last executing test programs: 13.387269009s ago: executing program 4 (id=39): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) (fail_nth: 1) 12.836008915s ago: executing program 4 (id=41): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 12.590831875s ago: executing program 3 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x1104, 0x4) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040)=0x6, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3a, 0x6b, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = epoll_create(0x9) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000700)=ANY=[@ANYRES64=r2, @ANYRESHEX=r7, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT=r6, @ANYRESDEC, @ANYBLOB="bfd6"]) 12.100680587s ago: executing program 2 (id=46): r0 = gettid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1/file3\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000001e40)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="7591c0f0f05637045927b483094a005210569e232d1e71ffd00949", @ANYRES32, @ANYRES64=0x0, @ANYBLOB="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", @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x4}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file3\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$bpf(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0), 0x20022, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x5}}, {@gid={'gid', 0x3d, r5}}], [{@obj_role={'obj_role', 0x3d, '^*({@&(}@@!/!//).@{[!`'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) 11.264400027s ago: executing program 3 (id=47): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8bdf, &(0x7f0000000000)={'wlan1\x00'}) 10.830739317s ago: executing program 2 (id=49): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (fail_nth: 7) 10.162964398s ago: executing program 3 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 9.527686105s ago: executing program 1 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x820, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 9.379259272s ago: executing program 2 (id=52): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x13cc}, 0x8800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x50}}, 0x80014) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.376252008s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close(r2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0xfffffffffffffffe, 0x200000) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000200)=""/125) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0xfffffffffffffffe, 0xa, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 8.369634433s ago: executing program 1 (id=54): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 7.528526093s ago: executing program 0 (id=55): r0 = socket$inet(0x2, 0xa, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000200004801c0001800b0001006e756d67656e00000c000280080001400000000d140000001100010000000000008db5f13800000a0e6d19d70d0e803d20344ac76787b974872e76e5e840c4ce563568ceb16d8a890d675eec94434d5fb9b3cffba9c16dabcf11784e82624d51403f4b648320a8aca077c0b878f290ecb1e72f2c0092ba50eb85dfd4735774de"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bind$inet(r0, &(0x7f0000000280)={0x2, 0xce23, @empty}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e1f, @loopback}, 0x10) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e24, 0x2, @loopback, 0x59d}}}, 0xa0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x181) (async) prlimit64(0x0, 0x5, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000580)=@multiplanar_fd={0xcfd, 0xa, 0x4, 0x2000, 0x8000, {}, {0x0, 0xc, 0xd0, 0x6, 0x5, 0x1, "5dce6236"}, 0x7, 0x4, {0x0}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) setrlimit(0x7, &(0x7f0000000240)={0x12, 0x3}) (async) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf25080000000c009900220002fbe26c000091274d"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x24048801) (async) socket(0xa, 0x3, 0x87) (async) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) 7.490756676s ago: executing program 4 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040015}, 0x4000002) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_enter(0xffffffffffffffff, 0x34cb, 0x10e475, 0x24, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) getpid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4(r5, 0x0, &(0x7f0000000240), 0x0) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) 7.420326476s ago: executing program 1 (id=57): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1b1300, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000000c0)={0x13e, 0x1b, &(0x7f0000000940)="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"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040842) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 7.357395906s ago: executing program 3 (id=58): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000000c0)='./file0\x00', 0x6040, 0x0) r0 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) r5 = creat(0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0x1}}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) 6.703688859s ago: executing program 0 (id=59): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) pipe2$watch_queue(&(0x7f0000000380), 0x80) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 6.680842993s ago: executing program 1 (id=60): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000000c0)='./file0\x00', 0x6040, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) 6.134811715s ago: executing program 3 (id=61): kexec_load(0x8000000000000003, 0x0, 0x0, 0x30000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864d1, &(0x7f0000000040)={0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x10}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000100)=0x9, 0x4) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f00000003c0)=[{&(0x7f00000000c0)="5e825310b0d0f3e862855a7f", 0xc}, {&(0x7f0000000100)}, {&(0x7f0000000140)="7cfc2f8ee60c15e7f1a297d49199b0f3dc43718e86c369bbafb3960a5b33f8b4454936065208659933ca98a23746dd54c0a73caad32241663ac71fda49274efe02ce75bdc9cc09faff22e71bb8dd", 0x4e}, {&(0x7f0000000200)="3b68f9323315a9d096efab75930d094de743937dfdf467d0d4609fcf1cc05d78bedb4c73b53ea5df9aa1274a273a847b8bc385f1f2056c9a5a425414b23983a90345894311d1f969c58affefe2a75afcdba70c8b475976f05dc5d0f35242c618fc66904703fbea5d2eb77502725585d91e801ad1ea82dfc731b9be30cca34e8531c930451fcbe91db1d53175b4b8d5d6fa8e39cf", 0x94}, {&(0x7f0000000340)="3a405a742b9bac0cce82c419a7e9e83748de4fc51fcc5432baeb518e677a66f16a1acd68cce474c13d75b0b07e5a90b9501f5227fa34eb0462767e25aaaf53892cba0759b8", 0x45}], 0x5) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x400000000080803, 0x0) 6.067604695s ago: executing program 0 (id=62): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x4}}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6, 0x0, 0x300}, 0x38) ftruncate(0xffffffffffffffff, 0x2000009) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000080)={0x17c04, r5, 0xfffffffffffffdfd, 0x100000000, 0x81}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000900)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) getpid() recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/48, 0x30}, 0x2001) 6.035376917s ago: executing program 4 (id=63): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000100)={0x1, 0xcb}) 4.732125726s ago: executing program 1 (id=64): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x7, 0x2}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7aa, &(0x7f0000000080)={{@any, 0xffffffff}}) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x48, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x48}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x100401, &(0x7f0000000580)='\xb5\x92\x97\x95w\xf2?\xc7s;w\xf3\xaf\xff#z\x1cx\xb1\x80\x8bj\xe9z\xf4\xab\xc6\xf8\xf3\'\xdfi\xf6Z\xefD`\xc0\xc5 \x82\x9avu\xd0!