}, {0x1, 0x1, 0x9, '\x00', 0x2}, {0x8, 0x0, 0x1, '\x00', 0x2}, {0x4, 0x7, 0x1, '\x00', 0x9}]}}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) keyctl$revoke(0x3, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.156007149s ago: executing program 1 (id=502): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 594.029641ms ago: executing program 1 (id=503): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 563.847022ms ago: executing program 2 (id=504): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x50) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0x1000, 0x0, 0x20002fa}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x7, @vbi={0x0, 0x400, 0x0, 0x4745504d, [], [0xfffffffe, 0x5]}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001c00)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000340)="03986b3ee6cd3b3dfd91e0296f8d5f552be205d681a4564e38231e74d67bc1c192eb034799672c164863e3df2f017ef8ec9f933afc40c7b3cc1221e73c25b43cb4fa9e393d357cef6042dd3faca3b1430b7eb516fa2f4322d7ab4a2de1147233af2bcafa2db219446ebb61c16e9a90e6a6784400daedcfcefb136838a69d093f3729bc735bd45cbee70a200473ca78428d42f98f9c437dba82bcc1fa707afbf72ebccc9d1b33264e5d93b27c2f499cc6526324b1da", 0xb5}, {&(0x7f0000000200)="eade4168dfd21747d0bdfeb88a612eecd2c9474da5e91384136b10d7832b49f094b71c5832a2d68c8f49b0ec464fe900e2b346128dd60d724b5da19b5a", 0x3d}], 0x2, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r4, r1, r2]}}, @cred={{0x1c}}], 0x60, 0x4021845}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f000000a400)="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", 0x1000}, {&(0x7f0000000480)="a59c789f0e63822d924797e798824c7d90", 0x11}, {&(0x7f0000000600)="a7ca54d50da6b4ab72c93c18d1a1bab58575521cdf15e3afa8d7923f64cde9ca30a9d9e86da051747c768cffb53e77999ae13cce62b95e01bd839e20c1a696c1d166c0af72ee8f748565a25094f114310566407100595eaac4a1a4d3452dcaba173707b9fb8db40db22e9d67cfe78fd34761b5b0f8e8d2559d563b198dc27036892ecb4184fe1053b09999e6a1565bd20e7ede5d8c4ad0782d85e3d1d3bca461667e7bdf4bfef01d5218edabe063d0e23675e695c2e813bda9d0472567be8b0cc78ea261209d68c207e78a72c65e80e8d1a09dfd30ba6b", 0xd7}, {&(0x7f0000000740)="30c2833234262a127d53d29391a4280bb20115a978715fa64db47793c3ccb382b7700f45f80be8405048d48f8bfd8f64b701bcdc1e14e54895b1af7c8838e96c24898148364b757795fefaeaecafaa425e1678882e8b33b1df1cb2af923d47fac6841435a860c1dfb4de266ed316b8ae37b66e4ef6fa38831c98ec930beb366aefa03b314cedb53ace4ead3c48daf92035af1ddd73f4c73e668cb10325250f4f2242876cafc55f22f58ef9bdca770192abd8752da47ab52f319ea29a7577f454188c6e87c34d0f2347879a6a", 0xcc}, {&(0x7f00000004c0)="e12ad71623733666db6f819f7ff1bc1a4a937d83f95673a90f790007418364378fb9f9620b785bfcef371edae8bbb42ccc95c87b5be512f08195d5cd68d0cbb18fb4968a78173aec8eb69e1cd174d3ce185f52d97bb0b3c59701db91c101258d8f290858c9690c4604f35d30289e8014639b18e2c8244616515fd1ad125b3aa1f707504948d2304b1fa01afa829658a48a3889b10b36d28e9f1d", 0x9a}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r1, r3, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x4000}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a80)="27fce077477c78e4b7c9da04753dd7d93c41be171f498e11a5b8ebb18138accfe769433825730c7a06635351eb123fcf82e0d95f9a5755af15b13b7646a1cd6e8e1ec5af5bd084bf9184f5cd30", 0x4d}, {&(0x7f0000000b00)="41f3e0eda182103057f8cdee456ec75761c41cd5b434558bb91a9f599c4ee42d7670e45e", 0x24}, {&(0x7f0000000b40)="4cef955ab4a33f814fe41b5afac941901b03e440fbe4bce96844b1193668cdc7f45af2f95df45f2f252250e883584e29179c959d03434b97b3192e88eb42250669d606906fd22e669a0635b7980a", 0x4e}, {&(0x7f0000000bc0)="cd0a0f5424e0db143cbf0138c9c70c7adf4ed1ddd93e97116853b44912252d7d656c463856d062d04ed93b27a2", 0x2d}], 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="340000000000000001000000010000008d1762cb52c36c79d74ee7835acf9d0227b238e6f2e75afc774c675e0963a7a4656403109d91c047a98828a36b1d16272e0721", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x20040000}}, {{&(0x7f0000000dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001400)="a2838e929e8f08459a53eb9d90c0e44cda98c6824e4ae9b7968b311eae4b05b6f5f3aabd2482ab3c89cdba082f1ecb0c80165e3fd4bf53e6770149848f1d4d1440aa0cb3e3c19e1dfc103687e834bdf47dfd3e110e31775cc661aad990e9494d13df2fe3a0ac4f04b269ad5b7d4fb9231f53d9490bbf4c449b8b96479c3b4e362a440457734d2e3849db879f107e75b4b1f845836dfbe12936917e1e699a74ee7e8747c21268a20b28903ce1f1863d2f0ee088fd4ac2a3919a340fd2e1486821f3c22d", 0xc3}], 0x1}}, {{&(0x7f0000001540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001840)=[{&(0x7f00000015c0)="309f33313d8dc6b830842dd8465a6d556254d503fd2e395d9db80cf908e8a7ed482ccfb99a0ddf3f55241bec2c696ac97ba937bf25ee7b5c1bfa73cf04827783a50dcbe52d966eeeed7742c81902d6204d8bbab3b662d123d7db4a636147f9b5f6c266c0523a2a5d09c5d5031cf431f4f72e13ecc0e398dc14fd61964606853348c9ed0dbeee8aa492138532458fba01561a1a3ae8c3d39e1a4c9d7a9b2b54fc1101c2c2c40d18bb2d75a8", 0xab}, {&(0x7f0000001680)="5d2b02075450b15aab0e0550542053ea2969066676614f9ef9e578fd000bc93c58d7d49ad103bee2bd0ff238da9651850a54ba511910a4d7ae5d2256229a85f8eecbf8f4f09a0d5f7b002229dd623df1f82d04369b61e42c5c82535154442d3d54a7390c2d4a46", 0x67}, {&(0x7f0000001700)="13562293681db30b70c84b65c309d2b35b11889881e70e52800f3711aaa155cbec4162b43c13b2951e34c5ecd25cbdde5fc420b33d94c2d404af17165d9e95c581ad2b1813b8243b63b3fb8f46f5e82b1364c1118bc7c14259ad678f99939abf87d587a79d5b4a21a54e8a94dd83861c6aa79cf19e8ca0d91ee559aef20ac9226a1562d01bfd26463374c9663f9eb9c649d7701f26d8b422b61931e08dd18d2e196d4a68c806df5f748696719dc59a561bb83315bf70e63a9f8d4eaa1e441bf6238a0b31822603ba81ad2abb4d0bf69d3fd6d886e65638730215cf68c9c8", 0xde}, {&(0x7f0000001800)="6c61e2e7ca94796140912be94489c0057a9d2a90753bd4b4a4461ad799de54c8d7be4f255673e6265875c8bf34c6e325d6688a35744643", 0x37}], 0x4, &(0x7f0000001880)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x40080}}, {{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001940)="548b3ff37438", 0x6}, {&(0x7f0000001980)="2457c54aaf867173800d879039b6f9bd805285e41f5dc9fa33b50a6e2867029d78d2efe4a3c2b4100725c5cadd0eaf8258e0a116de76a174160f46e6e9ca874461f8b699addd7cd2f21d73d1ed2880c811c290a2933bd2671f8dabe51dda841ab72e96f3ef70665cfafad68d8773565536a1af537c4e7a1c45a32f038d9b0d98a8e8ae0aa9bc51c13d275ad49be7137f20a910e9dc5174b23b524975c4d79375e2832476", 0xa4}, {&(0x7f0000001a40)="4944f69680b590428694528e10599bf115badf413a2a0596b8d07e5651c9e2878c7e2e4880f75b33aa7d44b81b006dba1040c8019562635ea951503a095ef3e2432ade7a3752eefedff5cdb741d6b32824bbf653ddcfa0b94178e2734fe9bf4a43a93279ffa183279cff026a1b6c43ef8e268c7e4fdc9f7a028f33ae976db8dfb008", 0x82}, {&(0x7f0000001b00)="a53a12a4f244be304758ffc7c29d43fa8fc9e10c4037406537", 0x19}, {&(0x7f0000001b40)="36eb14f5fe002825d9267a63c4c5f034f72e8127cd7d6e75b03dd5f563a4c69a2862e6594cac7317b577b66c7b970ec2a71ba02417", 0x35}], 0x5, 0x0, 0x0, 0x4000}}], 0x6, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x32) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0xffffffffffffffff) 562.822628ms ago: executing program 3 (id=505): semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x3, 0x1800}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) semop(0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000011c0)=""/86) semctl$GETVAL(0x0, 0x6, 0xc, 0x0) r1 = semget$private(0x0, 0x4, 0x2b8) semop(r1, &(0x7f0000000280)=[{0x1, 0x5, 0x1800}], 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000004c0)={0x0, 'gretap0\x00', {0x5}, 0x100}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8000000000000001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, &(0x7f0000000140)='grpquota') semop(0x0, &(0x7f0000001980)=[{0x0, 0x0, 0x1000}], 0x1) 40.194952ms ago: executing program 3 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xf, 0xf}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000008000000000000000000000085fa3dc0f95498ba63d5175fe9080000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0xffff1000, 0x1000, &(0x7f000080e000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)="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", &(0x7f0000000640)="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", 0x7fff, r5}, 0x38) 39.437157ms ago: executing program 4 (id=507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 0s ago: executing program 1 (id=508): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) kernel console output (not intermixed with test programs): vswitch: netlink: Message has 383 unknown bytes. [ 98.094973][ T6168] IPv6: Can't replace route, no match found [ 98.363446][ T5867] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 98.403616][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.438708][ T5867] usb 1-1: Product: syz [ 98.438796][ T5867] usb 1-1: Manufacturer: syz [ 98.467972][ T5867] usb 1-1: SerialNumber: syz [ 98.489184][ T5867] usb 1-1: config 0 descriptor?? [ 98.562259][ T6173] FAULT_INJECTION: forcing a failure. [ 98.562259][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 98.575389][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 98.575416][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.575427][ T6173] Call Trace: [ 98.575434][ T6173] [ 98.575441][ T6173] dump_stack_lvl+0x16c/0x1f0 [ 98.575474][ T6173] should_fail_ex+0x512/0x640 [ 98.575496][ T6173] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 98.575529][ T6173] should_failslab+0xc2/0x120 [ 98.575553][ T6173] kmem_cache_alloc_node_noprof+0x78/0x770 [ 98.575582][ T6173] ? copy_process+0x4b5/0x76a0 [ 98.575614][ T6173] ? copy_process+0x4b5/0x76a0 [ 98.575637][ T6173] copy_process+0x4b5/0x76a0 [ 98.575662][ T6173] ? stack_depot_save_flags+0x3de/0x9c0 [ 98.575691][ T6173] ? kasan_save_stack+0x42/0x60 [ 98.575710][ T6173] ? kasan_save_stack+0x33/0x60 [ 98.575732][ T6173] ? __pfx_copy_process+0x10/0x10 [ 98.575759][ T6173] ? do_syscall_64+0xcd/0xfa0 [ 98.575798][ T6173] ? __pfx_io_wq_worker+0x10/0x10 [ 98.575824][ T6173] create_io_thread+0xbe/0x100 [ 98.575847][ T6173] ? __pfx_create_io_thread+0x10/0x10 [ 98.575881][ T6173] ? __pfx_io_wq_worker+0x10/0x10 [ 98.575908][ T6173] ? lockdep_init_map_type+0x5c/0x280 [ 98.575930][ T6173] ? lockdep_init_map_type+0x5c/0x280 [ 98.575951][ T6173] ? __init_swait_queue_head+0xca/0x150 [ 98.575975][ T6173] ? create_io_worker+0x1f/0x5b0 [ 98.576000][ T6173] create_io_worker+0x1d0/0x5b0 [ 98.576028][ T6173] io_wq_enqueue+0x4cc/0x980 [ 98.576056][ T6173] ? __pfx_io_wq_enqueue+0x10/0x10 [ 98.576081][ T6173] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 98.576106][ T6173] ? io_prep_async_work+0x3c3/0x770 [ 98.576137][ T6173] io_queue_iowq+0x246/0x530 [ 98.576161][ T6173] ? io_req_sqe_copy+0xea/0x130 [ 98.576190][ T6173] io_queue_sqe_fallback+0xda/0x660 [ 98.576216][ T6173] ? io_req_sqe_copy+0xea/0x130 [ 98.576245][ T6173] io_submit_sqes+0x15b2/0x2710 [ 98.576290][ T6173] __do_sys_io_uring_enter+0xd69/0x1630 [ 98.576324][ T6173] ? __fget_files+0x20e/0x3c0 [ 98.576344][ T6173] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 98.576380][ T6173] ? fput+0x9b/0xd0 [ 98.576405][ T6173] ? xfd_validate_state+0x61/0x180 [ 98.576433][ T6173] ? __pfx_ksys_write+0x10/0x10 [ 98.576461][ T6173] do_syscall_64+0xcd/0xfa0 [ 98.576490][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.576511][ T6173] RIP: 0033:0x7f81e1d8efc9 [ 98.576527][ T6173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.576546][ T6173] RSP: 002b:00007f81e2ce9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 98.576565][ T6173] RAX: ffffffffffffffda RBX: 00007f81e1fe6090 RCX: 00007f81e1d8efc9 [ 98.576578][ T6173] RDX: 0000000000000020 RSI: 00000000000022d0 RDI: 0000000000000005 [ 98.576590][ T6173] RBP: 00007f81e2ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 98.576602][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.576613][ T6173] R13: 00007f81e1fe6128 R14: 00007f81e1fe6090 R15: 00007ffc5d269738 [ 98.576643][ T6173] [ 99.351749][ T5888] usb 5-1: USB disconnect, device number 2 [ 99.456363][ T5888] appletouch 5-1:32.85: input: appletouch disconnected [ 99.787229][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.937106][ T5867] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 100.071438][ T10] usb 4-1: device descriptor read/64, error -71 [ 100.161433][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 100.161468][ T30] audit: type=1400 audit(1761205117.632:293): avc: denied { write } for pid=6195 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.511576][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.811397][ T30] audit: type=1400 audit(1761205117.642:294): avc: denied { create } for pid=6195 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.863325][ T30] audit: type=1400 audit(1761205117.642:295): avc: denied { bind } for pid=6195 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.946997][ T10] usb 4-1: device descriptor read/64, error -71 [ 100.964380][ T30] audit: type=1400 audit(1761205118.052:296): avc: denied { create } for pid=6159 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.192616][ T10] usb usb4-port1: attempt power cycle [ 101.201365][ T30] audit: type=1400 audit(1761205118.652:297): avc: denied { setopt } for pid=6193 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.224173][ T30] audit: type=1400 audit(1761205118.652:298): avc: denied { connect } for pid=6193 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.291413][ T30] audit: type=1400 audit(1761205118.662:299): avc: denied { connect } for pid=6193 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.337425][ T30] audit: type=1400 audit(1761205118.712:300): avc: denied { bind } for pid=6193 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.494423][ T30] audit: type=1400 audit(1761205118.712:301): avc: denied { node_bind } for pid=6193 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 102.022366][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.030719][ T30] audit: type=1400 audit(1761205119.152:302): avc: denied { execute } for pid=6214 comm="syz.4.77" path="/13/cgroup.controllers" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.157130][ T5888] usb 1-1: USB disconnect, device number 2 [ 102.176018][ T10] usb 4-1: device descriptor read/8, error -71 [ 102.484862][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.883450][ T10] usb 4-1: device not accepting address 5, error -71 [ 102.901791][ T10] usb usb4-port1: unable to enumerate USB device [ 104.011343][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.181648][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 104.294565][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.308375][ T5867] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 104.541400][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.568923][ T5867] usb 2-1: config 0 descriptor?? [ 104.625563][ T6248] process 'syz.3.86' launched './file0' with NULL argv: empty string added [ 104.792961][ T5888] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.965805][ T5867] elo 0003:04E7:0009.0002: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 104.966149][ T5888] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 105.017626][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.090718][ T5888] usb 1-1: Product: syz [ 105.099624][ T5888] usb 1-1: Manufacturer: syz [ 105.174313][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 105.236866][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 105.236881][ T30] audit: type=1400 audit(1761205122.742:310): avc: denied { create } for pid=6260 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.263577][ T30] audit: type=1400 audit(1761205122.752:311): avc: denied { bind } for pid=6260 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.292275][ T30] audit: type=1400 audit(1761205122.752:312): avc: denied { connect } for pid=6260 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.293057][ T5888] usb 1-1: SerialNumber: syz [ 105.329645][ T53] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 105.336658][ T30] audit: type=1400 audit(1761205122.752:313): avc: denied { listen } for pid=6260 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.630746][ T5888] usb 1-1: config 0 descriptor?? [ 105.653170][ T10] usb 2-1: USB disconnect, device number 6 [ 105.785514][ T30] audit: type=1400 audit(1761205122.842:314): avc: denied { shutdown } for pid=6231 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.824519][ T30] audit: type=1400 audit(1761205123.202:315): avc: denied { ioctl } for pid=6238 comm="syz.0.85" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.976654][ T30] audit: type=1400 audit(1761205123.362:316): avc: denied { read write } for pid=6274 comm="syz.1.93" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.055327][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.94'. [ 106.069989][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.94'. [ 106.084218][ T30] audit: type=1400 audit(1761205123.362:317): avc: denied { open } for pid=6274 comm="syz.1.93" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.201415][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.505853][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.568584][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.725121][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.759368][ T5888] airspy 1-1:0.0: usb_control_msg() failed -110 request 09 [ 106.772123][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 106.789944][ T5888] airspy 1-1:0.0: Could not detect board [ 106.797939][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.931400][ T5888] airspy 1-1:0.0: probe with driver airspy failed with error -110 [ 106.982894][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 107.049028][ T10] usb 2-1: config 0 descriptor?? [ 107.193515][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 107.211286][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.225137][ T24] usb 4-1: Product: syz [ 107.236284][ T24] usb 4-1: Manufacturer: syz [ 107.240886][ T24] usb 4-1: SerialNumber: syz [ 107.244022][ T5815] usb 1-1: USB disconnect, device number 3 [ 107.280013][ T24] usb 4-1: config 0 descriptor?? [ 107.349470][ T6296] FAULT_INJECTION: forcing a failure. [ 107.349470][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 107.362207][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.4.99 Not tainted syzkaller #0 PREEMPT(full) [ 107.362232][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.362243][ T6296] Call Trace: [ 107.362251][ T6296] [ 107.362259][ T6296] dump_stack_lvl+0x16c/0x1f0 [ 107.362295][ T6296] should_fail_ex+0x512/0x640 [ 107.362322][ T6296] ? fs_reclaim_acquire+0xae/0x150 [ 107.362348][ T6296] should_failslab+0xc2/0x120 [ 107.362371][ T6296] __kmalloc_noprof+0xdd/0x880 [ 107.362401][ T6296] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 107.362430][ T6296] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 107.362452][ T6296] tomoyo_realpath_from_path+0xc2/0x6e0 [ 107.362477][ T6296] ? tomoyo_profile+0x47/0x60 [ 107.362505][ T6296] tomoyo_path_number_perm+0x245/0x580 [ 107.362533][ T6296] ? tomoyo_path_number_perm+0x237/0x580 [ 107.362566][ T6296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.362598][ T6296] ? find_held_lock+0x2b/0x80 [ 107.362648][ T6296] ? find_held_lock+0x2b/0x80 [ 107.362671][ T6296] ? hook_file_ioctl_common+0x145/0x410 [ 107.362703][ T6296] ? __fget_files+0x20e/0x3c0 [ 107.362728][ T6296] security_file_ioctl+0x9b/0x240 [ 107.362752][ T6296] __x64_sys_ioctl+0xb7/0x210 [ 107.362788][ T6296] do_syscall_64+0xcd/0xfa0 [ 107.362819][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.362839][ T6296] RIP: 0033:0x7effde98efc9 [ 107.362855][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.362873][ T6296] RSP: 002b:00007effdcbac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.362892][ T6296] RAX: ffffffffffffffda RBX: 00007effdebe6180 RCX: 00007effde98efc9 [ 107.362906][ T6296] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 000000000000000b [ 107.362918][ T6296] RBP: 00007effdcbac090 R08: 0000000000000000 R09: 0000000000000000 [ 107.362930][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.362941][ T6296] R13: 00007effdebe6218 R14: 00007effdebe6180 R15: 00007fff67423d08 [ 107.362970][ T6296] [ 107.362997][ T6296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.605425][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.617054][ T10] hid_parser_main: 73 callbacks suppressed [ 107.617073][ T10] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 107.652336][ T10] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 107.660181][ T10] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 107.669309][ T10] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 107.684640][ T10] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 107.731705][ T10] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v88.07 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 107.786269][ T10] sony 0003:054C:0268.0003: failed to claim input [ 107.799558][ T6275] syz_tun: entered allmulticast mode [ 107.902629][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.910310][ T5936] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.071463][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 108.088011][ T5874] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.096137][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.116450][ T5874] usb 1-1: config 0 has no interface number 0 [ 108.127365][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.138038][ T30] audit: type=1326 audit(1761205125.642:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7fc00000 [ 108.162001][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.182353][ T5874] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 108.193670][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.203807][ T5936] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.222680][ T5874] usb 1-1: Product: syz [ 108.227258][ T5874] usb 1-1: Manufacturer: syz [ 108.232809][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.241604][ T5874] usb 1-1: SerialNumber: syz [ 108.248977][ T5874] usb 1-1: config 0 descriptor?? [ 108.259017][ T5874] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 108.273301][ T5936] usb 3-1: config 0 descriptor?? [ 108.291571][ T5874] usb 1-1: selecting invalid altsetting 1 [ 108.297346][ T5874] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 108.319105][ T5874] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.329856][ T30] audit: type=1400 audit(1761205125.832:319): avc: denied { create } for pid=6306 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 108.331104][ T5874] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 108.359278][ T5874] usb 1-1: media controller created [ 108.383973][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.298349][ T5936] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xe [ 109.312988][ T6308] syz_tun: left allmulticast mode [ 109.315236][ T5936] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 109.319851][ T5888] usb 2-1: USB disconnect, device number 7 [ 109.455980][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 109.466202][ T5874] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 109.476010][ T5936] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.490071][ T5874] zl10353_read_register: readreg error (reg=127, ret==-110) [ 109.517151][ T24] usb 4-1: USB disconnect, device number 6 [ 109.693651][ T5874] usb 3-1: USB disconnect, device number 4 [ 110.999213][ T10] usb 1-1: USB disconnect, device number 4 [ 111.482850][ T6341] x_tables: duplicate underflow at hook 1 [ 111.500575][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 111.500613][ T30] audit: type=1400 audit(1761205128.991:325): avc: denied { getopt } for pid=6340 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.534936][ T30] audit: type=1400 audit(1761205129.001:326): avc: denied { ioctl } for pid=6340 comm="syz.0.107" path="socket:[10540]" dev="sockfs" ino=10540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.163033][ T30] audit: type=1400 audit(1761205129.671:327): avc: denied { getopt } for pid=6348 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.378053][ T6354] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 112.581380][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 112.601387][ T30] audit: type=1400 audit(1761205130.111:328): avc: denied { write } for pid=6352 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.865426][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 112.877261][ T30] audit: type=1400 audit(1761205130.351:329): avc: denied { create } for pid=6352 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.911661][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.955204][ T10] usb 3-1: config 0 descriptor?? [ 112.962642][ T6362] bond1: (slave veth3): Enslaving as an active interface with a down link [ 112.966504][ T30] audit: type=1400 audit(1761205130.431:330): avc: denied { ioctl } for pid=6352 comm="syz.1.114" path="socket:[9796]" dev="sockfs" ino=9796 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.995401][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.015855][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 113.034292][ T6354] bond1: entered promiscuous mode [ 113.055677][ T6354] bond1: entered allmulticast mode [ 113.078290][ T6354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.102513][ T30] audit: type=1400 audit(1761205130.431:331): avc: denied { write } for pid=6352 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 113.166354][ T10] gp8psk: usb in 128 operation failed. [ 113.374535][ T10] gp8psk: FW Version = 159.119.170 (0x9f77aa) Build 2207/68/144 [ 113.905084][ T10] gp8psk: usb in 149 operation failed. [ 113.910585][ T10] gp8psk: failed to get FPGA version [ 113.921363][ T10] gp8psk: usb in 138 operation failed. [ 113.926857][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 113.943538][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 113.956216][ T10] usb 3-1: USB disconnect, device number 5 [ 114.051567][ T5815] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.409641][ T6376] mkiss: ax0: crc mode is auto. [ 114.435053][ T30] audit: type=1400 audit(1761205131.951:332): avc: denied { create } for pid=6375 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.462820][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.542543][ T30] audit: type=1400 audit(1761205132.051:333): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.567159][ T5815] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 114.580072][ T30] audit: type=1400 audit(1761205132.051:334): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.606897][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.615469][ T5815] usb 2-1: Product: syz [ 114.619701][ T5815] usb 2-1: Manufacturer: syz [ 114.624659][ T5815] usb 2-1: SerialNumber: syz [ 114.633920][ T5815] usb 2-1: config 0 descriptor?? [ 114.791453][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.956382][ T5815] hso 2-1:0.0: Failed to find BULK IN ep [ 114.968744][ T5815] usb-storage 2-1:0.0: USB Mass Storage device detected [ 114.972511][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 115.037625][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 115.093514][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.102819][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.110992][ T24] usb 3-1: Product: syz [ 115.115706][ T24] usb 3-1: Manufacturer: syz [ 115.120341][ T24] usb 3-1: SerialNumber: syz [ 115.260519][ T24] usb 3-1: config 0 descriptor?? [ 115.298462][ T6379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.325808][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 115.355662][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 115.641986][ T5815] usb 2-1: USB disconnect, device number 8 [ 116.235323][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 116.283126][ T6399] lo speed is unknown, defaulting to 1000 [ 116.305523][ T6399] lo speed is unknown, defaulting to 1000 [ 116.311670][ T5874] usb 3-1: USB disconnect, device number 6 [ 116.356508][ T6399] lo speed is unknown, defaulting to 1000 [ 116.392471][ T6399] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.412070][ T6399] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.462710][ T6399] lo speed is unknown, defaulting to 1000 [ 116.470140][ T6399] lo speed is unknown, defaulting to 1000 [ 116.487482][ T6399] lo speed is unknown, defaulting to 1000 [ 116.497741][ T6399] lo speed is unknown, defaulting to 1000 [ 116.512886][ T6399] lo speed is unknown, defaulting to 1000 [ 116.571446][ T5815] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.663038][ T6407] loop7: detected capacity change from 0 to 4 [ 116.721320][ T5815] usb 2-1: device descriptor read/64, error -71 [ 116.738664][ T6407] Dev loop7: unable to read RDB block 4 [ 116.744455][ T6407] loop7: unable to read partition table [ 116.750380][ T6407] loop7: partition table beyond EOD, truncated [ 116.760305][ T6407] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.) failed (rc=-5) [ 116.785719][ T5184] Dev loop7: unable to read RDB block 4 [ 116.791498][ T5184] loop7: unable to read partition table [ 116.798473][ T5184] loop7: partition table beyond EOD, truncated [ 116.850736][ T6409] netlink: 144 bytes leftover after parsing attributes in process `syz.4.128'. [ 117.014511][ T5815] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.255640][ T53] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 117.311440][ T5815] usb 2-1: device descriptor read/64, error -71 [ 117.348775][ T6409] sctp: [Deprecated]: syz.4.128 (pid 6409) Use of int in max_burst socket option. [ 117.348775][ T6409] Use struct sctp_assoc_value instead [ 117.402264][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 117.402279][ T30] audit: type=1400 audit(1761205134.921:343): avc: denied { ioctl } for pid=6408 comm="syz.4.128" path="socket:[10690]" dev="sockfs" ino=10690 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.678736][ T5815] usb usb2-port1: attempt power cycle [ 117.724157][ T6417] warning: `syz.2.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.966361][ T6417] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 118.598200][ T6427] bridge1: entered promiscuous mode [ 118.603522][ T6427] bridge1: entered allmulticast mode [ 118.908292][ T5815] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 119.241881][ T5815] usb 2-1: device descriptor read/8, error -71 [ 119.951567][ T5936] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.045330][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 120.081672][ T30] audit: type=1400 audit(1761205137.591:344): avc: denied { create } for pid=6433 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.131326][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 120.148739][ T5936] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.170443][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.204429][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.209713][ T30] audit: type=1400 audit(1761205137.621:345): avc: denied { getopt } for pid=6433 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.246091][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 120.255942][ T5936] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.297251][ T6437] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 120.303588][ T5936] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.329047][ T6437] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 120.462826][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.521474][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 120.694652][ T5936] usb 4-1: usb_control_msg returned -32 [ 120.710369][ T6432] netlink: 44 bytes leftover after parsing attributes in process `syz.3.133'. [ 120.731670][ T5936] usbtmc 4-1:16.0: can't read capabilities [ 121.542996][ T6441] block nbd2: NBD_DISCONNECT [ 121.548593][ T6441] block nbd2: Disconnected due to user request. [ 121.555485][ T6441] block nbd2: shutting down sockets [ 122.421183][ T6457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.453464][ T30] audit: type=1400 audit(1761205139.971:346): avc: denied { append } for pid=6456 comm="syz.4.140" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.507858][ T6457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.134691][ T24] usb 4-1: USB disconnect, device number 7 [ 124.127245][ T30] audit: type=1400 audit(1761205141.631:347): avc: denied { connect } for pid=6476 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.271722][ T6482] block nbd3: NBD_DISCONNECT [ 124.276510][ T6482] block nbd3: Disconnected due to user request. [ 124.282811][ T6482] block nbd3: shutting down sockets [ 125.479316][ T30] audit: type=1400 audit(1761205142.981:348): avc: denied { mount } for pid=6481 comm="syz.1.146" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.491837][ T6489] batman_adv: batadv0: Adding interface: ipvlan2 [ 125.723455][ T6489] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.226526][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.240829][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.242154][ T6492] loop6: detected capacity change from 0 to 524288000 [ 126.258646][ T6489] batman_adv: batadv0: Interface activated: ipvlan2 [ 126.331749][ T6500] block nbd4: NBD_DISCONNECT [ 126.337650][ T6500] block nbd4: Disconnected due to user request. [ 126.344146][ T6500] block nbd4: shutting down sockets [ 126.546990][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 126.781641][ T30] audit: type=1400 audit(1761205144.301:349): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.591280][ T30] audit: type=1400 audit(1761205144.521:350): avc: denied { listen } for pid=6504 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.680035][ T30] audit: type=1400 audit(1761205144.631:351): avc: denied { bind } for pid=6506 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.799083][ T30] audit: type=1400 audit(1761205144.641:352): avc: denied { setopt } for pid=6506 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.159115][ T6535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 