last executing test programs: 4m11.215513295s ago: executing program 4 (id=709): openat(0xffffffffffffffff, 0x0, 0x18220, 0x60) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x20048000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x3, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0xc, 0x2, 0x3, "3927ec0fbc0200", 0x59455247}) 4m10.950267613s ago: executing program 3 (id=710): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 4m10.778992302s ago: executing program 1 (id=713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$isdn(0x22, 0x2, 0x25) r3 = socket$isdn(0x22, 0x2, 0x22) dup3(r2, r3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r5, 0x0, 0x11, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf250400"], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 4m5.898914944s ago: executing program 1 (id=714): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$unix(r1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pread64(r1, &(0x7f0000000100)=""/10, 0xa, 0x8) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x5, 0x89, 0x0, @empty, @broadcast}, "eaa2d7e2"}}}}, 0x0) madvise(&(0x7f00004d9000/0x4000)=nil, 0x4000, 0x3) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x17) 4m5.898494943s ago: executing program 3 (id=715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r10, 0xb6}}, 0x10) 4m5.895468252s ago: executing program 4 (id=716): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x4}, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) socket$inet(0x2, 0x80001, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c61737400000000040002"], 0xc8}, 0x1, 0x0, 0x0, 0x20044840}, 0x20054880) 4m5.481026534s ago: executing program 0 (id=717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r10, 0xb6}}, 0x10) 4m4.965844805s ago: executing program 4 (id=718): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) 4m2.867666076s ago: executing program 0 (id=719): socket$inet6_sctp(0xa, 0x5, 0x84) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2080) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8010800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0200f80d20"], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) socket$inet6(0xa, 0x3, 0x7) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) 4m2.867373292s ago: executing program 2 (id=720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0xfffffffe, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r5, 0x800448d4, 0x0) dup3(r1, r0, 0x0) 4m2.866480038s ago: executing program 3 (id=721): bpf$TOKEN_CREATE(0x24, &(0x7f0000000600), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x5, 0x4, 0x0, 0x37, 0x14, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000600ffff00000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x10, "32bdc324e1599219f50804526613"}]}}}}}}}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m2.626851847s ago: executing program 4 (id=722): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 4m1.716462748s ago: executing program 0 (id=723): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) 4m1.003431224s ago: executing program 3 (id=724): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x8, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 4m0.203046791s ago: executing program 2 (id=725): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 3m59.94997231s ago: executing program 1 (id=726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$isdn(0x22, 0x2, 0x25) r3 = socket$isdn(0x22, 0x2, 0x22) dup3(r2, r3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r5, 0x0, 0x11, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf250400"], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 3m59.947830652s ago: executing program 0 (id=727): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840c0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=r8, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8fc4c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769"]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe6) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r9, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r10, r10, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r11 = dup(r1) read$FUSE(r11, &(0x7f0000003c40)={0x2020}, 0xffffff0a) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x890) 3m58.768686449s ago: executing program 3 (id=728): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x8d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) 3m57.843749967s ago: executing program 2 (id=729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0xfffffffe, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(0x0, 0x80) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r6, 0x800448d4, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) 3m57.843100666s ago: executing program 4 (id=730): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(r1, &(0x7f0000000140)='numa_maps\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) epoll_create1(0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "cdacf56808098d000043c96d2200"}) pread64(r3, 0x0, 0x0, 0x4eb) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 3m54.1124763s ago: executing program 0 (id=731): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r5 = dup(r4) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3m53.828105499s ago: executing program 1 (id=732): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) 3m53.339142181s ago: executing program 2 (id=733): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840c0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=r8, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8fc4c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769"]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe6) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r9, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r10, r10, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r11 = dup(r1) read$FUSE(r11, &(0x7f0000003c40)={0x2020}, 0xffffff0a) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x890) 3m52.803662496s ago: executing program 1 (id=734): syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket(0x2, 0x80805, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r5, 0x400, 0x0, 