\x9c\xf8\x9b\xe7\xb4\xd1\xaaJ\xcfw\xa4\xacQ\x11\x19x\x9a7\xa0X,\xab\x80\xd5J]^\xaa\xa5o\x81\xd2\xc5Il\xef\x99\xca7k3\v\"\xb3\xa3r\xc6\xed\xee{\x9f\xce\xa5\x1b_\x15AMl\x96\xf6\fDqN\x0e\x8eQ\x94M\xe9\xa1b\xea2\x99\xa9\xf9\xee\x06uM\x9e)\xd2\xb0L\xa7\xdby\xb6\xf9\xccK\xa7\x8c\xd1\xbc\xc1\xcd\xa1A\x10\x8aR]\x95\xdc\xa38D\x89a\x00C-\x8f\x8a\xaeQ\xe2ZW\n$,\x05\x99\xe6\x03U\xdb\a\'5\xa3_\xbe\x86\xf1\xfer>\x83\xd9@\x0e\xf3\xbb\xdb\r\x93+k\xa9HE\x80_\x13a\xcb\x85\xfenB\xfc\x9d\x9fJ') open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './cgroup.cpu/cgroup.procs\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_int(r5, 0x0, 0x16, 0x0, &(0x7f0000000240)) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0xc2002, 0x0) ioctl$SOUND_PCM_READ_RATE(r7, 0x80045002, &(0x7f00000000c0)) 2.471808519s ago: executing program 0 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f00000001c0)={0x18, r4, 0x5, 0x8000000000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @netrom, @default, @rose, @default, @netrom, @bcast, @default]}, &(0x7f0000000140)=0x48) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x9, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000040)={0x5, 0x10, [0x3, 0xe, 0x8, 0x852], &(0x7f0000000000)=[0x0, 0x0]}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000207000000fffffffff8"]) 2.365867528s ago: executing program 2 (id=66): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pim6reg\x00', @multicast}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="810b2b3836e483077906c9bfbf9b1af685b60548ee80b03ebacdca99826c", 0x1e, 0x48021, &(0x7f0000000100)={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socket(0x2a, 0x1, 0x1) 2.303791083s ago: executing program 3 (id=67): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getrlimit(0x9, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f00100001800200084e6dddb0f454fdee0000002000000000000000000000000e08000020000000000000000000000004e2400114e2100000a00008033000000c8404fcac8d3336bba1be2ec5c4afdd9cfb1e0758d3e8ab57d332112fbe33a25743f0b3e7c0019a0a080eabca9740a693ca86c1245dab3dcd73106244747c9f346e12ebf8611de6da1ad7abb1ed12f9497f2a7b566395a90ca2ba5b47809948b9f0b3e355919d0fb96e7788bde395e08f855b3140d84d0e2ee1df486ef88e9623124e9cc92c2156e4e39ce565b93842f0e540b5a19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f0}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x109102, 0x0) write$6lowpan_enable(r5, &(0x7f00000000c0)='0', 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.251618242s ago: executing program 4 (id=68): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.841852805s ago: executing program 0 (id=69): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000000c0)='./file0\x00', 0x6040, 0x0) r0 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) 1.260150121s ago: executing program 2 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYBLOB="ea630e6820945d1628e32a7170124deae63a34839d782fbbaa6007973a1dc89ca32c8c231081c637b69fac95f7abcf663c28240b4eb6e310e24384a24789a7df86dc78dbd6fd914014871b0c366c37d7dd2d4e241d226fcac63538e7d9a95d72b54d251fb2bbab69a2308a996694da113acc5532c39fdc0f8965e703ce8e4e31f86c06ffaa501218be9c32f4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mem_connect\x00', r0}, 0x18) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/11) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) 533.222122ms ago: executing program 4 (id=71): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) flistxattr(r1, &(0x7f00000002c0)=""/189, 0xbd) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/234, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/62}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040), 0x49) listen(r5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) lseek(r4, 0x5, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) r6 = socket$inet6(0xa, 0x80000, 0x719) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000180)=[r6, r1, r3]}, 0x3) 249.263849ms ago: executing program 0 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x14b300) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYBLOB="4d7f4b00f8c2429b0b63e53bd89e97df40b31b3c4fb697ae12e8fa7e9f510a268e987a187ab8527bb8a99cd30770f456633e50daa81c4d33a0", @ANYBLOB="6a69eb8fb9a21681087e612140b8018ad8851b465c637bcde9a2832347aea94098dd0b529e27be868247afb3c6eafbc2473aa6369943ce33d1cfb9e159bbc8d02a9a6489a0", @ANYRESOCT, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff0001000000000000000000040000ffffe0000002fc010000000000000000000000ff00010001071c4e23000200000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d66c0000000a01010100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250000000000000300000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000235000002000100200000000000000048"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 0s ago: executing program 2 (id=73): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 57.858491][ T30] audit: type=1400 audit(1743994555.836:88): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.861937][ T5810] cgroup: Unknown subsys name 'net' [ 57.881289][ T30] audit: type=1400 audit(1743994555.836:89): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.908806][ T30] audit: type=1400 audit(1743994555.866:90): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.056702][ T5810] cgroup: Unknown subsys name 'cpuset' [ 58.065236][ T5810] cgroup: Unknown subsys name 'rlimit' [ 58.218093][ T30] audit: type=1400 audit(1743994556.196:91): avc: denied { setattr } for pid=5810 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.248907][ T30] audit: type=1400 audit(1743994556.196:92): avc: denied { create } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.269933][ T30] audit: type=1400 audit(1743994556.196:93): avc: denied { write } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.290738][ T30] audit: type=1400 audit(1743994556.196:94): avc: denied { read } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.311368][ T30] audit: type=1400 audit(1743994556.196:95): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.337074][ T5812] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.340051][ T30] audit: type=1400 audit(1743994556.196:96): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.369361][ T30] audit: type=1400 audit(1743994556.226:97): avc: denied { read } for pid=5492 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.227985][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.354834][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.363501][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.371011][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.391707][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.398563][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.399761][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.406993][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.413951][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.420768][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.427673][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.434482][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.441577][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.449259][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.454871][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.462247][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.470339][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.483602][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.484877][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.491675][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.498313][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.504537][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.512747][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.527740][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.534726][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.552566][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.979128][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.029039][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 62.064250][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 62.128295][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 62.209530][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 62.249742][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.257553][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.265095][ T5820] bridge_slave_0: entered allmulticast mode [ 62.271859][ T5820] bridge_slave_0: entered promiscuous mode [ 