130.242922][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.258241][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.268795][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.278483][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.286687][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.305807][ T30] audit: type=1400 audit(1761205147.821:353): avc: denied { mounton } for pid=6536 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 130.322302][ T6543] netlink: 14 bytes leftover after parsing attributes in process `syz.1.161'. [ 130.337303][ T6538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.345892][ T6538] bond0: (slave bond2): Enslaving as an active interface with an up link [ 130.403154][ T5815] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.491092][ T6542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.526968][ T30] audit: type=1400 audit(1761205148.041:354): avc: denied { read append } for pid=6545 comm="syz.4.164" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.571654][ T30] audit: type=1400 audit(1761205148.071:355): avc: denied { open } for pid=6545 comm="syz.4.164" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.613554][ T5815] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 130.622945][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.643735][ T5815] usb 3-1: config 0 descriptor?? [ 130.733535][ T6543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.748534][ T6543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.766608][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.775756][ T6543] bond0 (unregistering): (slave bond2): Releasing backup interface [ 130.791742][ T6543] bond0 (unregistering): Released all slaves [ 131.124747][ T6546] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.190180][ T6546] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.302936][ T6546] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.336214][ T6536] lo speed is unknown, defaulting to 1000 [ 131.392974][ T6546] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.411498][ T6546] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.491141][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 131.501381][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 131.521467][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 131.543609][ T5888] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 131.556834][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.575275][ T5888] usb 4-1: Product: syz [ 131.606610][ T6546] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.628237][ T5888] usb 4-1: Manufacturer: syz [ 131.633315][ T5888] usb 4-1: SerialNumber: syz [ 131.643953][ T5888] usb 4-1: config 0 descriptor?? [ 131.643987][ T6546] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.653163][ T6542] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.676157][ T6546] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.968392][ T30] audit: type=1400 audit(1761205149.461:356): avc: denied { kexec_image_load } for pid=6532 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 131.996132][ T6542] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.040603][ T6546] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.185178][ T6546] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.207450][ T5888] usb 4-1: ucan: probing device on interface #0 [ 132.244711][ T6546] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.263280][ T6546] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.283259][ T6546] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.289288][ T6546] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.360769][ T6546] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.371926][ T53] Bluetooth: hci5: command tx timeout [ 132.389654][ T6546] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 132.462032][ T6546] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 132.492742][ T6546] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 132.584127][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.590953][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.113738][ T5888] ucan 4-1:0.0 can0: registered device [ 133.150447][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.361476][ T5815] usbhid 3-1:0.0: can't add hid device: -71 [ 133.372212][ T5815] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 133.382093][ T5888] ucan 4-1:0.0 can0: firmware string: unknown [ 133.392338][ T30] audit: type=1400 audit(1761205150.871:357): avc: denied { remount } for pid=6541 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.431489][ T5815] usb 3-1: USB disconnect, device number 7 [ 133.440320][ T5888] usb 4-1: USB disconnect, device number 8 [ 133.531445][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.656104][ T6536] chnl_net:caif_netlink_parms(): no params data found [ 133.873708][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.628984][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.635077][ T5820] Bluetooth: hci4: command 0x0405 tx timeout [ 134.641070][ T5820] Bluetooth: hci5: command 0x040f tx timeout [ 135.222997][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.231357][ T30] audit: type=1400 audit(1761205152.741:358): avc: denied { block_suspend } for pid=6565 comm="syz.4.168" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.294495][ T30] audit: type=1400 audit(1761205152.791:359): avc: denied { read write } for pid=6575 comm="syz.1.169" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.381118][ T30] audit: type=1400 audit(1761205152.791:360): avc: denied { open } for pid=6575 comm="syz.1.169" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.411672][ T30] audit: type=1400 audit(1761205152.871:361): avc: denied { ioctl } for pid=6575 comm="syz.1.169" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.541636][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.203685][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.290454][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.338261][ T30] audit: type=1400 audit(1761205153.851:362): avc: denied { append } for pid=6580 comm="syz.2.170" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 136.361348][ T5874] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.451899][ T30] audit: type=1400 audit(1761205153.911:363): avc: denied { create } for pid=6580 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.481031][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.488571][ T6536] bridge_slave_0: entered allmulticast mode [ 136.500934][ T6536] bridge_slave_0: entered promiscuous mode [ 136.505241][ T30] audit: type=1400 audit(1761205153.911:364): avc: denied { write } for pid=6580 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.515618][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.554099][ T5874] usb 5-1: device descriptor read/64, error -71 [ 136.591959][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.599187][ T6536] bridge_slave_1: entered allmulticast mode [ 136.652676][ T6536] bridge_slave_1: entered promiscuous mode [ 136.661552][ T53] Bluetooth: hci5: command 0x040f tx timeout [ 136.669306][ T5820] Bluetooth: hci4: command 0x0405 tx timeout [ 136.669313][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.781837][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.806995][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.836066][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.965108][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 137.069097][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.093116][ T10] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 137.095560][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.111777][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.149134][ T10] usb 3-1: config 0 descriptor?? [ 137.193804][ T6536] team0: Port device team_slave_0 added [ 137.254072][ T6536] team0: Port device team_slave_1 added [ 137.475782][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.537327][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.621377][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.639809][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.751969][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.783222][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.790279][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.038136][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.082816][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.194535][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.267133][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.327617][ T6536] hsr_slave_0: entered promiscuous mode [ 138.351682][ T6536] hsr_slave_1: entered promiscuous mode [ 138.454847][ T6536] debugfs: 'hsr0' already exists in 'hsr' [ 138.490809][ T6536] Cannot create hsr debugfs directory [ 138.747654][ T5820] Bluetooth: hci5: command 0x040f tx timeout [ 138.747681][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.753857][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 138.899286][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 138.929451][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.939201][ T6602] batman_adv: batadv0: Adding interface: ipvlan3 [ 138.939301][ T6605] loop6: detected capacity change from 0 to 524288000 [ 138.953571][ T10] usb 3-1: USB disconnect, device number 8 [ 138.965158][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.974274][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.982322][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.983607][ T6602] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.001499][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.031073][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.100514][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.111409][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.125541][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 139.139081][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.149692][ T6602] batman_adv: batadv0: Interface activated: ipvlan3 [ 139.625731][ T6613] FAULT_INJECTION: forcing a failure. [ 139.625731][ T6613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.650941][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.4.178 Not tainted syzkaller #0 PREEMPT(full) [ 139.650971][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.650982][ T6613] Call Trace: [ 139.650989][ T6613] [ 139.650997][ T6613] dump_stack_lvl+0x16c/0x1f0 [ 139.651030][ T6613] should_fail_ex+0x512/0x640 [ 139.651057][ T6613] _copy_from_user+0x2e/0xd0 [ 139.651082][ T6613] copy_folio_from_user+0x118/0x2f0 [ 139.651116][ T6613] mfill_atomic_copy+0x19c2/0x1f50 [ 139.651156][ T6613] ? __might_fault+0xe3/0x190 [ 139.651183][ T6613] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 139.651217][ T6613] userfaultfd_ioctl+0x2436/0x3930 [ 139.651239][ T6613] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 139.651259][ T6613] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 139.651297][ T6613] ? hook_file_ioctl_common+0x145/0x410 [ 139.651331][ T6613] ? selinux_file_ioctl+0x180/0x270 [ 139.651352][ T6613] ? selinux_file_ioctl+0xb4/0x270 [ 139.651373][ T6613] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 139.651394][ T6613] ? __x64_sys_ioctl+0x18e/0x210 [ 139.651420][ T6613] __x64_sys_ioctl+0x18e/0x210 [ 139.651449][ T6613] do_syscall_64+0xcd/0xfa0 [ 139.651481][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.651503][ T6613] RIP: 0033:0x7effde98efc9 [ 139.651520][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.651538][ T6613] RSP: 002b:00007effdcbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.651558][ T6613] RAX: ffffffffffffffda RBX: 00007effdebe5fa0 RCX: 00007effde98efc9 [ 139.651571][ T6613] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 139.651584][ T6613] RBP: 00007effdcbee090 R08: 0000000000000000 R09: 0000000000000000 [ 139.651596][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.651608][ T6613] R13: 00007effdebe6038 R14: 00007effdebe5fa0 R15: 00007fff67423d08 [ 139.651638][ T6613] [ 140.049044][ T13] bridge_slave_1: left allmulticast mode [ 140.099454][ T13] bridge_slave_1: left promiscuous mode [ 140.139574][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.171944][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.185636][ T13] bridge_slave_0: left allmulticast mode [ 140.202021][ T13] bridge_slave_0: left promiscuous mode [ 140.209220][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.271789][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 140.283958][ T30] audit: type=1400 audit(1761205157.781:365): avc: denied { write } for pid=6616 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.331498][ T30] audit: type=1400 audit(1761205157.791:366): avc: denied { nlmsg_write } for pid=6616 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.401847][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 140.431313][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 140.437804][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.449351][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.459909][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.480402][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.494449][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.504690][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.587087][ T30] audit: type=1400 audit(1761205157.831:367): avc: denied { name_connect } for pid=6616 comm="syz.4.180" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 140.782020][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 140.787601][ T24] usbtmc 3-1:16.0: can't read capabilities [ 140.831629][ T5816] Bluetooth: hci5: command 0x040f tx timeout [ 140.903319][ T30] audit: type=1400 audit(1761205158.421:368): avc: denied { write } for pid=6622 comm="syz.1.181" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.931475][ T30] audit: type=1400 audit(1761205158.441:369): avc: denied { create } for pid=6622 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.015572][ T5936] usb 3-1: USB disconnect, device number 9 [ 141.152380][ T5816] Bluetooth: hci1: command tx timeout [ 141.191338][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.359069][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.379430][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.436397][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.451490][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.468953][ T10] usb 2-1: SerialNumber: syz [ 141.688327][ T30] audit: type=1400 audit(1761205159.201:370): avc: denied { setopt } for pid=6628 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.985253][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.992401][ T10] usb 2-1: 0:2 : does not exist [ 142.013239][ T10] usb 2-1: unit 255 not found! [ 142.023562][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.059497][ T13] bond0 (unregistering): Released all slaves [ 142.094626][ T10] usb 2-1: USB disconnect, device number 13 [ 142.208552][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.282280][ T6604] lo speed is unknown, defaulting to 1000 [ 142.901563][ T5816] Bluetooth: hci5: command 0x040f tx timeout [ 142.921669][ T30] audit: type=1400 audit(1761205160.431:371): avc: denied { read open } for pid=6638 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.054188][ T30] audit: type=1400 audit(1761205160.471:372): avc: denied { getattr } for pid=6638 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.248254][ T5816] Bluetooth: hci1: command tx timeout [ 143.258032][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.412905][ T30] audit: type=1400 audit(1761205160.921:373): avc: denied { create } for pid=6649 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.434688][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 143.465866][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.485019][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.506506][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 143.516414][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 143.526184][ T24] usb 3-1: Product: syz [ 143.530482][ T24] usb 3-1: Manufacturer: syz [ 143.545894][ T24] hub 3-1:4.0: USB hub found [ 143.610800][ T30] audit: type=1400 audit(1761205161.121:374): avc: denied { add_name } for pid=6637 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.656456][ T13] hsr_slave_0: left promiscuous mode [ 143.711282][ T13] hsr_slave_1: left promiscuous mode [ 143.738679][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.757420][ T24] hub 3-1:4.0: 3 ports detected [ 143.784189][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.845641][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.877020][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.896924][ T13] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 143.916532][ T13] batman_adv: batadv0: Removing interface: ipvlan2 [ 144.010945][ T13] veth1_macvtap: left promiscuous mode [ 144.031605][ T13] veth0_macvtap: left promiscuous mode [ 144.058374][ T13] veth1_vlan: left promiscuous mode [ 144.071685][ T13] veth0_vlan: left promiscuous mode [ 144.246469][ T24] hub 3-1:4.0: set hub depth failed [ 144.257749][ T24] usb 3-1: USB disconnect, device number 10 [ 145.260030][ T13] team0 (unregistering): Port device batadv1 removed [ 145.306636][ T5816] Bluetooth: hci1: command tx timeout [ 145.790068][ T6670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.801061][ T6670] block device autoloading is deprecated and will be removed. [ 145.813692][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 145.813707][ T30] audit: type=1400 audit(1761205163.271:380): avc: denied { read } for pid=6666 comm="syz.2.192" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 145.871364][ T30] audit: type=1400 audit(1761205163.271:381): avc: denied { open } for pid=6666 comm="syz.2.192" path="/51/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 146.124197][ T30] audit: type=1400 audit(1761205163.641:382): avc: denied { ioctl } for pid=6666 comm="syz.2.192" path="socket:[13642]" dev="sockfs" ino=13642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.627128][ T13] team0 (unregistering): Port device team_slave_1 removed [ 146.773280][ T13] team0 (unregistering): Port device team_slave_0 removed [ 146.931082][ T30] audit: type=1400 audit(1761205164.451:383): avc: denied { execute } for pid=6675 comm="syz.1.193" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 147.383311][ T6683] overlay: Bad value for 'nfs_export' [ 147.388966][ T5816] Bluetooth: hci1: command tx timeout [ 147.395510][ T30] audit: type=1400 audit(1761205164.891:384): avc: denied { mount } for pid=6680 comm="syz.1.194" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.611351][ T30] audit: type=1400 audit(1761205165.121:385): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.904178][ T6689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.195'. [ 147.920463][ T6689] input: syz0 as /devices/virtual/input/input8 [ 148.189386][ T6536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.218300][ T6536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.272036][ T6536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.335421][ T6536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.452039][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 148.636989][ T30] audit: type=1400 audit(1761205166.141:386): avc: denied { append } for pid=6688 comm="syz.4.196" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.657024][ T6710] netlink: 'syz.1.198': attribute type 2 has an invalid length. [ 148.700231][ T6710] netlink: 119 bytes leftover after parsing attributes in process `syz.1.198'. [ 148.711802][ T42] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 148.749496][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.879875][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.897761][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.905448][ T6604] bridge_slave_0: entered allmulticast mode [ 148.912013][ T42] usb 3-1: device descriptor read/64, error -71 [ 148.914376][ T6604] bridge_slave_0: entered promiscuous mode [ 148.952977][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.971652][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.971785][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.971989][ T6604] bridge_slave_1: entered allmulticast mode [ 148.975543][ T6604] bridge_slave_1: entered promiscuous mode [ 149.121073][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.142057][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.151991][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 149.250959][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.298321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.305485][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.313935][ T42] usb 3-1: device descriptor read/64, error -71 [ 149.373946][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.381314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.427814][ T42] usb usb3-port1: attempt power cycle [ 149.624621][ T6604] team0: Port device team_slave_0 added [ 149.660208][ T30] audit: type=1400 audit(1761205167.161:387): avc: denied { bind } for pid=6725 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.784216][ T42] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 149.817982][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.925339][ T42] usb 3-1: device descriptor read/8, error -71 [ 150.007728][ T30] audit: type=1400 audit(1761205167.521:388): avc: denied { execute } for pid=6725 comm="syz.4.199" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 150.046826][ T6604] team0: Port device team_slave_1 added [ 150.106993][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.116376][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.163884][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.211619][ T42] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 150.219212][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.231817][ T42] usb 3-1: device descriptor read/8, error -71 [ 150.255294][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.277162][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.305927][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.348088][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.352440][ T42] usb usb3-port1: unable to enumerate USB device [ 150.431803][ T5815] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 150.520180][ T6604] hsr_slave_0: entered promiscuous mode [ 150.538062][ T6604] hsr_slave_1: entered promiscuous mode [ 150.554029][ T6604] debugfs: 'hsr0' already exists in 'hsr' [ 150.566293][ T6604] Cannot create hsr debugfs directory [ 150.602723][ T5815] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 150.644153][ T5815] usb 2-1: config index 0 descriptor too short (expected 64649, got 45) [ 150.802488][ T5815] usb 2-1: config index 1 descriptor too short (expected 64649, got 45) [ 150.921307][ T5815] usb 2-1: config index 2 descriptor too short (expected 64649, got 45) [ 150.994027][ T5815] usb 2-1: config index 3 descriptor too short (expected 64649, got 45) [ 151.006805][ T5815] usb 2-1: config index 4 descriptor too short (expected 64649, got 45) [ 151.024279][ T5815] usb 2-1: config index 5 descriptor too short (expected 64649, got 45) [ 151.052559][ T5815] usb 2-1: config index 6 descriptor too short (expected 64649, got 45) [ 151.068929][ T5815] usb 2-1: config index 7 descriptor too short (expected 64649, got 45) [ 151.106994][ T5815] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 151.143792][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.176342][ T5815] usb 2-1: Product: syz [ 151.180853][ T5815] usb 2-1: Manufacturer: syz [ 151.191294][ T5815] usb 2-1: SerialNumber: syz [ 151.398402][ T13] bridge_slave_1: left allmulticast mode [ 151.484577][ T13] bridge_slave_1: left promiscuous mode [ 151.495285][ T5815] rtl8150 2-1:1.0: couldn't reset the device [ 151.522181][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.541685][ T5815] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 151.592349][ T13] bridge_slave_0: left allmulticast mode [ 151.594172][ T5815] usb 2-1: USB disconnect, device number 14 [ 151.628958][ T13] bridge_slave_0: left promiscuous mode [ 151.645180][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.753077][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 151.856212][ T30] audit: type=1400 audit(1761205169.311:389): avc: denied { write } for pid=6753 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.400333][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.432392][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.448576][ T13] bond0 (unregistering): Released all slaves [ 152.644749][ T30] audit: type=1400 audit(1761205170.131:390): avc: denied { lock } for pid=6771 comm="syz.2.206" path="socket:[12827]" dev="sockfs" ino=12827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 152.654732][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.503700][ T30] audit: type=1400 audit(1761205171.011:391): avc: denied { getopt } for pid=6783 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.552562][ T6795] trusted_key: syz.1.209 sent an empty control message without MSG_MORE. [ 153.905298][ T13] hsr_slave_0: left promiscuous mode [ 153.961865][ T13] hsr_slave_1: left promiscuous mode [ 154.007757][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.060693][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.121592][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.174110][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.303145][ T13] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 154.366405][ T13] batman_adv: batadv0: Removing interface: ipvlan2 [ 154.702002][ T13] veth1_macvtap: left promiscuous mode [ 154.731413][ T13] veth0_macvtap: left promiscuous mode [ 154.737051][ T13] veth1_vlan: left promiscuous mode [ 154.808565][ T13] veth0_vlan: left promiscuous mode [ 155.547811][ T30] audit: type=1400 audit(1761205173.061:392): avc: denied { ioctl } for pid=6823 comm="syz.4.215" path="socket:[14311]" dev="sockfs" ino=14311 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.628136][ T30] audit: type=1400 audit(1761205173.141:393): avc: denied { write } for pid=6823 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.802508][ T13] team0 (unregistering): Port device team_slave_1 removed [ 155.835012][ T13] team0 (unregistering): Port device team_slave_0 removed [ 156.429597][ T6536] veth0_vlan: entered promiscuous mode [ 156.479799][ T6536] veth1_vlan: entered promiscuous mode [ 156.527853][ T30] audit: type=1400 audit(1761205174.031:394): avc: denied { setopt } for pid=6841 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.801701][ T5874] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 156.912464][ T911] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.011617][ T5874] usb 3-1: device descriptor read/64, error -71 [ 157.132419][ T911] usb 5-1: Using ep0 maxpacket: 32 [ 157.210579][ T911] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.313716][ T911] usb 5-1: config 0 has no interface number 0 [ 157.330023][ T5874] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 157.400712][ T911] usb 5-1: config 0 interface 184 has no altsetting 0 [ 157.565018][ T6536] veth0_macvtap: entered promiscuous mode [ 157.588632][ T911] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.627136][ T5874] usb 3-1: device descriptor read/64, error -71 [ 157.775331][ T911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.776228][ T6604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.793576][ T911] usb 5-1: Product: syz [ 157.856345][ T911] usb 5-1: Manufacturer: syz [ 157.865956][ T5874] usb usb3-port1: attempt power cycle [ 157.910106][ T911] usb 5-1: SerialNumber: syz [ 158.067596][ T911] usb 5-1: config 0 descriptor?? [ 158.142085][ T6604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.221855][ T911] smsc75xx v1.0.0 [ 158.302484][ T5874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 158.340571][ T6604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.397210][ T5874] usb 3-1: device descriptor read/8, error -71 [ 158.513979][ T6536] veth1_macvtap: entered promiscuous mode [ 158.660850][ T6604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.751896][ T5874] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 158.772066][ T30] audit: type=1400 audit(1761205174.051:395): avc: denied { setattr } for pid=6841 comm="syz.2.218" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 158.804204][ T911] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 158.826293][ T5874] usb 3-1: device descriptor read/8, error -71 [ 158.884461][ T911] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.899207][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.949349][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.971687][ T5874] usb usb3-port1: unable to enumerate USB device [ 159.020904][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.044923][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.075420][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.111346][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.222375][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.257184][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.270061][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.298472][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.328772][ T6866] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 159.346451][ T30] audit: type=1400 audit(1761205176.851:396): avc: denied { bind } for pid=6853 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.382874][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.390075][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.430543][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.437828][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.448111][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.457390][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.528506][ T30] audit: type=1400 audit(1761205177.041:397): avc: denied { mounton } for pid=6536 comm="syz-executor" path="/root/syzkaller.5prRTE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 159.559472][ T911] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 159.585208][ T5874] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 159.603940][ T30] audit: type=1400 audit(1761205177.081:398): avc: denied { setattr } for pid=6845 comm="syz.4.220" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 159.658925][ T911] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 159.682002][ T911] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 159.882128][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 159.904909][ T5874] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 159.916315][ T911] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 159.945327][ T5874] usb 2-1: config 0 has no interface number 0 [ 160.105990][ T5874] usb 2-1: config 0 interface 46 has no altsetting 0 [ 160.118218][ T911] usb 5-1: USB disconnect, device number 5 [ 160.186739][ T5874] usb 2-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=96.5d [ 160.206433][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.215660][ T5874] usb 2-1: Product: syz [ 160.219929][ T5874] usb 2-1: Manufacturer: syz [ 160.224868][ T5874] usb 2-1: SerialNumber: syz [ 160.237605][ T5874] usb 2-1: config 0 descriptor?? [ 160.246815][ T5874] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 160.731430][ T5815] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 160.798771][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.891304][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 160.897998][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 160.937273][ T6604] veth0_vlan: entered promiscuous mode [ 160.987635][ T6604] veth1_vlan: entered promiscuous mode [ 161.000316][ T5815] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.023709][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.066935][ T5815] usb 3-1: Product: syz [ 161.071127][ T5815] usb 3-1: Manufacturer: syz [ 161.088975][ T6604] veth0_macvtap: entered promiscuous mode [ 161.113306][ T5815] usb 3-1: SerialNumber: syz [ 161.125535][ T5815] usb 3-1: config 0 descriptor?? [ 161.142391][ T6604] veth1_macvtap: entered promiscuous mode [ 161.155824][ T5815] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.187215][ T5815] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 161.196873][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.229462][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.243345][ T5874] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 161.261934][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.285343][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.314011][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.403791][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.592422][ T4455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.617496][ T4455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.664640][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.673895][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.764292][ T5815] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 161.829923][ T6906] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 161.928699][ T6912] gre0: entered promiscuous mode [ 161.937979][ T6912] gre0: entered allmulticast mode [ 162.412191][ T5815] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 162.610781][ T5815] em28xx 3-1:0.0: board has no eeprom [ 162.646187][ T5874] usb 2-1: USB disconnect, device number 15 [ 162.649299][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.681600][ T5815] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 162.693998][ T5815] em28xx 3-1:0.0: dvb set to bulk mode. [ 162.710806][ T9] em28xx 3-1:0.0: Binding DVB extension [ 162.747379][ T5815] usb 3-1: USB disconnect, device number 19 [ 162.846901][ T5815] em28xx 3-1:0.0: Disconnecting em28xx [ 