62.279894][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.287034][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.294555][ T5820] bridge_slave_1: entered allmulticast mode [ 62.301996][ T5820] bridge_slave_1: entered promiscuous mode [ 62.351845][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.358982][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.366146][ T5821] bridge_slave_0: entered allmulticast mode [ 62.372767][ T5821] bridge_slave_0: entered promiscuous mode [ 62.406699][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.413897][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.421031][ T5821] bridge_slave_1: entered allmulticast mode [ 62.428835][ T5821] bridge_slave_1: entered promiscuous mode [ 62.459091][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.471390][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.480571][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.488100][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.495752][ T5828] bridge_slave_0: entered allmulticast mode [ 62.502360][ T5828] bridge_slave_0: entered promiscuous mode [ 62.550978][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.558760][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.566176][ T5828] bridge_slave_1: entered allmulticast mode [ 62.572797][ T5828] bridge_slave_1: entered promiscuous mode [ 62.588696][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.600502][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.609793][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.617591][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.624887][ T5825] bridge_slave_0: entered allmulticast mode [ 62.631522][ T5825] bridge_slave_0: entered promiscuous mode [ 62.662462][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.671092][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.678534][ T5822] bridge_slave_0: entered allmulticast mode [ 62.685671][ T5822] bridge_slave_0: entered promiscuous mode [ 62.702063][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.709274][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.716773][ T5825] bridge_slave_1: entered allmulticast mode [ 62.723787][ T5825] bridge_slave_1: entered promiscuous mode [ 62.732141][ T5820] team0: Port device team_slave_0 added [ 62.740543][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.752198][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.761565][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.768678][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.776036][ T5822] bridge_slave_1: entered allmulticast mode [ 62.782653][ T5822] bridge_slave_1: entered promiscuous mode [ 62.814373][ T5820] team0: Port device team_slave_1 added [ 62.838525][ T5821] team0: Port device team_slave_0 added [ 62.846877][ T5821] team0: Port device team_slave_1 added [ 62.854424][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.866211][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.893950][ T5828] team0: Port device team_slave_0 added [ 62.933442][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.940383][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.966646][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.980674][ T5828] team0: Port device team_slave_1 added [ 62.994992][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.019401][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.026497][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.052629][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.072685][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.089401][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.096434][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.122428][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.134692][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.141630][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.167679][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.180472][ T5825] team0: Port device team_slave_0 added [ 63.208587][ T5822] team0: Port device team_slave_0 added [ 63.220315][ T5822] team0: Port device team_slave_1 added [ 63.227691][ T5825] team0: Port device team_slave_1 added [ 63.242856][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.250103][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.276217][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.288241][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.295236][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.321237][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.362265][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.369274][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.395207][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.413394][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.420359][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.446910][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.459013][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.466009][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.492116][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.518981][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.526178][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.552843][ T5835] Bluetooth: hci0: command tx timeout [ 63.553597][ T5838] Bluetooth: hci4: command tx timeout [ 63.558965][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.563722][ T5139] Bluetooth: hci3: command tx timeout [ 63.602589][ T5821] hsr_slave_0: entered promiscuous mode [ 63.608742][ T5821] hsr_slave_1: entered promiscuous mode [ 63.623275][ T5838] Bluetooth: hci1: command tx timeout [ 63.625504][ T5820] hsr_slave_0: entered promiscuous mode [ 63.628982][ T5139] Bluetooth: hci2: command tx timeout [ 63.638460][ T5820] hsr_slave_1: entered promiscuous mode [ 63.645763][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.653816][ T5820] Cannot create hsr debugfs directory [ 63.678407][ T5828] hsr_slave_0: entered promiscuous mode [ 63.684544][ T5828] hsr_slave_1: entered promiscuous mode [ 63.690409][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.698122][ T5828] Cannot create hsr debugfs directory [ 63.731037][ T5822] hsr_slave_0: entered promiscuous mode [ 63.737565][ T5822] hsr_slave_1: entered promiscuous mode [ 63.743603][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.751140][ T5822] Cannot create hsr debugfs directory [ 63.803892][ T5825] hsr_slave_0: entered promiscuous mode [ 63.810118][ T5825] hsr_slave_1: entered promiscuous mode [ 63.816570][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.824166][ T5825] Cannot create hsr debugfs directory [ 64.151280][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.166109][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.177014][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.196096][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.235315][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.249583][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.261181][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.282702][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.346693][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.359363][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.373689][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.386138][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.497167][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.507956][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.519724][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.528798][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.545500][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.589573][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.625199][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.645138][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.651868][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.662029][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.672238][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.692656][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.711773][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.718965][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.751648][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.758775][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.769828][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.776935][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.795344][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.802441][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.815616][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.874157][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.917991][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.925168][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.944338][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.951490][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.980048][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.025427][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.025442][ T30] audit: type=1400 audit(1743994563.006:112): avc: denied { sys_module } for pid=5821 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.059882][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.094425][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.101593][ T482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.138900][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.146059][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.279777][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.327254][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.340396][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.380261][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.401466][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.408647][ T482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.437296][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.444521][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.477033][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.508596][ T5821] veth0_vlan: entered promiscuous mode [ 65.551450][ T5828] veth0_vlan: entered promiscuous mode [ 65.572573][ T5828] veth1_vlan: entered promiscuous mode [ 65.598544][ T5821] veth1_vlan: entered promiscuous mode [ 65.624188][ T5139] Bluetooth: hci0: command tx timeout [ 65.629619][ T5139] Bluetooth: hci3: command tx timeout [ 65.635779][ T5838] Bluetooth: hci4: command tx timeout [ 65.644004][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.684009][ T5822] veth0_vlan: entered promiscuous mode [ 65.691876][ T5828] veth0_macvtap: entered promiscuous mode [ 65.707144][ T5139] Bluetooth: hci2: command tx timeout [ 65.712582][ T5139] Bluetooth: hci1: command tx timeout [ 65.725014][ T5821] veth0_macvtap: entered promiscuous mode [ 65.739243][ T5822] veth1_vlan: entered promiscuous mode [ 65.756357][ T5828] veth1_macvtap: entered promiscuous mode [ 65.766751][ T5821] veth1_macvtap: entered promiscuous mode [ 65.829518][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.857339][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.868861][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.880043][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.891076][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.901919][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.917237][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.928878][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.950508][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.960521][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.970195][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.980096][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.991743][ T5822] veth0_macvtap: entered promiscuous mode [ 66.000753][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.009595][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.019061][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.028713][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.047336][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.058150][ T5822] veth1_macvtap: entered promiscuous mode [ 66.112219][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.126262][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.137360][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.148313][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.159152][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.182105][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.194492][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.206262][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.216949][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.227796][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.247807][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.258428][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.268310][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.277129][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.320757][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.334315][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.337895][ T5820] veth0_vlan: entered promiscuous mode [ 66.352116][ T5825] veth0_vlan: entered promiscuous mode [ 66.371996][ T5820] veth1_vlan: entered promiscuous mode [ 66.392229][ T5825] veth1_vlan: entered promiscuous mode [ 66.413981][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.421817][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.485074][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.494411][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.509487][ T30] audit: type=1400 audit(1743994564.486:113): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.XPysek/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.545722][ T30] audit: type=1400 audit(1743994564.486:114): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.576743][ T30] audit: type=1400 audit(1743994564.486:115): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.XPysek/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.605254][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.620961][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.625500][ T5825] veth0_macvtap: entered promiscuous mode [ 66.633208][ T30] audit: type=1400 audit(1743994564.486:116): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.657541][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.667090][ T30] audit: type=1400 audit(1743994564.516:117): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.XPysek/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.673082][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.698928][ T30] audit: type=1400 audit(1743994564.516:118): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.XPysek/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.727158][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.747827][ T30] audit: type=1400 audit(1743994564.526:119): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.770128][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.771373][ T5820] veth0_macvtap: entered promiscuous mode [ 66.789327][ T5825] veth1_macvtap: entered promiscuous mode [ 66.806537][ T30] audit: type=1400 audit(1743994564.556:120): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.836888][ T5820] veth1_macvtap: entered promiscuous mode [ 66.842836][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.855244][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.872002][ T30] audit: type=1400 