162.855509][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 162.931495][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.988491][ T9] em28xx 3-1:0.0: Registering input extension [ 162.996736][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.024561][ T5815] em28xx 3-1:0.0: Closing input extension [ 163.050876][ T10] usb 4-1: config 1 has no interface number 1 [ 163.083106][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 163.223109][ T5815] em28xx 3-1:0.0: Freeing device [ 163.231335][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.240480][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.248489][ T10] usb 4-1: Product: syz [ 163.262685][ T10] usb 4-1: Manufacturer: syz [ 163.267281][ T10] usb 4-1: SerialNumber: syz [ 163.291153][ T6935] batman_adv: batadv0: Adding interface: ipvlan2 [ 163.304744][ T6935] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.339371][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.351992][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 163.364661][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.465709][ T6939] loop6: detected capacity change from 0 to 524288000 [ 163.518926][ T6935] batman_adv: batadv0: Interface activated: ipvlan2 [ 163.556387][ T5874] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 163.569146][ T5874] usb 2-1: config 0 has no interface number 1 [ 163.590048][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.611451][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 163.619826][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.651911][ T5874] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 163.660973][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.934074][ T5874] usb 2-1: config 0 descriptor?? [ 164.374411][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 164.383716][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.478913][ T9] usb 6-1: config 0 descriptor?? [ 164.668916][ T6957] netlink: 'syz.4.235': attribute type 6 has an invalid length. [ 164.790285][ T42] usb 2-1: USB disconnect, device number 16 [ 165.018731][ T6957] bond1: entered promiscuous mode [ 165.026890][ T6957] bond1: entered allmulticast mode [ 165.037065][ T6957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.147793][ T9] ath6kl: mismatched byte count 0 vs. expected 12 [ 165.177950][ T9] ath6kl: Failed to init ath6kl core: -22 [ 165.197694][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 165.964896][ T10] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 165.980347][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 166.072141][ T1547] usb 6-1: USB disconnect, device number 2 [ 166.182799][ T10] usb 4-1: USB disconnect, device number 9 [ 166.344885][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.356682][ T6980] fuse: Bad value for 'rootmode' [ 166.366552][ T30] audit: type=1400 audit(1761205183.861:399): avc: denied { mounton } for pid=6979 comm="syz.3.240" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.410395][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 166.432954][ T6975] 8021q: VLANs not supported on ipvlan0 [ 166.469077][ T30] audit: type=1400 audit(1761205183.921:400): avc: denied { setopt } for pid=6979 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.632364][ T6987] netlink: 96 bytes leftover after parsing attributes in process `syz.3.240'. [ 167.141786][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 167.375529][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 167.615445][ T10] usb 4-1: config 0 has an invalid interface number: 210 but max is 0 [ 167.678281][ T7004] batman_adv: batadv0: Adding interface: ipvlan2 [ 167.685575][ T10] usb 4-1: config 0 has no interface number 0 [ 167.700027][ T10] usb 4-1: config 0 interface 210 has no altsetting 0 [ 167.708725][ T7004] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.760068][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.771043][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.781179][ T7004] batman_adv: batadv0: Interface activated: ipvlan2 [ 167.789475][ T7010] loop6: detected capacity change from 0 to 524288000 [ 167.796318][ T10] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=3b.9f [ 167.796348][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.796371][ T10] usb 4-1: Product: syz [ 167.796386][ T10] usb 4-1: Manufacturer: syz [ 167.796403][ T10] usb 4-1: SerialNumber: syz [ 167.840479][ T10] usb 4-1: config 0 descriptor?? [ 167.853135][ T10] mct_u232 4-1:0.210: MCT U232 converter detected [ 167.862997][ T10] mct_u232 ttyUSB0: expected endpoint missing [ 168.543295][ T5874] usb 4-1: USB disconnect, device number 10 [ 168.551812][ T5874] mct_u232 4-1:0.210: device disconnected [ 168.882794][ T42] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 169.162926][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 169.363918][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.032373][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.042898][ T7029] block nbd2: NBD_DISCONNECT [ 170.047570][ T7029] block nbd2: Disconnected due to user request. [ 170.056016][ T7029] block nbd2: shutting down sockets [ 170.081822][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.094894][ T42] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.104158][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.123078][ T42] usb 2-1: config 0 descriptor?? [ 171.105369][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 171.151927][ T7035] block nbd4: NBD_DISCONNECT [ 171.156885][ T7035] block nbd4: Disconnected due to user request. [ 171.163338][ T7035] block nbd4: shutting down sockets [ 171.179287][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.314930][ T42] usb 2-1: USB disconnect, device number 17 [ 171.975297][ T7053] fuse: Bad value for 'group_id' [ 171.977940][ T30] audit: type=1326 audit(1761205189.491:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 171.991395][ T7053] fuse: Bad value for 'group_id' [ 172.058804][ T30] audit: type=1326 audit(1761205189.541:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 172.281871][ T30] audit: type=1326 audit(1761205189.541:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 172.325019][ T30] audit: type=1326 audit(1761205189.561:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 172.359087][ T30] audit: type=1326 audit(1761205189.561:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 172.382545][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.477108][ T30] audit: type=1326 audit(1761205189.561:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81e1d90ee7 code=0x7ffc0000 [ 172.501035][ T30] audit: type=1326 audit(1761205189.561:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f81e1d90e5c code=0x7ffc0000 [ 172.532057][ T30] audit: type=1326 audit(1761205189.561:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f81e1d90d94 code=0x7ffc0000 [ 172.556852][ T30] audit: type=1326 audit(1761205189.561:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f81e1d90d94 code=0x7ffc0000 [ 172.597717][ T30] audit: type=1326 audit(1761205189.561:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f81e1d8dc2a code=0x7ffc0000 [ 172.662348][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.691384][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 172.712470][ T10] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.822576][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 172.829813][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 172.858898][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 172.890435][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 172.910278][ T10] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.952247][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.955644][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.971260][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.981649][ T10] usb 5-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 172.991146][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.991260][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 173.018739][ T42] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 173.030595][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.033335][ T7079] lo speed is unknown, defaulting to 1000 [ 173.040303][ T42] usb 4-1: Product: syz [ 173.060522][ T42] usb 4-1: Manufacturer: syz [ 173.065409][ T42] usb 4-1: SerialNumber: syz [ 173.092110][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.104507][ T10] usb 5-1: config 0 descriptor?? [ 173.110660][ T42] usb 4-1: config 0 descriptor?? [ 173.261290][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 173.273145][ T5874] usb 6-1: config 0 has no interfaces? [ 173.280029][ T5874] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.296120][ T5874] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.328160][ T5874] usb 6-1: Manufacturer: syz [ 173.358009][ T42] usb 4-1: USB disconnect, device number 11 [ 173.374196][ T5874] usb 6-1: config 0 descriptor?? [ 173.519763][ T10] hid_mf 0003:0079:1803.0005: item fetching failed at offset 2/5 [ 173.528841][ T10] hid_mf 0003:0079:1803.0005: HID parse failed. [ 173.536385][ T10] hid_mf 0003:0079:1803.0005: probe with driver hid_mf failed with error -22 [ 173.690088][ T7079] netlink: 'syz.5.257': attribute type 11 has an invalid length. [ 173.701024][ T42] usb 6-1: USB disconnect, device number 3 [ 173.739094][ T24] usb 5-1: USB disconnect, device number 6 [ 174.431778][ T7115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.261'. [ 175.083859][ T7123] block nbd4: NBD_DISCONNECT [ 175.542153][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.783367][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 175.809160][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.838143][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.864844][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.887825][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.898557][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.909384][ T24] usb 6-1: config 0 descriptor?? [ 175.981612][ T5874] IPVS: starting estimator thread 0... [ 176.085313][ T7143] IPVS: using max 31 ests per chain, 74400 per kthread [ 176.131840][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 176.181592][ T5815] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 176.594260][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 176.621530][ T24] usb 6-1: USB disconnect, device number 4 [ 176.868073][ T5815] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 176.901393][ T5815] usb 3-1: config 179 has no interface number 0 [ 176.977214][ T5815] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 177.250420][ T5815] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 177.407718][ T5815] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 177.432075][ T5815] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 177.447294][ T5815] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.527775][ T7172] gfs2: gfs2 mount does not exist [ 177.949004][ T5815] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.968572][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 177.968589][ T30] audit: type=1400 audit(1761205195.481:477): avc: denied { map } for pid=7170 comm="syz.5.273" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.975654][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 178.010809][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 178.022693][ T30] audit: type=1400 audit(1761205195.521:478): avc: denied { execute } for pid=7170 comm="syz.5.273" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.065604][ T5815] usb 3-1: Product: syz [ 178.263435][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.286698][ T7135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.297851][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 178.299992][ T5815] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 178.347358][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.375084][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.394273][ T24] usb 5-1: string descriptor 0 read error: -22 [ 178.400801][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.417380][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.441036][ T24] usb 5-1: 0:2 : does not exist [ 178.521067][ T1547] usb 3-1: USB disconnect, device number 20 [ 178.561495][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 178.591333][ T5815] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.627554][ T7176] binder: binder_mmap: 7175 200000ffc000-200001000000 bad vm_flags failed -1 [ 178.628999][ T30] audit: type=1400 audit(1761205196.141:479): avc: denied { map } for pid=7175 comm="syz.3.274" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.722807][ T10] usb 4-1: device descriptor read/64, error -71 [ 178.741642][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 178.750622][ T5815] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 178.766200][ T5815] usb 6-1: config 0 has no interface number 0 [ 178.775013][ T5815] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 178.794500][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.811789][ T5815] usb 6-1: Product: syz [ 178.821331][ T5815] usb 6-1: Manufacturer: syz [ 178.825946][ T5815] usb 6-1: SerialNumber: syz [ 178.851859][ T5815] usb 6-1: config 0 descriptor?? [ 179.066430][ T7171] binder: 7170:7171 ioctl 4018620d 0 returned -22 [ 179.090708][ T5815] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 179.121263][ T5815] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 179.152408][ T5815] uvcvideo 6-1:0.31: Failed to create links for entity 5 [ 179.160049][ T5815] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 180.949257][ T5815] usb 6-1: USB disconnect, device number 5 [ 181.375471][ T7215] block nbd5: NBD_DISCONNECT [ 183.497561][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 183.523605][ T24] usb 5-1: Warning! Unlikely big volume range (=13334), cval->res is probably wrong. [ 183.652278][ T24] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = -25425/-12091/1 [ 183.709642][ T24] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 184.242787][ T24] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 184.267673][ T24] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 184.284625][ T24] usb 5-1: USB disconnect, device number 7 [ 184.421243][ T7236] batman_adv: batadv0: Adding interface: ipvlan3 [ 184.427656][ T7236] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.463616][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.483402][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.878328][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 184.878939][ T7245] loop6: detected capacity change from 0 to 524288000 [ 184.913510][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.930898][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.951478][ T7236] batman_adv: batadv0: Interface activated: ipvlan3 [ 186.444731][ T30] audit: type=1400 audit(1761205203.961:480): avc: denied { mount } for pid=7251 comm="syz.2.288" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 186.822525][ T7268] block nbd4: NBD_DISCONNECT [ 187.243576][ T1547] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 187.448170][ T1547] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 187.631991][ T1547] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 187.653584][ T1547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.675283][ T1547] usb 4-1: Product: syz [ 187.679462][ T1547] usb 4-1: Manufacturer: syz [ 187.700030][ T1547] usb 4-1: SerialNumber: syz [ 187.741134][ T1547] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 187.872172][ T7258] lo speed is unknown, defaulting to 1000 [ 188.123356][ T1547] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 188.521749][ T1547] usb 4-1: USB disconnect, device number 14 [ 188.665537][ T5830] udevd[5830]: setting mode of /dev/bus/usb/004/014 to 020664 failed: No such file or directory [ 188.710131][ T5830] udevd[5830]: setting owner of /dev/bus/usb/004/014 to uid=0, gid=0 failed: No such file or directory [ 189.590556][ T7285] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 190.260991][ T7294] bond0: entered promiscuous mode [ 190.267038][ T7294] bond0: entered allmulticast mode [ 190.354369][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.918008][ T7308] FAULT_INJECTION: forcing a failure. [ 190.918008][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 190.921670][ T7304] Illegal XDP return value 4294967294 on prog (id 53) dev N/A, expect packet loss! [ 190.930863][ T7308] CPU: 0 UID: 0 PID: 7308 Comm: syz.4.298 Not tainted syzkaller #0 PREEMPT(full) [ 190.930889][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.930902][ T7308] Call Trace: [ 190.930908][ T7308] [ 190.930915][ T7308] dump_stack_lvl+0x16c/0x1f0 [ 190.930954][ T7308] should_fail_ex+0x512/0x640 [ 190.930981][ T7308] should_failslab+0xc2/0x120 [ 190.931004][ T7308] kmem_cache_alloc_noprof+0x75/0x6e0 [ 190.931033][ T7308] ? skb_clone+0x190/0x3f0 [ 190.931063][ T7308] ? skb_clone+0x190/0x3f0 [ 190.931084][ T7308] skb_clone+0x190/0x3f0 [ 190.931110][ T7308] netlink_deliver_tap+0xabd/0xd30 [ 190.931142][ T7308] netlink_unicast+0x64c/0x870 [ 190.931172][ T7308] ? __pfx_netlink_unicast+0x10/0x10 [ 190.931212][ T7308] netlink_sendmsg+0x8c8/0xdd0 [ 190.931243][ T7308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.931280][ T7308] ____sys_sendmsg+0xa98/0xc70 [ 190.931310][ T7308] ? copy_msghdr_from_user+0x10a/0x160 [ 190.931334][ T7308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.931366][ T7308] ? __lock_acquire+0xb8a/0x1c90 [ 190.931402][ T7308] ___sys_sendmsg+0x134/0x1d0 [ 190.931428][ T7308] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.931449][ T7308] ? preempt_schedule_common+0x44/0xc0 [ 190.931500][ T7308] ? lockdep_hardirqs_on+0x70/0x110 [ 190.931535][ T7308] __sys_sendmsg+0x16d/0x220 [ 190.931559][ T7308] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.931582][ T7308] ? rcu_is_watching+0x12/0xc0 [ 190.931618][ T7308] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 190.931648][ T7308] do_syscall_64+0xcd/0xfa0 [ 190.931677][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.931697][ T7308] RIP: 0033:0x7effde98efc9 [ 190.931713][ T7308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.931731][ T7308] RSP: 002b:00007effdcbac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.931749][ T7308] RAX: ffffffffffffffda RBX: 00007effdebe6180 RCX: 00007effde98efc9 [ 190.931762][ T7308] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 190.931774][ T7308] RBP: 00007effdcbac090 R08: 0000000000000000 R09: 0000000000000000 [ 190.931786][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.931797][ T7308] R13: 00007effdebe6218 R14: 00007effdebe6180 R15: 00007fff67423d08 [ 190.931826][ T7308] [ 191.218981][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.5.299'. [ 191.338888][ T7290] bond0: (slave veth5): Enslaving as an active interface with a down link [ 191.616733][ T30] audit: type=1400 audit(1761205209.131:481): avc: denied { getopt } for pid=7314 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.990498][ T30] audit: type=1400 audit(1761205209.311:482): avc: denied { write } for pid=7318 comm="syz.5.302" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 194.039094][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.045519][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.111598][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.401549][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 194.465809][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.513182][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 194.604379][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.621061][ T7365] netlink: 7 bytes leftover after parsing attributes in process `syz.4.309'. [ 194.661305][ T10] usb 2-1: config 1 interface 2 has no altsetting 0 [ 194.664107][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.664135][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.664156][ T10] usb 2-1: Product: syz [ 194.664172][ T10] usb 2-1: Manufacturer: syz [ 194.664188][ T10] usb 2-1: SerialNumber: syz [ 195.457073][ T30] audit: type=1400 audit(1761205212.971:483): avc: denied { setopt } for pid=7375 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.722110][ T7365] pim6reg: entered allmulticast mode [ 196.100357][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 196.121433][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 196.598243][ T10] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 196.706422][ T10] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 196.731600][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 196.763621][ T10] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 196.775801][ T10] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 196.787110][ T10] usb 2-1: selecting invalid altsetting 0 [ 196.830557][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 196.843871][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 196.873095][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 196.924501][ T10] usb 2-1: selecting invalid altsetting 0 [ 197.249570][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 197.425700][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.482152][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.534617][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.711717][ T42] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 197.721314][ T10] usb 2-1: USB disconnect, device number 18 [ 197.731089][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.754072][ T42] usb 3-1: Product: syz [ 197.758258][ T42] usb 3-1: Manufacturer: syz [ 197.819891][ T42] usb 3-1: SerialNumber: syz [ 197.838720][ T42] usb 3-1: config 0 descriptor?? [ 199.231257][ T42] usb 3-1: USB disconnect, device number 21 [ 200.013305][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.092727][ T30] audit: type=1400 audit(1761205217.601:484): avc: denied { listen } for pid=7403 comm="syz.5.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.353877][ T7438] tipc: Started in network mode [ 201.358827][ T7438] tipc: Node identity 5ee7c0828f58, cluster identity 4711 [ 201.376596][ T7438] tipc: Enabled bearer , priority 0 [ 201.419947][ T7438] syzkaller0: entered promiscuous mode [ 201.431730][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 201.449138][ T7438] syzkaller0: entered allmulticast mode [ 201.662933][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.681920][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.764162][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.810133][ T7428] tipc: Resetting bearer [ 201.826075][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.003083][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.527027][ T1547] tipc: Node number set to 3519004802 [ 202.536281][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.563257][ T7428] tipc: Disabling bearer [ 202.583587][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.672558][ T30] audit: type=1400 audit(1761205220.161:485): avc: denied { firmware_load } for pid=7457 comm="syz.3.330" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 202.710580][ T10] usb 3-1: Product: syz [ 202.724497][ T7463] syz.3.330 (7463) used greatest stack depth: 19720 bytes left [ 202.725781][ T10] usb 3-1: Manufacturer: syz [ 202.824405][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 202.858699][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 202.885367][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 202.905459][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 205.671318][ T1547] usb 3-1: USB disconnect, device number 22 [ 205.771140][ T30] audit: type=1400 audit(1761205223.281:486): avc: denied { create } for pid=7490 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.856167][ T30] audit: type=1400 audit(1761205223.321:487): avc: denied { connect } for pid=7490 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.034704][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 206.061841][ T5936] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 206.234814][ T5936] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.244453][ T5936] usb 6-1: config 179 has no interface number 0 [ 206.251530][ T5936] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 206.288697][ T30] audit: type=1400 audit(1761205223.781:488): avc: denied { unlink } for pid=7494 comm="syz.1.337" name="#1" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 206.338907][ T5936] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 206.386627][ T5936] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 206.399468][ T5936] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.598057][ T5936] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 206.647881][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 206.656495][ T5936] usb 6-1: Product: syz [ 206.703608][ T7491] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 206.925889][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.336'. [ 206.972776][ T5936] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input11 [ 208.951974][ T42] usb 6-1: USB disconnect, device number 6 [ 208.952008][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 208.966109][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 210.686959][ T7554] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 210.885487][ T7554] bond1: (slave veth3): Enslaving as an active interface with a down link [ 210.910842][ T7556] bond1: entered promiscuous mode [ 210.916958][ T7556] bond1: entered allmulticast mode [ 210.922566][ T7556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.680419][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 212.210943][ T30] audit: type=1400 audit(1761205229.491:489): avc: denied { ioctl } for pid=7574 comm="syz.3.357" path="socket:[17121]" dev="sockfs" ino=17121 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 212.355668][ T30] audit: type=1400 audit(1761205229.501:490): avc: denied { connect } for pid=7574 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 212.544308][ T30] audit: type=1400 audit(1761205230.061:491): avc: denied { read write } for pid=7586 comm="syz.2.361" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 212.764600][ T7587] siw: device registration error -23 [ 212.903357][ T30] audit: type=1400 audit(1761205230.061:492): avc: denied { open } for pid=7586 comm="syz.2.361" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 214.682356][ T911] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 215.123916][ T7609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.283083][ T911] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 215.292632][ T911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.317245][ T911] usb 6-1: config 0 descriptor?? [ 215.378528][ T911] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 215.855747][ T911] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 216.880452][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 218.017109][ T7603] syz.5.366 (7603): drop_caches: 2 [ 218.215880][ T911] gspca_cpia1: usb_control_msg 02, error -71 [ 218.234433][ T911] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 219.058412][ T7640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.227023][ T7640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.420211][ T911] usb 6-1: USB disconnect, device number 7 [ 219.426186][ T30] audit: type=1400 audit(1761205236.711:493): avc: denied { watch } for pid=7630 comm="syz.2.373" path="/88/file0" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.683946][ T30] audit: type=1400 audit(1761205236.721:494): avc: denied { watch_sb watch_reads } for pid=7630 comm="syz.2.373" path="/88/file0" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 220.526327][ T30] audit: type=1326 audit(1761205237.971:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.3.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82a58efc9 code=0x0 [ 220.755228][ T7665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.380'. [ 220.901863][ T42] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 221.137121][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 221.271392][ T24] usb 4-1: device descriptor read/64, error -71 [ 221.293078][ T42] usb 6-1: config index 0 descriptor too short (expected 23035, got 92) [ 221.311445][ T42] usb 6-1: config 215 has too many interfaces: 89, using maximum allowed: 32 [ 221.320492][ T42] usb 6-1: config 215 has an invalid descriptor of length 1, skipping remainder of the config [ 221.341449][ T42] usb 6-1: config 215 has 0 interfaces, different from the descriptor's value: 89 [ 221.858319][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.901760][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.935019][ T42] usb 6-1: Product: syz [ 221.939214][ T42] usb 6-1: Manufacturer: syz [ 222.111287][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 222.564408][ T42] usb 6-1: SerialNumber: syz [ 222.762063][ T24] usb 4-1: device descriptor read/64, error -71 [ 222.886544][ T24] usb usb4-port1: attempt power cycle [ 222.943018][ T7659] libceph: resolve '4.' (ret=-3): failed [ 223.043032][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.067419][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.640028][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.653226][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.899211][ T42] usb 6-1: USB disconnect, device number 8 [ 225.313044][ T7696] block nbd4: shutting down sockets [ 225.747489][ T30] audit: type=1400 audit(1761205242.951:496): avc: denied { ioctl } for pid=7699 comm="syz.3.391" path="socket:[19740]" dev="sockfs" ino=19740 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.825806][ T30] audit: type=1400 audit(1761205242.951:497): avc: denied { bind } for pid=7699 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.757704][ T30] audit: type=1400 audit(1761205246.271:498): avc: denied { view } for pid=7734 comm="syz.5.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 228.891906][ T7738] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 229.305359][ T30] audit: type=1400 audit(1761205246.811:499): avc: denied { mount } for pid=7744 comm="syz.3.402" name="/" dev="autofs" ino=20017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.678148][ T30] audit: type=1400 audit(1761205247.161:500): avc: denied { mounton } for pid=7744 comm="syz.3.402" path="/44/file1" dev="autofs" ino=20017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 230.267730][ T7756] block nbd5: shutting down sockets [ 231.572536][ T30] audit: type=1400 audit(1761205249.091:501): avc: denied { unmount } for pid=6604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 231.675529][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'. [ 232.136119][ T30] audit: type=1400 audit(1761205249.121:502): avc: denied { unmount } for pid=6604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 232.995174][ T7772] batman_adv: batadv0: Adding interface: ipvlan4 [ 233.051602][ T7772] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.229788][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.246228][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.257042][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 233.257982][ T7788] loop6: detected capacity change from 0 to 524288000 [ 234.277940][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.761287][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 234.895191][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.905470][ T7772] batman_adv: batadv0: Interface activated: ipvlan4 [ 235.431264][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.904594][ T7837] block nbd4: shutting down sockets [ 239.707414][ T30] audit: type=1400 audit(1761205257.221:503): avc: denied { mounton } for pid=7848 comm="syz.4.431" path="/106/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 239.707444][ T7850] fuse: Bad value for 'fd' [ 239.819557][ T7854] overlay: ./file0 is not a directory [ 240.352021][ T7861] ptrace attach of "./syz-executor exec"[6604] was attempted by "./syz-executor exec"[7861] [ 240.435085][ T30] audit: type=1400 audit(1761205257.951:504): avc: denied { getopt } for pid=7859 comm="syz.2.