audit(1743994564.556:121): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="gadgetfs" ino=7279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.883501][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.906232][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.917793][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.928577][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.939060][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.950234][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.971125][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.985499][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.998760][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.010699][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.022505][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.038046][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.049272][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.068516][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.082735][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.093242][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.106228][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.118029][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.133785][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.149067][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.160632][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.173629][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.226676][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.253767][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.689167][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.697952][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.708504][ T5139] Bluetooth: hci0: command tx timeout [ 67.714407][ T5838] Bluetooth: hci3: command tx timeout [ 67.715240][ T5835] Bluetooth: hci4: command tx timeout [ 67.726342][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.743513][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.765483][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.785908][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.809212][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.831433][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.843484][ T5139] Bluetooth: hci2: command tx timeout [ 67.850007][ T5835] Bluetooth: hci1: command tx timeout [ 67.910169][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.941554][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.968090][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.986055][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.995124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.006353][ T5910] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 68.018205][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.045462][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.094627][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.253275][ T873] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.397341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 68.485785][ T873] usb 2-1: not running at top speed; connect to a high speed hub [ 68.509060][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.520301][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.528224][ T873] usb 2-1: config 8 has an invalid interface number: 2 but max is 0 [ 68.537419][ T873] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 68.602990][ T873] usb 2-1: config 8 has no interface number 0 [ 68.627983][ T873] usb 2-1: config 8 interface 2 altsetting 12 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 68.664870][ T5926] fuse: Unknown parameter '0x0000000000000009' [ 68.673329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.692695][ T873] usb 2-1: config 8 interface 2 altsetting 12 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 68.720537][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.745537][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.745653][ T873] usb 2-1: config 8 interface 2 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 68.798890][ T873] usb 2-1: config 8 interface 2 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 68.816960][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.820307][ T873] usb 2-1: config 8 interface 2 altsetting 12 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 68.837050][ T873] usb 2-1: config 8 interface 2 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 68.847897][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.855383][ T873] usb 2-1: config 8 interface 2 altsetting 12 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 68.855413][ T873] usb 2-1: config 8 interface 2 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 68.855431][ T873] usb 2-1: config 8 interface 2 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 68.855449][ T873] usb 2-1: config 8 interface 2 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 68.855466][ T873] usb 2-1: config 8 interface 2 has no altsetting 0 [ 69.072025][ T873] usb 2-1: New USB device found, idVendor=19d2, idProduct=1021, bcdDevice=40.62 [ 69.081774][ T873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.089824][ T873] usb 2-1: Product: 袱ⵢ㿠翇뿢☡싪痊彦봒㱞蹇濋츭楕䞃쨣붚쁆锥힟鼿㍫╈櫩낋ﬔ똔ⱀ嬛鏌澮힛뻸沓횲䢳ნ雰꒖⼍߽텤牑懼蛉犽퀸㿲淁ڢ剰禑蕔⺟܁௚⣋⩌纥乂䚓딣⬄驯؃⢵寽컣춪ʂ府右 [ 69.111063][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.120028][ T873] usb 2-1: Manufacturer: 턦쾵扷ⷔ濆晳Ό養ຝ깈狺恁酔热왓훤쁮뉂觾࠰魮헹닔蹭轢翯Ἷ直쳐덏欀ख़簈묎▰䣣⟤菜떁㷎߈吴亽ড়+亞ഓĉ䞾Დ了ꨟ᮷ꢳ０鼰货㝎덥铂꥙啖庿繱‶⿂솮㺺埙琢쳦꣙誀ꨍ롦䟄䎰ヿ뮾஠怿 [ 69.382434][ T873] usb 2-1: SerialNumber: ℁⣯뺩疹铫뾭뛳䝮腆닰ޙ咝ᢃ덾絷煘髈⤻鶄 [ 69.583368][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.783870][ T5835] Bluetooth: hci4: command tx timeout [ 69.789341][ T5835] Bluetooth: hci0: command tx timeout [ 69.796460][ T5139] Bluetooth: hci3: command tx timeout [ 69.853140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.863129][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.873607][ T5838] Bluetooth: hci2: command tx timeout [ 69.879100][ T5835] Bluetooth: hci1: command tx timeout [ 70.035972][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 70.036004][ T30] audit: type=1400 audit(1743994568.016:164): avc: denied { setopt } for pid=5938 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.120440][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 70.133457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.164527][ T873] usb 2-1: USB disconnect, device number 2 [ 70.353067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.361597][ T5874] IPVS: starting estimator thread 0... [ 70.503397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.511984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.603817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.612464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 70.612815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.653616][ T5946] IPVS: using max 46 ests per chain, 110400 per kthread [ 70.853326][ T30] audit: type=1400 audit(1743994568.776:165): avc: denied { setopt } for pid=5941 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.925075][ T5947] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 70.999945][ T30] audit: type=1400 audit(1743994568.896:166): avc: denied { ioctl } for pid=5931 comm="syz.0.8" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.039580][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 71.069658][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.069717][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.079544][ T24] usb 1-1: Product: syz [ 71.093101][ T24] usb 1-1: Manufacturer: syz [ 71.093109][ T30] audit: type=1400 audit(1743994568.966:167): avc: denied { append } for pid=5180 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.093143][ T30] audit: type=1400 audit(1743994568.966:168): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.097700][ T24] usb 1-1: SerialNumber: syz [ 71.100088][ T24] usb 1-1: config 0 descriptor?? [ 71.144726][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.172470][ T5950] IPVS: starting estimator thread 0... [ 71.216353][ T30] audit: type=1400 audit(1743994568.966:169): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.380089][ T30] audit: type=1400 audit(1743994568.966:170): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.413251][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.422569][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.430854][ T30] audit: type=1400 audit(1743994569.036:171): avc: denied { read } for pid=5180 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 71.469099][ T5952] IPVS: using max 77 ests per chain, 184800 per kthread [ 72.279814][ T30] audit: type=1400 audit(1743994569.036:172): avc: denied { search } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.302530][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 72.345216][ T30] audit: type=1400 audit(1743994569.036:173): avc: denied { open } for pid=5180 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.581980][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.592818][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.005455][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 