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.572220][ T7873] affs: No valid root block on device nullb0 [ 240.682979][ T30] audit: type=1400 audit(1761205257.971:505): avc: denied { shutdown } for pid=7853 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.152460][ T911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 241.641718][ T911] usb 5-1: config 0 interface 0 altsetting 124 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 241.653869][ T911] usb 5-1: config 0 interface 0 altsetting 124 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.677928][ T911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 242.684777][ T911] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 242.693894][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.833533][ T911] usb 5-1: config 0 descriptor?? [ 242.917915][ T30] audit: type=1400 audit(1761205260.431:506): avc: denied { create } for pid=7896 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 243.590224][ T7906] block nbd2: NBD_DISCONNECT [ 243.595024][ T7906] block nbd2: Disconnected due to user request. [ 243.601394][ T7906] block nbd2: shutting down sockets [ 243.673827][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 243.982519][ T911] koneplus 0003:1E7D:2E22.0006: item fetching failed at offset 5/7 [ 244.001450][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 244.023893][ T10] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 244.031835][ T911] koneplus 0003:1E7D:2E22.0006: parse failed [ 244.033576][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.050408][ T911] koneplus 0003:1E7D:2E22.0006: probe with driver koneplus failed with error -22 [ 244.075715][ T10] usb 6-1: Product: syz [ 244.089236][ T10] usb 6-1: Manufacturer: syz [ 244.332322][ T10] usb 6-1: SerialNumber: syz [ 244.437659][ T911] usb 5-1: USB disconnect, device number 8 [ 245.334473][ T10] usb 6-1: config 0 descriptor?? [ 245.346781][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 245.976592][ T10] gspca_sq930x: ucbus_write failed -71 [ 245.982407][ T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 246.004669][ T10] usb 6-1: USB disconnect, device number 9 [ 249.362537][ T7956] block nbd4: NBD_DISCONNECT [ 249.367205][ T7956] block nbd4: Disconnected due to user request. [ 249.373485][ T7956] block nbd4: shutting down sockets [ 251.204838][ T7952] batman_adv: batadv0: Adding interface: ipvlan4 [ 251.215165][ T7952] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.216273][ T7973] loop6: detected capacity change from 0 to 524288000 [ 251.290121][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.300906][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.311052][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 251.329242][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.344048][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 251.356295][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.367984][ T7952] batman_adv: batadv0: Interface activated: ipvlan4 [ 251.898336][ T7981] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 252.040158][ T7981] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.242873][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 254.301310][ T8006] bridge: RTM_NEWNEIGH with invalid ether address [ 254.837376][ T8014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.469'. [ 255.381460][ T30] audit: type=1326 audit(1761205272.811:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.468372][ T30] audit: type=1326 audit(1761205272.811:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.513805][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530503][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.552793][ T30] audit: type=1326 audit(1761205272.811:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.578320][ T30] audit: type=1326 audit(1761205272.811:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.774259][ T30] audit: type=1326 audit(1761205272.811:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.830708][ T8026] lo speed is unknown, defaulting to 1000 [ 255.874788][ T30] audit: type=1326 audit(1761205272.821:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.924895][ T30] audit: type=1326 audit(1761205272.831:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.954225][ T30] audit: type=1326 audit(1761205272.831:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 255.980099][ T30] audit: type=1326 audit(1761205272.831:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 256.085790][ T30] audit: type=1326 audit(1761205272.831:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1d8efc9 code=0x7ffc0000 [ 256.160651][ T8036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.481'. [ 256.214672][ T8038] netlink: 'syz.1.484': attribute type 9 has an invalid length. [ 256.222340][ T8038] netlink: 'syz.1.484': attribute type 7 has an invalid length. [ 256.229961][ T8038] netlink: 'syz.1.484': attribute type 8 has an invalid length. [ 256.951390][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 257.401368][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 258.354781][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 258.463362][ T10] usb 6-1: config 0 has no interface number 0 [ 258.480878][ T10] usb 6-1: config 0 interface 2 has no altsetting 0 [ 258.518597][ T10] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 258.547052][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.577433][ T10] usb 6-1: Product: syz [ 258.596915][ T10] usb 6-1: Manufacturer: syz [ 258.613929][ T10] usb 6-1: SerialNumber: syz [ 258.662227][ T10] usb 6-1: config 0 descriptor?? [ 259.091761][ T8045] loop7: detected capacity change from 4 to 0 [ 259.099553][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.108321][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.190053][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.558892][ T10] usb 6-1: USB disconnect, device number 10 [ 260.797511][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 260.816555][ T8083] udevd[8083]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.888756][ T8078] netlink: 224 bytes leftover after parsing attributes in process `syz.2.494'. [ 260.967392][ T8090] loop6: detected capacity change from 0 to 524288000 [ 261.197275][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 262.206359][ T8105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.672918][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 264.169228][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 264.169243][ T30] audit: type=1400 audit(1761205281.671:526): avc: denied { create } for pid=8118 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 264.175257][ T5977] Bluetooth: hci3: Frame reassembly failed (-84) [ 264.201662][ T8120] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 264.399168][ T30] audit: type=1400 audit(1761205281.671:527): avc: denied { bind } for pid=8118 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.439934][ T5820] Bluetooth: hci3: command 0x1003 tx timeout [ 266.457758][ T5816] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 352.017768][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.036830][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.341068][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 378.348046][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P8083/1:b..l P7431/1:b..l P5813/1:b..l P5829/1:b..l [ 378.360690][ C1] rcu: (detected by 1, t=10503 jiffies, g=23557, q=830 ncpus=2) [ 378.368409][ C1] task:udevd state:R running task stack:25592 pid:5829 tgid:5829 ppid:5184 task_flags:0x40014c flags:0x00080001 [ 378.383031][ C1] Call Trace: [ 378.386314][ C1] [ 378.389245][ C1] __schedule+0x1190/0x5de0 [ 378.393776][ C1] ? __pfx___schedule+0x10/0x10 [ 378.398644][ C1] ? mark_held_locks+0x49/0x80 [ 378.403424][ C1] preempt_schedule_irq+0x51/0x90 [ 378.408456][ C1] irqentry_exit+0x36/0x90 [ 378.412875][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.418855][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 378.424049][ C1] Code: 65 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 0a e9 0e 0f 82 74 02 00 00 8b 35 aa 3a e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 65 08 12 0f 85 c7 02 00 00 48 83 c4 [ 378.443657][ C1] RSP: 0018:ffffc90003127720 EFLAGS: 00000206 [ 378.449726][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000dbfb52df [ 378.457693][ C1] RDX: 0000000000000000 RSI: ffffffff8da047c8 RDI: ffffffff8bf06cc0 [ 378.465670][ C1] RBP: 0000000000000002 R08: 11edc8a8be3b5a24 R09: 0000000000000000 [ 378.473640][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 378.481608][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.489600][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 378.494805][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.500967][ C1] unwind_next_frame+0xd1/0x20a0 [ 378.505907][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 378.511021][ C1] ? do_syscall_64+0xcd/0xfa0 [ 378.515722][ C1] ? unwind_get_return_address+0x59/0xa0 [ 378.521357][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.527532][ C1] arch_stack_walk+0x94/0x100 [ 378.532213][ C1] ? do_syscall_64+0xcd/0xfa0 [ 378.536902][ C1] stack_trace_save+0x8e/0xc0 [ 378.541583][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 378.546964][ C1] ? kasan_save_stack+0x42/0x60 [ 378.551811][ C1] ? kasan_save_stack+0x33/0x60 [ 378.556656][ C1] kasan_save_stack+0x33/0x60 [ 378.561330][ C1] ? kasan_save_stack+0x33/0x60 [ 378.566173][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 378.571547][ C1] ? kmem_cache_free+0x15e/0x6c0 [ 378.576490][ C1] ? exit_mmap+0x50a/0xb90 [ 378.580909][ C1] ? __mmput+0x12a/0x410 [ 378.585149][ C1] ? mmput+0x62/0x70 [ 378.589041][ C1] ? do_exit+0x7c7/0x2bf0 [ 378.593371][ C1] ? do_group_exit+0xd3/0x2a0 [ 378.598051][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 378.603254][ C1] ? x64_sys_call+0x150b/0x1730 [ 378.608109][ C1] ? do_syscall_64+0xcd/0xfa0 [ 378.612833][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 378.618077][ C1] kmem_cache_free+0x15e/0x6c0 [ 378.622837][ C1] ? exit_mmap+0x50a/0xb90 [ 378.627260][ C1] ? exit_mmap+0x50a/0xb90 [ 378.631678][ C1] exit_mmap+0x50a/0xb90 [ 378.635925][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 378.640712][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 378.646263][ C1] __mmput+0x12a/0x410 [ 378.650336][ C1] mmput+0x62/0x70 [ 378.654058][ C1] do_exit+0x7c7/0x2bf0 [ 378.658227][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.663251][ C1] ? __pfx_do_exit+0x10/0x10 [ 378.667890][ C1] ? rcu_is_watching+0x12/0xc0 [ 378.672693][ C1] do_group_exit+0xd3/0x2a0 [ 378.677212][ C1] __x64_sys_exit_group+0x3e/0x50 [ 378.682245][ C1] x64_sys_call+0x150b/0x1730 [ 378.686928][ C1] do_syscall_64+0xcd/0xfa0 [ 378.691443][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.697335][ C1] RIP: 0033:0x7fe5bf0f16c5 [ 378.701747][ C1] RSP: 002b:00007ffd765ec4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 378.710157][ C1] RAX: ffffffffffffffda RBX: 0000564712537280 RCX: 00007fe5bf0f16c5 [ 378.718123][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 378.726090][ C1] RBP: 00005647122f82c0 R08: 0000000000000000 R09: 0000000000000000 [ 378.734060][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.742030][ C1] R13: 00007ffd765ec530 R14: 0000000000000000 R15: 0000000000000000 [ 378.750014][ C1] [ 378.753024][ C1] task:udevd state:R running task stack:26344 pid:5813 tgid:5813 ppid:5184 task_flags:0x40014c flags:0x00080001 [ 378.766522][ C1] Call Trace: [ 378.769797][ C1] [ 378.772731][ C1] __schedule+0x1190/0x5de0 [ 378.777247][ C1] ? irqentry_exit+0x3b/0x90 [ 378.781859][ C1] ? __pfx___schedule+0x10/0x10 [ 378.786709][ C1] ? lock_acquire+0x179/0x350 [ 378.791391][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.796418][ C1] ? find_held_lock+0x2b/0x80 [ 378.801112][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 378.806502][ C1] preempt_schedule_common+0x44/0xc0 [ 378.811796][ C1] preempt_schedule_thunk+0x16/0x30 [ 378.817012][ C1] _raw_spin_unlock+0x3e/0x50 [ 378.821692][ C1] unmap_page_range+0xf71/0x41b0 [ 378.826662][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 378.832037][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 378.836986][ C1] ? uprobe_munmap+0x20/0x600 [ 378.841667][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 378.847571][ C1] unmap_vmas+0x218/0x470 [ 378.851908][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 378.856782][ C1] exit_mmap+0x1b2/0xb90 [ 378.861030][ C1] ? trace_contention_end+0xdd/0x130 [ 378.866326][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 378.871113][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 378.876666][ C1] __mmput+0x12a/0x410 [ 378.880740][ C1] mmput+0x62/0x70 [ 378.884465][ C1] do_exit+0x7c7/0x2bf0 [ 378.888638][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.893709][ C1] ? __pfx_do_exit+0x10/0x10 [ 378.898310][ C1] ? rcu_is_watching+0x12/0xc0 [ 378.903081][ C1] do_group_exit+0xd3/0x2a0 [ 378.907602][ C1] __x64_sys_exit_group+0x3e/0x50 [ 378.912642][ C1] x64_sys_call+0x150b/0x1730 [ 378.917334][ C1] do_syscall_64+0xcd/0xfa0 [ 378.921853][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.927745][ C1] RIP: 0033:0x7fe5bf0f16c5 [ 378.932156][ C1] RSP: 002b:00007ffd765ec4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 378.940568][ C1] RAX: ffffffffffffffda RBX: 0000564712766310 RCX: 00007fe5bf0f16c5 [ 378.948539][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 378.956530][ C1] RBP: 00005647122f82c0 R08: 0000000000000000 R09: 0000000000000000 [ 378.964512][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.972937][ C1] R13: 00007ffd765ec530 R14: 0000000000000000 R15: 0000000000000000 [ 378.980934][ C1] [ 378.983950][ C1] task:udevd state:R running task stack:27144 pid:7431 tgid:7431 ppid:5184 task_flags:0x40014c flags:0x00080001 [ 378.997442][ C1] Call Trace: [ 379.000750][ C1] [ 379.003700][ C1] __schedule+0x1190/0x5de0 [ 379.008219][ C1] ? __page_table_check_zero+0x346/0x5d0 [ 379.013895][ C1] ? __pfx___schedule+0x10/0x10 [ 379.018796][ C1] ? mark_held_locks+0x49/0x80 [ 379.023581][ C1] preempt_schedule_irq+0x51/0x90 [ 379.028617][ C1] irqentry_exit+0x36/0x90 [ 379.033045][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.039045][ C1] RIP: 0010:lock_acquire+0x121/0x350 [ 379.044338][ C1] Code: e8 04 82 8c 00 8b 0d 02 3a e9 0e 85 c9 0f 84 b1 00 00 00 65 8b 05 67 a6 08 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 a7 64 08 12 <8b> 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 fa 48 c7 c7 [ 379.063963][ C1] RSP: 0018:ffffc90003527540 EFLAGS: 00000246 [ 379.070036][ C1] RAX: ffff88802b998000 RBX: ffffffff8e3c4460 RCX: 0000000000000001 [ 379.078011][ C1] RDX: 0000000000000000 RSI: ffffffff816c15f1 RDI: fffffbfff1c7888c [ 379.085984][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 379.093955][ C1] R10: 0000000000000000 R11: 000000000001255f R12: 0000000000000000 [ 379.101930][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.109922][ C1] ? unwind_next_frame+0xd1/0x20a0 [ 379.115055][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 379.120276][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.126445][ C1] unwind_next_frame+0xd1/0x20a0 [ 379.131389][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 379.136528][ C1] ? kmem_cache_free+0x147/0x6c0 [ 379.141472][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.147636][ C1] arch_stack_walk+0x94/0x100 [ 379.152323][ C1] ? kmem_cache_free+0x147/0x6c0 [ 379.157264][ C1] stack_trace_save+0x8e/0xc0 [ 379.161949][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 379.167335][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 379.172283][ C1] kasan_save_stack+0x33/0x60 [ 379.176957][ C1] ? kasan_save_stack+0x33/0x60 [ 379.181807][ C1] ? kasan_save_track+0x14/0x30 [ 379.186650][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 379.191473][ C1] ? kmem_cache_free+0x147/0x6c0 [ 379.196462][ C1] kasan_save_track+0x14/0x30 [ 379.201134][ C1] __kasan_kmalloc+0xaa/0xb0 [ 379.205725][ C1] kmem_cache_free+0x147/0x6c0 [ 379.210481][ C1] ? __put_anon_vma+0x114/0x3a0 [ 379.215339][ C1] ? __put_anon_vma+0x114/0x3a0 [ 379.220188][ C1] __put_anon_vma+0x114/0x3a0 [ 379.224871][ C1] unlink_anon_vmas+0x58a/0x820 [ 379.229814][ C1] free_pgtables+0x212/0xc00 [ 379.234410][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 379.239525][ C1] ? __pfx_down_write+0x10/0x10 [ 379.244381][ C1] exit_mmap+0x3f4/0xb90 [ 379.248629][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 379.253416][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 379.258967][ C1] __mmput+0x12a/0x410 [ 379.263040][ C1] mmput+0x62/0x70 [ 379.266763][ C1] do_exit+0x7c7/0x2bf0 [ 379.270936][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 379.275959][ C1] ? __pfx_do_exit+0x10/0x10 [ 379.280562][ C1] ? rcu_is_watching+0x12/0xc0 [ 379.285337][ C1] do_group_exit+0xd3/0x2a0 [ 379.289851][ C1] __x64_sys_exit_group+0x3e/0x50 [ 379.294886][ C1] x64_sys_call+0x150b/0x1730 [ 379.299567][ C1] do_syscall_64+0xcd/0xfa0 [ 379.304084][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.309976][ C1] RIP: 0033:0x7fe5bf0f16c5 [ 379.314385][ C1] RSP: 002b:00007ffd765ec4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 379.322798][ C1] RAX: ffffffffffffffda RBX: 000056471254b010 RCX: 00007fe5bf0f16c5 [ 379.330768][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 379.338738][ C1] RBP: 00005647122f82c0 R08: 0000000000000000 R09: 0000000000000000 [ 379.346711][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.354681][ C1] R13: 00007ffd765ec530 R14: 0000000000000000 R15: 0000000000000000 [ 379.362683][ C1] [ 379.365708][ C1] task:udevd state:R running task stack:26136 pid:8083 tgid:8083 ppid:5184 task_flags:0x40014c flags:0x00080001 [ 379.379205][ C1] Call Trace: [ 379.382482][ C1] [ 379.385411][ C1] __schedule+0x1190/0x5de0 [ 379.389926][ C1] ? __lock_acquire+0x622/0x1c90 [ 379.394886][ C1] ? __pfx___schedule+0x10/0x10 [ 379.399740][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 379.404949][ C1] ? mark_held_locks+0x49/0x80 [ 379.409734][ C1] preempt_schedule_irq+0x51/0x90 [ 379.414769][ C1] irqentry_exit+0x36/0x90 [ 379.419189][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.425169][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 379.430453][ C1] Code: 0f c1 05 c8 ac 08 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 dd 6a 08 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 379.450147][ C1] RSP: 0018:ffffc9000d5bf2c0 EFLAGS: 00000206 [ 379.456228][ C1] RAX: a350890016998f00 RBX: ffffffff8e3c4460 RCX: ffffc9000d5bf2cc [ 379.464199][ C1] RDX: 0000000000000002 RSI: ffffffff8da047c8 RDI: ffffffff8bf06cc0 [ 379.472169][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 