73.503151][ T5950] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.741240][ T24] usb 1-1: USB disconnect, device number 2 [ 73.904585][ T5982] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18'. [ 74.107571][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 74.123200][ T5950] usb 2-1: device descriptor read/all, error -71 [ 75.078584][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 75.078599][ T30] audit: type=1400 audit(1743994573.056:215): avc: denied { ioctl } for pid=5999 comm="syz.3.23" path="socket:[8193]" dev="sockfs" ino=8193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.135498][ T6000] vlan2: entered allmulticast mode [ 75.140763][ T6000] bond0: entered allmulticast mode [ 75.149922][ T6000] bond_slave_0: entered allmulticast mode [ 75.158527][ T6000] bond_slave_1: entered allmulticast mode [ 75.227300][ T6000] bridge0: port 3(vlan2) entered blocking state [ 75.234379][ T6000] bridge0: port 3(vlan2) entered disabled state [ 75.241919][ T6000] vlan2: entered promiscuous mode [ 75.247837][ T6000] bond0: entered promiscuous mode [ 75.252894][ T6000] bond_slave_0: entered promiscuous mode [ 75.259216][ T6000] bond_slave_1: entered promiscuous mode [ 75.266695][ T6000] bridge0: port 3(vlan2) entered blocking state [ 75.273255][ T6000] bridge0: port 3(vlan2) entered forwarding state [ 75.282136][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.354446][ T5871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.403177][ T5950] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 75.434041][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 75.449898][ T5901] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 75.482863][ T5901] usb 3-1: config 0 has no interface number 0 [ 75.516689][ T5901] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 75.537689][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 75.544535][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.555585][ T5901] usb 3-1: Product: syz [ 75.559968][ T5901] usb 3-1: Manufacturer: syz [ 75.568084][ T5871] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 75.579927][ T5901] usb 3-1: SerialNumber: syz [ 75.585434][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 75.591672][ T5871] usb 1-1: config 0 has no interface number 0 [ 75.601548][ T5901] usb 3-1: config 0 descriptor?? [ 75.615787][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 75.632480][ T5901] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 75.641910][ T5950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 75.655653][ T5871] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 75.665809][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.673882][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.683756][ T5871] usb 1-1: Product: syz [ 75.687927][ T5871] usb 1-1: Manufacturer: syz [ 75.692510][ T5871] usb 1-1: SerialNumber: syz [ 75.697333][ T5950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.709862][ T5950] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 75.720562][ T5871] usb 1-1: config 0 descriptor?? [ 75.725791][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.737335][ T5871] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 75.746263][ T5950] usb 2-1: Product: syz [ 75.750430][ T5950] usb 2-1: Manufacturer: syz [ 75.755413][ T5950] usb 2-1: SerialNumber: syz [ 75.762089][ T5950] usb 2-1: config 0 descriptor?? [ 75.767776][ T5992] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 75.780947][ T5950] port100 2-1:0.0: NFC: Could not get supported command types [ 75.842827][ T5901] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 75.858280][ T5901] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 75.948370][ T5871] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 75.969473][ T5871] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 76.066552][ T30] audit: type=1400 audit(1743994574.036:216): avc: denied { create } for pid=5991 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.102473][ T30] audit: type=1400 audit(1743994574.066:217): avc: denied { read write } for pid=6010 comm="syz.4.26" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.179955][ T30] audit: type=1400 audit(1743994574.066:218): avc: denied { open } for pid=6010 comm="syz.4.26" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.217892][ T30] audit: type=1400 audit(1743994574.076:219): avc: denied { mounton } for pid=6010 comm="syz.4.26" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.227933][ T973] cfg80211: failed to load regulatory.db [ 76.249006][ T30] audit: type=1400 audit(1743994574.076:220): avc: denied { mount } for pid=6010 comm="syz.4.26" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.282695][ T30] audit: type=1400 audit(1743994574.156:221): avc: denied { create } for pid=6010 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.295663][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.327853][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 76.335931][ T5871] usb 3-1: USB disconnect, device number 2 [ 76.351616][ T5871] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 76.364044][ T30] audit: type=1400 audit(1743994574.156:222): avc: denied { read } for pid=6010 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.389905][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 76.416175][ T5901] usb 1-1: USB disconnect, device number 3 [ 76.427579][ T5871] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 76.430224][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.441486][ T5901] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 76.470695][ T5871] quatech2 3-1:0.51: device disconnected [ 76.490382][ T30] audit: type=1400 audit(1743994574.156:223): avc: denied { ioctl } for pid=6010 comm="syz.4.26" path="socket:[7827]" dev="sockfs" ino=7827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.552851][ T5901] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 76.573646][ T30] audit: type=1400 audit(1743994574.286:224): avc: denied { create } for pid=5995 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.603827][ T5901] quatech2 1-1:0.51: device disconnected [ 76.853152][ T5950] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.883096][ T873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.023372][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 77.039122][ T5950] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 77.048429][ T873] usb 5-1: Using ep0 maxpacket: 16 [ 77.055173][ T873] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 77.075045][ T5950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.093052][ T873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.217501][ T5950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.226882][ T873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.238131][ T5950] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.270035][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.279148][ T873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.288770][ T5950] usb 4-1: Product: syz [ 77.293194][ T5950] usb 4-1: Manufacturer: syz [ 77.297839][ T873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.308266][ T5950] usb 4-1: SerialNumber: syz [ 77.313769][ T873] usb 5-1: Product: syz [ 77.753377][ T873] usb 5-1: Manufacturer: syz [ 77.758437][ T873] usb 5-1: SerialNumber: syz [ 77.828039][ T5874] usb 2-1: USB disconnect, device number 4 [ 78.317020][ T5904] IPVS: starting estimator thread 0... [ 78.364657][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.405262][ T6035] IPVS: using max 74 ests per chain, 177600 per kthread [ 78.473124][ T72] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 78.480986][ T5950] usb 4-1: 0:2 : does not exist [ 78.510522][ T6034] tty tty24: ldisc open failed (-12), clearing slot 23 [ 78.518956][ T5950] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 78.632036][ T5950] usb 4-1: USB disconnect, device number 2 [ 79.047289][ T6055] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.844347][ T6041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.131211][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 80.131225][ T30] audit: type=1400 audit(1743994578.106:245): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.175995][ T30] audit: type=1400 audit(1743994578.156:246): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.202452][ T873] usb 5-1: 0:2 : does not exist [ 80.230874][ T873] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 80.257873][ T6065] FAULT_INJECTION: forcing a failure. [ 80.257873][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.274951][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.4.39 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 80.274977][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.274986][ T6065] Call Trace: [ 80.274991][ T6065] [ 80.274998][ T6065] dump_stack_lvl+0x16c/0x1f0 [ 80.275024][ T6065] should_fail_ex+0x512/0x640 [ 80.275047][ T6065] _copy_from_user+0x2e/0xd0 [ 80.275067][ T6065] io_submit_one+0xbb/0x1da0 [ 80.275085][ T6065] ? __lock_acquire+0xaa4/0x1ba0 [ 80.275105][ T6065] ? __pfx_io_submit_one+0x10/0x10 [ 80.275127][ T6065] ? __might_fault+0xe3/0x190 [ 80.275143][ T6065] ? __might_fault+0x13b/0x190 [ 80.275164][ T6065] ? __x64_sys_io_submit+0x1a9/0x350 [ 80.275185][ T6065] __x64_sys_io_submit+0x1a9/0x350 [ 80.275203][ T6065] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 80.275217][ T6065] ? fput+0x70/0xf0 [ 80.275247][ T6065] do_syscall_64+0xcd/0x260 [ 80.275271][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.275287][ T6065] RIP: 0033:0x7f3333b8d169 [ 80.275301][ T6065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.275316][ T6065] RSP: 002b:00007f3334911038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 80.275332][ T6065] RAX: ffffffffffffffda RBX: 00007f3333da5fa0 RCX: 00007f3333b8d169 [ 80.275342][ T6065] RDX: 0000200000000a40 RSI: 0000000000000001 RDI: 00007f33348f0000 [ 80.275351][ T6065] RBP: 00007f3334911090 R08: 0000000000000000 R09: 0000000000000000 [ 80.275360][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.275368][ T6065] R13: 0000000000000000 R14: 00007f3333da5fa0 R15: 00007fffbffad9d8 [ 80.275389][ T6065] [ 80.572659][ T873] usb 5-1: USB disconnect, device number 2 [ 80.665109][ T30] audit: type=1326 audit(1743994578.636:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb618d169 code=0x7ffc0000 [ 80.724665][ T30] audit: type=1326 audit(1743994578.636:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb618d169 code=0x7ffc0000 [ 80.785709][ T30] audit: type=1326 audit(1743994578.636:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3eb618d169 code=0x7ffc0000 [ 80.832278][ T30] audit: type=1326 audit(1743994578.636:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb618d169 code=0x7ffc0000 [ 80.860343][ T30] audit: type=1326 audit(1743994578.636:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb618d169 code=0x7ffc0000 [ 80.884497][ T6075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6075 comm=syz.3.42 [ 80.906619][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 80.923426][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.003871][ T30] audit: type=1326 audit(1743994578.636:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb618d169 code=0x7ffc0000 [ 81.373083][ T30] audit: type=1326 audit(1743994578.636:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb618d169 code=0x7ffc0000 [ 81.403051][ T30] audit: type=1326 audit(1743994578.636:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3eb618bad0 code=0x7ffc0000 [ 81.625695][ T6078] fuse: Unknown parameter '0x0000000000000008' [ 82.458601][ T6089] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.051045][ T6096] warning: `syz.3.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.575403][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 83.598977][ T6099] FAULT_INJECTION: forcing a failure. [ 83.598977][ T6099] name failslab, interval 1, probability 0, space 0, times 1 [ 83.645485][ T6099] CPU: 1 UID: 0 PID: 6099 Comm: syz.2.49 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 83.645511][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.645521][ T6099] Call Trace: [ 83.645526][ T6099] [ 83.645533][ T6099] dump_stack_lvl+0x16c/0x1f0 [ 83.645562][ T6099] should_fail_ex+0x512/0x640 [ 83.645578][ T6099] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 83.645597][ T6099] should_failslab+0xc2/0x120 [ 83.645614][ T6099] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 83.645631][ T6099] ? __alloc_skb+0x2b2/0x380 [ 83.645654][ T6099] __alloc_skb+0x2b2/0x380 [ 83.645672][ T6099] ? __pfx___alloc_skb+0x10/0x10 [ 83.645688][ T6099] ? __pfx_fib_nl_delrule+0x10/0x10 [ 83.645718][ T6099] netlink_ack+0x15d/0xb80 [ 83.645748][ T6099] netlink_rcv_skb+0x347/0x440 [ 83.645769][ T6099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.645791][ T6099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.645827][ T6099] ? netlink_deliver_tap+0x1ae/0xd30 [ 83.645852][ T6099] netlink_unicast+0x53a/0x7f0 [ 83.645877][ T6099] ? __pfx_netlink_unicast+0x10/0x10 [ 83.645906][ T6099] netlink_sendmsg+0x8d1/0xdd0 [ 83.645932][ T6099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.645962][ T6099] ____sys_sendmsg+0xa95/0xc70 [ 83.645987][ T6099] ? copy_msghdr_from_user+0x10a/0x160 [ 83.646006][ T6099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.646042][ T6099] ___sys_sendmsg+0x134/0x1d0 [ 83.646063][ T6099] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.646117][ T6099] __sys_sendmsg+0x16d/0x220 [ 83.646137][ T6099] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.646164][ T6099] ? rcu_is_watching+0x12/0xc0 [ 83.646191][ T6099] do_syscall_64+0xcd/0x260 [ 83.646214][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.646231][ T6099] RIP: 0033:0x7ff8dcf8d169 [ 83.646245][ T6099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.646259][ T6099] RSP: 002b:00007ff8dde7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.646275][ T6099] RAX: ffffffffffffffda RBX: 00007ff8dd1a5fa0 RCX: 00007ff8dcf8d169 [ 83.646285][ T6099] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 83.646294][ T6099] RBP: 00007ff8dde7e090 R08: 0000000000000000 R09: 0000000000000000 [ 83.646303][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.646312][ T6099] R13: 0000000000000000 R14: 00007ff8dd1a5fa0 R15: 00007ffc6e27ba18 [ 83.646334][ T6099] [ 84.477826][ T6112] veth0_vlan: entered allmulticast mode [ 84.526441][ T6112] veth0_vlan: left promiscuous mode [ 84.537137][ T6112] veth0_vlan: entered promiscuous mode [ 85.136043][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 85.136080][ T30] audit: type=1400 audit(1743994582.936:264): avc: denied { bind } for pid=6106 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.167880][ T30] audit: type=1400 audit(1743994582.936:265): avc: denied { name_bind } for pid=6106 comm="syz.2.52" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.191869][ T30] audit: type=1400 audit(1743994582.936:266): avc: denied { node_bind } for pid=6106 comm="syz.2.52" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 85.226937][ T6117] netlink: zone id is out of range [ 85.232219][ T6117] netlink: zone id is out of range [ 85.399038][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 85.407955][ T30] audit: type=1400 audit(1743994582.936:267): avc: denied { write } for pid=6106 comm="syz.2.52" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.435219][ T30] audit: type=1400 audit(1743994582.936:268): avc: denied { connect } for pid=6106 comm="syz.2.52" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.435260][ T30] audit: type=1400 audit(1743994582.946:269): avc: denied { name_connect } for pid=6106 comm="syz.2.52" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.435298][ T30] audit: type=1400 audit(1743994583.056:270): avc: denied { create } for pid=6106 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.435328][ T30] audit: type=1400 audit(1743994583.066:271): avc: denied { write } for pid=6106 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.435359][ T30] audit: type=1400 audit(1743994583.196:272): avc: denied { create } for pid=6114 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.435390][ T30] audit: type=1400 audit(1743994583.206:273): avc: denied { setopt } for pid=6114 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.916560][ T6117] Zero length message leads to an empty skb [ 88.413390][ T5904] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.882694][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 90.882728][ T30] audit: type=1400 audit(1743994588.856:319): avc: denied { sys_module } for pid=6143 comm="syz.3.61" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.968854][ T5904] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.008055][ T30] audit: type=1400 audit(1743994588.976:320): avc: denied { create } for pid=6164 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.038501][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.043827][ T30] audit: type=1400 audit(1743994588.986:321): avc: denied { setopt } for pid=6164 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.094721][ T5904] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 91.123022][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.154203][ T5904] usb 1-1: config 0 descriptor?? [ 91.183314][ T5904] usb 1-1: can't set config #0, error -71 [ 91.191709][ T30] audit: type=1400 audit(1743994589.116:322): avc: denied { read } for pid=6164 comm="syz.1.64" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 91.280794][ T30] audit: type=1400 audit(1743994589.116:323): avc: denied { open } for pid=6164 comm="syz.1.64" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 91.305666][ T30] audit: type=1400 audit(1743994589.166:324): avc: denied { create } for pid=6164 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.306766][ T5904] usb 1-1: USB disconnect, device number 4 [ 91.599137][ T30] audit: type=1400 audit(1743994589.166:325): avc: denied { write } for pid=6164 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.720237][ T30] audit: type=1400 audit(1743994589.176:326): avc: denied { read } for pid=6164 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.754539][ T6178] ./cgroup: Can't lookup blockdev [ 91.761138][ T30] audit: type=1400 audit(1743994589.176:327): avc: denied { read } for pid=6164 comm="syz.1.64" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.784038][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.895750][ T30] audit: type=1400 audit(1743994589.176:328): avc: denied { open } for pid=6164 comm="syz.1.64" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.919072][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.058853][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.556276][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 93.568932][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 93.579348][ T24] usb 4-1: config 0 has no interface number 0 [ 93.585403][ T6189] ------------[ cut here ]------------ [ 93.591112][ T6189] WARNING: CPU: 0 PID: 6189 at fs/file.c:1201 file_seek_cur_needs_f_lock+0x141/0x190 [ 93.591740][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 93.601421][ T6189] Modules linked in: [ 93.614711][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.4.71 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 93.626312][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.636492][ T6189] RIP: 0010:file_seek_cur_needs_f_lock+0x141/0x190 [ 93.643021][ T6189] Code: 31 ff 89 c3 89 c6 e8 0e 9e 7f ff 84 db 74 15 e8 25 a3 7f ff bb 01 00 00 00 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 10 a3 7f ff 90 <0f> 0b 90 eb e0 e8 05 a3 7f ff 31 db 89 d8 5b 5d 41 5c c3 cc cc cc [ 93.662659][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.670283][ T6189] RSP: 0018:ffffc90003f07df8 EFLAGS: 00010283 [ 93.676406][ T6189] RAX: 0000000000000054 RBX: 0000000000000000 RCX: ffffc9000cce3000 [ 93.684410][ T6189] RDX: 0000000000080000 RSI: ffffffff823b9b00 RDI: 0000000000000001 [ 93.692373][ T6189] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 93.700379][ T6189] R10: 0000000000000000 R11: 0000000000000001 R12: bfffffffffffffff [ 93.708382][ T6189] R13: 0000000000000005 R14: 7fffffffffffffff R15: ffff88807e16cfe0 [ 93.716444][ T6189] FS: 00007f33349116c0(0000) GS:ffff8881249b3000(0000) knlGS:0000000000000000 [ 93.725388][ T6189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.731980][ T6189] CR2: 00007f61679ebaa8 CR3: 0000000035c6c000 CR4: 00000000003526f0 [ 93.739966][ T6189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.747998][ T6189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.756527][ T6189] Call Trace: [ 93.760238][ T6189] [ 93.763261][ T6189] generic_file_llseek_size+0x153/0x480 [ 93.768840][ T6189] shmem_file_llseek+0x166/0x1a0 [ 93.773815][ T6189] vfs_llseek+0x9a/0xe0 [ 93.778037][ T6189] ovl_llseek+0x15c/0x2c0 [ 93.782420][ T6189] ksys_lseek+0xf0/0x1b0 [ 93.786741][ T6189] do_syscall_64+0xcd/0x260 [ 93.791267][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.797196][ T6189] RIP: 0033:0x7f3333b8d169 [ 93.801599][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.821316][ T6189] RSP: 002b:00007f3334911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 93.829881][ T6189] RAX: ffffffffffffffda RBX: 00007f3333da5fa0 RCX: 00007f3333b8d169 [ 93.837896][ T6189] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000006 [ 93.845897][ T6189] RBP: 00007f3333c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.853887][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.862403][ T6189] R13: 0000000000000000 R14: 00007f3333da5fa0 R15: 00007fffbffad9d8 [ 93.870830][ T6189] [ 93.873900][ T6189] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.881172][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.4.71 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 93.892602][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.902632][ T6189] Call Trace: [ 93.905937][ T6189] [ 93.908869][ T6189] dump_stack_lvl+0x3d/0x1f0 [ 93.913455][ T6189] panic+0x71c/0x800 [ 93.917339][ T6189] ? __pfx_panic+0x10/0x10 [ 93.921727][ T6189] ? show_trace_log_lvl+0x29b/0x3e0 [ 93.926919][ T6189] ? file_seek_cur_needs_f_lock+0x141/0x190 [ 93.932791][ T6189] check_panic_on_warn+0xab/0xb0 [ 93.937705][ T6189] __warn+0xf6/0x3c0 [ 93.941607][ T6189] ? file_seek_cur_needs_f_lock+0x141/0x190 [ 93.947500][ T6189] report_bug+0x3c3/0x580 [ 93.951816][ T6189] ? file_seek_cur_needs_f_lock+0x141/0x190 [ 93.957705][ T6189] handle_bug+0x184/0x210 [ 93.962033][ T6189] exc_invalid_op+0x17/0x50 [ 93.966535][ T6189] asm_exc_invalid_op+0x1a/0x20 [ 93.971374][ T6189] RIP: 0010:file_seek_cur_needs_f_lock+0x141/0x190 [ 93.977857][ T6189] Code: 31 ff 89 c3 89 c6 e8 0e 9e 7f ff 84 db 74 15 e8 25 a3 7f ff bb 01 00 00 00 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 10 a3 7f ff 90 <0f> 0b 90 eb e0 e8 05 a3 7f ff 31 db 89 d8 5b 5d 41 5c c3 cc cc cc [ 93.997467][ T6189] RSP: 0018:ffffc90003f07df8 EFLAGS: 00010283 [ 94.003515][ T6189] RAX: 0000000000000054 RBX: 0000000000000000 RCX: ffffc9000cce3000 [ 94.011475][ T6189] RDX: 0000000000080000 RSI: ffffffff823b9b00 RDI: 0000000000000001 [ 94.019422][ T6189] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 94.027367][ T6189] R10: 0000000000000000 R11: 0000000000000001 R12: bfffffffffffffff [ 94.035313][ T6189] R13: 0000000000000005 R14: 7fffffffffffffff R15: ffff88807e16cfe0 [ 94.043279][ T6189] ? file_seek_cur_needs_f_lock+0x140/0x190 [ 94.049162][ T6189] ? file_seek_cur_needs_f_lock+0x140/0x190 [ 94.055051][ T6189] generic_file_llseek_size+0x153/0x480 [ 94.060577][ T6189] shmem_file_llseek+0x166/0x1a0 [ 94.065528][ T6189] vfs_llseek+0x9a/0xe0 [ 94.069685][ T6189] ovl_llseek+0x15c/0x2c0 [ 94.073998][ T6189] ksys_lseek+0xf0/0x1b0 [ 94.078224][ T6189] do_syscall_64+0xcd/0x260 [ 94.082708][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.088593][ T6189] RIP: 0033:0x7f3333b8d169 [ 94.092986][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.112568][ T6189] RSP: 002b:00007f3334911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 94.120957][ T6189] RAX: ffffffffffffffda RBX: 00007f3333da5fa0 RCX: 00007f3333b8d169 [ 94.128913][ T6189] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000006 [ 94.136870][ T6189] RBP: 00007f3333c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.144822][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.152780][ T6189] R13: 0000000000000000 R14: 00007f3333da5fa0 R15: 00007fffbffad9d8 [ 94.160733][ T6189] [ 94.163987][ T6189] Kernel Offset: disabled [ 94.168286][ T6189] Rebooting in 86400 seconds..