379.480138][ C1] R10: 0000000000000000 R11: 0000000000011aa7 R12: ffffffff816c1914 [ 379.488111][ C1] R13: 0000000000000202 R14: ffff8880258ea480 R15: 0000000000000003 [ 379.496082][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 379.501302][ C1] unwind_next_frame+0x3f9/0x20a0 [ 379.506331][ C1] ? kmem_cache_free+0x171/0x6c0 [ 379.511269][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.517426][ C1] arch_stack_walk+0x94/0x100 [ 379.522107][ C1] ? __put_anon_vma+0x114/0x3a0 [ 379.526967][ C1] stack_trace_save+0x8e/0xc0 [ 379.531650][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 379.537049][ C1] kasan_save_stack+0x33/0x60 [ 379.541721][ C1] ? kasan_save_stack+0x33/0x60 [ 379.546565][ C1] ? kasan_save_track+0x14/0x30 [ 379.551416][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 379.556437][ C1] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 379.562073][ C1] ? kmem_alloc_batch+0x49/0x170 [ 379.567015][ C1] ? debug_objects_fill_pool+0x23f/0x520 [ 379.572651][ C1] ? debug_object_activate+0x10b/0x4c0 [ 379.578120][ C1] ? __call_rcu_common.constprop.0+0x35/0xa10 [ 379.584186][ C1] ? kmem_cache_free+0x171/0x6c0 [ 379.589160][ C1] kasan_save_track+0x14/0x30 [ 379.593834][ C1] __kasan_slab_alloc+0x89/0x90 [ 379.598690][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 379.604157][ C1] ? kmem_alloc_batch+0x49/0x170 [ 379.609109][ C1] ? kmem_alloc_batch+0x49/0x170 [ 379.614049][ C1] kmem_alloc_batch+0x49/0x170 [ 379.618823][ C1] debug_objects_fill_pool+0x23f/0x520 [ 379.624291][ C1] ? do_exit+0x7c7/0x2bf0 [ 379.628632][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 379.634627][ C1] ? do_syscall_64+0xcd/0xfa0 [ 379.639321][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 379.645487][ C1] debug_object_activate+0x10b/0x4c0 [ 379.650786][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 379.656612][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 379.662785][ C1] __call_rcu_common.constprop.0+0x35/0xa10 [ 379.668690][ C1] kmem_cache_free+0x171/0x6c0 [ 379.673447][ C1] ? __put_anon_vma+0x114/0x3a0 [ 379.678308][ C1] ? __put_anon_vma+0x114/0x3a0 [ 379.683162][ C1] __put_anon_vma+0x114/0x3a0 [ 379.687845][ C1] unlink_anon_vmas+0x58a/0x820 [ 379.692709][ C1] free_pgtables+0x212/0xc00 [ 379.697307][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 379.702429][ C1] ? __pfx_down_write+0x10/0x10 [ 379.707289][ C1] exit_mmap+0x3f4/0xb90 [ 379.711538][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 379.716328][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 379.721891][ C1] __mmput+0x12a/0x410 [ 379.725965][ C1] mmput+0x62/0x70 [ 379.729688][ C1] do_exit+0x7c7/0x2bf0 [ 379.733854][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 379.738884][ C1] ? __pfx_do_exit+0x10/0x10 [ 379.743505][ C1] ? rcu_is_watching+0x12/0xc0 [ 379.748290][ C1] do_group_exit+0xd3/0x2a0 [ 379.752807][ C1] __x64_sys_exit_group+0x3e/0x50 [ 379.757848][ C1] x64_sys_call+0x150b/0x1730 [ 379.762540][ C1] do_syscall_64+0xcd/0xfa0 [ 379.767064][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.772957][ C1] RIP: 0033:0x7fe5bf0f16c5 [ 379.777364][ C1] RSP: 002b:00007ffd765ec4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 379.785774][ C1] RAX: ffffffffffffffda RBX: 000056471256a5c0 RCX: 00007fe5bf0f16c5 [ 379.793748][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 379.801729][ C1] RBP: 00005647122f82c0 R08: 0000000000000000 R09: 0000000000000000 [ 379.809700][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.817672][ C1] R13: 00007ffd765ec530 R14: 0000000000000000 R15: 0000000000000000 [ 379.825670][ C1] [ 379.828689][ C1] task:kthreadd state:R running task stack:26776 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00080000 [ 379.842190][ C1] Call Trace: [ 379.845470][ C1] [ 379.848400][ C1] __schedule+0x1190/0x5de0 [ 379.852921][ C1] ? __lock_acquire+0x622/0x1c90 [ 379.857878][ C1] ? __pfx___schedule+0x10/0x10 [ 379.862734][ C1] ? __lock_acquire+0x622/0x1c90 [ 379.867692][ C1] ? mark_held_locks+0x49/0x80 [ 379.872468][ C1] preempt_schedule_irq+0x51/0x90 [ 379.877503][ C1] irqentry_exit+0x36/0x90 [ 379.881925][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.887909][ C1] RIP: 0010:lock_acquire+0x1c/0x350 [ 379.893109][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 4d 89 cf 41 56 41 89 f6 41 55 41 89 d5 41 54 45 89 c4 55 89 cd 53 <48> 89 fb 48 83 ec 38 65 48 8b 05 8d 65 08 12 48 89 44 24 30 31 c0 [ 379.912720][ C1] RSP: 0018:ffffc900000775a0 EFLAGS: 00000246 [ 379.918798][ C1] RAX: ffffffff816c15dd RBX: 0000000000000001 RCX: 0000000000000002 [ 379.926769][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c4460 [ 379.934747][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 379.942724][ C1] R10: 0000000000000000 R11: 00000000000125b1 R12: 0000000000000000 [ 379.950694][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.958676][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 379.963806][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.969971][ C1] unwind_next_frame+0xd1/0x20a0 [ 379.974919][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 379.980041][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 379.985082][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.991251][ C1] arch_stack_walk+0x94/0x100 [ 379.995943][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 380.000980][ C1] stack_trace_save+0x8e/0xc0 [ 380.005670][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 380.011051][ C1] ? __lock_acquire+0x622/0x1c90 [ 380.015989][ C1] save_stack+0x160/0x1f0 [ 380.020324][ C1] ? __pfx_save_stack+0x10/0x10 [ 380.025179][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 380.030549][ C1] ? qlist_free_all+0x4d/0x120 [ 380.035307][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 380.040934][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 380.045964][ C1] ? page_ext_put+0x3e/0xd0 [ 380.050480][ C1] __reset_page_owner+0x84/0x1a0 [ 380.055420][ C1] __free_frozen_pages+0x7df/0x1160 [ 380.060648][ C1] qlist_free_all+0x4d/0x120 [ 380.065246][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 380.070722][ C1] __kasan_slab_alloc+0x69/0x90 [ 380.075584][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 380.081063][ C1] ? alloc_pid+0xc7/0xbc0 [ 380.085401][ C1] ? alloc_pid+0xc7/0xbc0 [ 380.089732][ C1] alloc_pid+0xc7/0xbc0 [ 380.093889][ C1] ? __asan_memset+0x23/0x50 [ 380.098498][ C1] copy_process+0x49a3/0x76a0 [ 380.103197][ C1] ? __pfx_copy_process+0x10/0x10 [ 380.108229][ C1] ? lock_acquire+0x179/0x350 [ 380.112901][ C1] ? find_held_lock+0x2b/0x80 [ 380.118018][ C1] kernel_clone+0xfc/0x930 [ 380.122438][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.127643][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 380.133454][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 380.138499][ C1] ? __pfx_kthread+0x10/0x10 [ 380.143087][ C1] kernel_thread+0xd7/0x120 [ 380.147600][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 380.152729][ C1] ? __pfx_kthread+0x10/0x10 [ 380.157317][ C1] ? find_held_lock+0x2b/0x80 [ 380.162007][ C1] ? kthreadd+0x495/0x800 [ 380.166337][ C1] kthreadd+0x503/0x800 [ 380.170489][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.175164][ C1] ret_from_fork+0x675/0x7d0 [ 380.179756][ C1] ? __pfx_kthreadd+0x10/0x10 [ 380.184437][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.189224][ C1] [ 380.192235][ C1] rcu: rcu_preempt kthread starved for 825 jiffies! g23557 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 380.203251][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 380.213217][ C1] rcu: RCU grace-period kthread stack dump: [ 380.219097][ C1] task:rcu_preempt state:R running task stack:27944 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 380.232603][ C1] Call Trace: [ 380.235875][ C1] [ 380.238803][ C1] __schedule+0x1190/0x5de0 [ 380.243329][ C1] ? __pfx___schedule+0x10/0x10 [ 380.248189][ C1] ? find_held_lock+0x2b/0x80 [ 380.252877][ C1] ? schedule+0x2d7/0x3a0 [ 380.257218][ C1] schedule+0xe7/0x3a0 [ 380.261290][ C1] schedule_timeout+0x123/0x290 [ 380.266140][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 380.271511][ C1] ? __pfx_process_timeout+0x10/0x10 [ 380.276804][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 380.282616][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 380.288086][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 380.292853][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 380.298136][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.303342][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 380.308276][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 380.313123][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 380.318940][ C1] rcu_gp_kthread+0x26d/0x380 [ 380.323612][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.328803][ C1] ? rcu_is_watching+0x12/0xc0 [ 380.333569][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.338788][ C1] ? __kthread_parkme+0x19e/0x250 [ 380.343820][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.349018][ C1] kthread+0x3c5/0x780 [ 380.353088][ C1] ? __pfx_kthread+0x10/0x10 [ 380.357677][ C1] ? rcu_is_watching+0x12/0xc0 [ 380.362441][ C1] ? __pfx_kthread+0x10/0x10 [ 380.367027][ C1] ret_from_fork+0x675/0x7d0 [ 380.371614][ C1] ? __pfx_kthread+0x10/0x10 [ 380.376200][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.380978][ C1] [ 380.383983][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 380.390292][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 380.399224][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.409278][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 380.414481][ C1] Code: 65 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 0a e9 0e 0f 82 74 02 00 00 8b 35 aa 3a e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 65 08 12 0f 85 c7 02 00 00 48 83 c4 [ 380.434089][ C1] RSP: 0018:ffffc90000a07f40 EFLAGS: 00000206 [ 380.440152][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 000000007938eb5a [ 380.448119][ C1] RDX: 0000000000000000 RSI: ffffffff8da047c8 RDI: ffffffff8bf06cc0 [ 380.456089][ C1] RBP: 0000000000000002 R08: 39529a686290c103 R09: 0000000000000000 [ 380.464055][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 380.472024][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.479991][ C1] FS: 0000000000000000(0000) GS:ffff888124b0b000(0000) knlGS:0000000000000000 [ 380.488923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.495512][ C1] CR2: 0000200000032000 CR3: 000000005a425000 CR4: 00000000003526f0 [ 380.503495][ C1] Call Trace: [ 380.506770][ C1] [ 380.509613][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 380.514824][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.520993][ C1] unwind_next_frame+0xd1/0x20a0 [ 380.525938][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 380.531048][ C1] ? net_rx_action+0x97f/0xef0 [ 380.535810][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.541975][ C1] arch_stack_walk+0x94/0x100 [ 380.546657][ C1] ? net_rx_action+0x97f/0xef0 [ 380.551426][ C1] stack_trace_save+0x8e/0xc0 [ 380.556105][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 380.561480][ C1] ? stack_trace_save+0x8e/0xc0 [ 380.566330][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 380.571710][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 380.577167][ C1] kasan_save_stack+0x33/0x60 [ 380.581835][ C1] ? kasan_save_stack+0x33/0x60 [ 380.586678][ C1] ? kasan_save_track+0x14/0x30 [ 380.591521][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 380.596539][ C1] ? kmem_cache_alloc_node_noprof+0x28a/0x770 [ 380.602615][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 380.607563][ C1] ? __alloc_skb+0x166/0x380 [ 380.612155][ C1] ? synproxy_send_client_synack+0x1af/0x8f0 [ 380.618139][ C1] ? nft_synproxy_do_eval+0xa63/0xd80 [ 380.623505][ C1] ? nft_do_chain+0x2e9/0x1920 [ 380.628270][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 380.633382][ C1] ? nf_hook_slow+0xbe/0x200 [ 380.637971][ C1] ? nf_hook.constprop.0+0x424/0x750 [ 380.643260][ C1] ? ip_local_deliver+0x169/0x1f0 [ 380.648282][ C1] ? ip_rcv+0x2e0/0x600 [ 380.652435][ C1] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 380.658506][ C1] ? __netif_receive_skb+0x1d/0x160 [ 380.663698][ C1] ? process_backlog+0x439/0x15e0 [ 380.668732][ C1] ? __napi_poll.constprop.0+0xba/0x550 [ 380.674363][ C1] ? net_rx_action+0x97f/0xef0 [ 380.679156][ C1] kasan_save_track+0x14/0x30 [ 380.683830][ C1] __kasan_slab_alloc+0x89/0x90 [ 380.688677][ C1] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 380.694582][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 380.699540][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 380.704484][ C1] kmalloc_reserve+0x18b/0x2c0 [ 380.709256][ C1] __alloc_skb+0x166/0x380 [ 380.713676][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 380.718626][ C1] synproxy_send_client_synack+0x1af/0x8f0 [ 380.724442][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 380.730775][ C1] ? nft_redir_init+0x10/0x2f0 [ 380.735551][ C1] nft_synproxy_do_eval+0xa63/0xd80 [ 380.740753][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 380.746467][ C1] ? siphash_3u32+0x1d/0x280 [ 380.751060][ C1] ? __asan_memset+0x23/0x50 [ 380.755652][ C1] ? nft_trace_init+0x278/0x440 [ 380.760600][ C1] ? __pfx_nft_osf_eval+0x10/0x10 [ 380.765660][ C1] ? siphash_3u32+0x1d/0x280 [ 380.770259][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 380.775718][ C1] nft_do_chain+0x2e9/0x1920 [ 380.780330][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 380.785360][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 380.790128][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.795339][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.800549][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 380.805334][ C1] nft_do_chain_inet+0x18a/0x340 [ 380.810280][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 380.815765][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 380.820810][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 380.826190][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 380.831655][ C1] nf_hook_slow+0xbe/0x200 [ 380.836076][ C1] nf_hook.constprop.0+0x424/0x750 [ 380.841188][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 380.847171][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 380.852802][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 380.857922][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 380.863914][ C1] ip_local_deliver+0x169/0x1f0 [ 380.868770][ C1] ip_rcv+0x2e0/0x600 [ 380.872752][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 380.877253][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 380.883146][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 380.889564][ C1] ? lock_acquire+0x179/0x350 [ 380.894680][ C1] ? process_backlog+0x3e7/0x15e0 [ 380.899710][ C1] __netif_receive_skb+0x1d/0x160 [ 380.904731][ C1] process_backlog+0x439/0x15e0 [ 380.909588][ C1] __napi_poll.constprop.0+0xba/0x550 [ 380.914961][ C1] ? skb_defer_free_flush+0x149/0x280 [ 380.920344][ C1] net_rx_action+0x97f/0xef0 [ 380.924934][ C1] ? find_held_lock+0x2b/0x80 [ 380.929620][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 380.934729][ C1] ? sched_balance_domains+0x283/0xee0 [ 380.940215][ C1] handle_softirqs+0x219/0x8e0 [ 380.944989][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 380.950279][ C1] __irq_exit_rcu+0x109/0x170 [ 380.954968][ C1] irq_exit_rcu+0x9/0x30 [ 380.959219][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 380.964873][ C1] [ 380.967801][ C1] [ 380.970724][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.976704][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 380.982352][ C1] Code: 17 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 e5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 381.001970][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 381.008054][ C1] RAX: 000000000256f033 RBX: 0000000000000001 RCX: ffffffff8b6042a9 [ 381.016029][ C1] RDX: 0000000000000000 RSI: ffffffff8da2a184 RDI: ffffffff8bf06cc0 [ 381.024093][ C1] RBP: ffffed1003ad3490 R08: 0000000000000001 R09: ffffed10170a6655 [ 381.032069][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 381.040042][ C1] R13: ffff88801d69a480 R14: ffffffff9081f4d0 R15: 0000000000000000 [ 381.048026][ C1] ? ct_kernel_exit+0x139/0x190 [ 381.052901][ C1] default_idle+0x13/0x20 [ 381.057228][ C1] default_idle_call+0x6c/0xb0 [ 381.061997][ C1] do_idle+0x38d/0x500 [ 381.066074][ C1] ? __pfx_do_idle+0x10/0x10 [ 381.070674][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 381.075888][ C1] cpu_startup_entry+0x4f/0x60 [ 381.080670][ C1] start_secondary+0x21d/0x2b0 [ 381.085886][ C1] ? __pfx_start_secondary+0x10/0x10 [ 381.091191][ C1] common_startup_64+0x13e/0x148 [ 381.096147][ C1] [ 383.524885][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.541102][ C0] sched: DL replenish lagged too much [ 385.569603][ T1296] ieee802154 phy1 wpan1: encryption failed: -22