0x80000000, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fchown(r7, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x1, 0xa124, 0x7ffffffd}) r9 = dup2(r8, r2) close_range(r9, 0xffffffffffffffff, 0x0) 3m52.553884272s ago: executing program 4 (id=735): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@bridge_setlink={0x2e8, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x20840}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1cc, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x58, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_PHYS_SWITCH_ID={0x11, 0x24, "83eddaf31b5dd7248be50575e9"}, @IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x804}, 0x0) 3m52.462638925s ago: executing program 3 (id=736): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$unix(r1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pread64(r1, &(0x7f0000000100)=""/10, 0xa, 0x8) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x5, 0x89, 0x0, @empty, @broadcast}, "eaa2d7e2"}}}}, 0x0) madvise(&(0x7f00004d9000/0x4000)=nil, 0x4000, 0x3) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x17) 3m50.474363911s ago: executing program 2 (id=737): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x0]}, @CTA_LABELS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) 3m49.826310333s ago: executing program 1 (id=738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$isdn(0x22, 0x2, 0x25) r3 = socket$isdn(0x22, 0x2, 0x22) dup3(r2, r3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r5, 0x0, 0x11, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf250400"], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x20000000) 3m49.162642999s ago: executing program 2 (id=739): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x4}, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) socket$inet(0x2, 0x80001, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c61737400000000040002"], 0xc8}, 0x1, 0x0, 0x0, 0x20044840}, 0x20054880) 3m49.146233356s ago: executing program 0 (id=740): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 3m32.16226284s ago: executing program 32 (id=736): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$unix(r1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pread64(r1, &(0x7f0000000100)=""/10, 0xa, 0x8) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x5, 0x89, 0x0, @empty, @broadcast}, "eaa2d7e2"}}}}, 0x0) madvise(&(0x7f00004d9000/0x4000)=nil, 0x4000, 0x3) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x17) 3m2.365363587s ago: executing program 33 (id=735): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@bridge_setlink={0x2e8, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x20840}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1cc, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x58, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_PHYS_SWITCH_ID={0x11, 0x24, "83eddaf31b5dd7248be50575e9"}, @IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x804}, 0x0) 3m1.422832582s ago: executing program 34 (id=740): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 3m1.070412969s ago: executing program 35 (id=738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$isdn(0x22, 0x2, 0x25) r3 = socket$isdn(0x22, 0x2, 0x22) dup3(r2, r3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r5, 0x0, 0x11, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf250400"], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x20000000) 3m0.86108533s ago: executing program 36 (id=739): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x4}, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) socket$inet(0x2, 0x80001, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c61737400000000040002"], 0xc8}, 0x1, 0x0, 0x0, 0x20044840}, 0x20054880) 56.250850381s ago: executing program 9 (id=961): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/127, &(0x7f00000000c0)=0x7f) prlimit64(0x0, 0xe, 0x0, 0x0) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) io_setup(0x7ffe, &(0x7f0000000300)) io_setup(0x83ab, &(0x7f00000004c0)) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x14, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x44040000}, 0x20000014) 54.178581798s ago: executing program 9 (id=966): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) listen(r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0) rt_sigsuspend(&(0x7f0000000a80), 0x8) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 49.404633397s ago: executing program 9 (id=973): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) close(r3) 49.357159857s ago: executing program 8 (id=974): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x100, 0x400005) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000180)={0x3}, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 48.549641018s ago: executing program 6 (id=976): openat(0xffffffffffffffff, 0x0, 0x18220, 0x60) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x20048000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff) r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x3, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0xc, 0x2, 0x3, "3927ec0fbc0200", 0x59455247}) 48.277782036s ago: executing program 8 (id=977): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0xffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xffffffff, 0x8, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x40000]}}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r10, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000000c0)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 47.313794842s ago: executing program 6 (id=979): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "cdacf56808098d000043c96d2200"}) pread64(r2, 0x0, 0x0, 0x4eb) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 46.77197741s ago: executing program 6 (id=980): ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) syz_usb_control_io(r0, 0x0, 0x0) 45.349126466s ago: executing program 5 (id=982): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) r1 = memfd_secret(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10004) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) close(r8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000080)={0x0, 0x0, r7}) 45.289077519s ago: executing program 7 (id=983): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$isdn(0x22, 0x2, 0x25) r3 = socket$isdn(0x22, 0x2, 0x22) dup3(r2, r3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf250400"], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1c1f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x68, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xfcb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0xff, 0x8}}}}}]}}]}}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 45.091000811s ago: executing program 8 (id=984): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) 45.034064061s ago: executing program 9 (id=985): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) write$evdev(r6, &(0x7f0000000040), 0x373) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) syz_open_procfs$namespace(0x0, 0x0) shutdown(r7, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$key(0xf, 0x3, 0x2) 44.237929103s ago: executing program 5 (id=986): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) write$evdev(r5, &(0x7f0000000040), 0x373) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) syz_open_procfs$namespace(0x0, 0x0) shutdown(r6, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 43.444049319s ago: executing program 8 (id=987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x0, @pix_mp={0x0, 0x80000a, 0x31435641, 0x0, 0x0, [{}, {}, {}, {0x80000000}, {}, {}, {}, {0x0, 0x3fd}], 0x2}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(0x0, 0x80) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r6, 0x800448d4, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630e}], 0x0, 0x0, 0x0}) 43.297932572s ago: executing program 6 (id=988): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0xffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xffffffff, 0x8, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x40000]}}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x200, 0xac5, 0x1}) 43.208763333s ago: executing program 5 (id=989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)="7d4e846e3854c8fe45ced8491f8b2972c772c9b20156c5c7aea782d0a80c355d803d5d6bb82f7b4ab84ff5bdf63540233c15bea88ce1dc48c64e14acaba4401095ca0c495241e4d533325839e7eb446c8c0c5bf588cdce02fdfd80cb2233b40940b2059cf2dd6d918a35e8c778bb959f42185e933999293c19bf1dd61d5d3f0b617e61911c12388f9fc0b7a78dcb9d", 0x8f}, {&(0x7f0000000640)="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", 0x126}], 0x2}}], 0x1, 0x4008004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 41.747282874s ago: executing program 5 (id=990): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) r1 = memfd_secret(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10004) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1}) 41.737203445s ago: executing program 7 (id=991): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 40.893330651s ago: executing program 8 (id=992): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4bcc72dd61070bec0494f1422be64cd0e12182ae31ab5d3970e5", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r7, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) 40.813654115s ago: executing program 7 (id=993): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) 40.49191409s ago: executing program 9 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xab1, &(0x7f0000003680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "1fc795", 0xa7b, 0x6, 0x1, @mcast2, @private1, {[@hopopts={0x4, 0xe, '\x00', [@jumbo, @calipso={0x7, 0x30, {0x2, 0xa, 0x55, 0xfffa, [0xfffffffffffffffc, 0x8, 0x3, 0x1, 0x3]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0x8f9, [0x7, 0x1, 0x2, 0x5]}}]}, @dstopts={0x3a}, @routing={0x32, 0x6, 0x1, 0x3, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xb}]}, @dstopts={0x5c, 0x0, '\x00', [@pad1]}, @hopopts={0x4, 0xe, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x1, 0x40, "cb044bea9aca817325b54c536c972be918a261c0bc0b74c2d511bf8705bbbdfa0b98671b97b538121618a2a1c264dc08d1ca33ee1e35ae6a64543ac64c53c0cd"}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x3}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0xe, [0x0, 0x6, 0x0]}}]}, @fragment={0x87, 0x0, 0x9, 0x1, 0x0, 0x5, 0x67}, @dstopts={0x3c, 0x10e, '\x00', [@pad1, @pad1, @generic={0xff, 0x86b, "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"}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x12, 0x10, 0x8, 0x0, 0x9a, {[@timestamp={0x8, 0xa, 0x4, 0x85}, @sack={0x5, 0x12, [0xfff, 0xf3d, 0x9c, 0xe71]}, @nop, @mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x9, @loopback, 0x8001, "92fde262d2662b"}, @mptcp=@mp_join={0x1e, 0x3, 0x7}]}}, {"92d16ff7af1764befed7d0a8ccc110a57960528a60d14eb2adfb794af0fa195f367647fc4476eddc29ad0a7b0015b648a395a9e2477d92e6d9c13f75e0fe4ef5a4cc7aca38a0a0b7a19b199647736dfc1c053e989043b3a8dd2e8a"}}}}}}}, 0x0) 37.510059851s ago: executing program 7 (id=995): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) close(r3) 34.866907591s ago: executing program 8 (id=996): socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 34.857217097s ago: executing program 6 (id=997): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) 34.825866757s ago: executing program 5 (id=998): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) r1 = memfd_secret(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10004) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) close(r8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000080)={0x0, 0x0, r7}) 34.621797702s ago: executing program 7 (id=999): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r3, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x400}}, 0x14}}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0xe30, 0x7ffe, "c2a0da871813beebb98f6cd3bde10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) 33.937348281s ago: executing program 9 (id=1000): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x18}, @local, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x6}, 0x3c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) unshare(0x22020400) fallocate(r2, 0x28, 0x2, 0x5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e0000001080d0000e00000010c00028005000100000000002400028014000180080001000000000008000200ac1efb2e703502800500010000000000080007"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000001380)={"dd9a64b425b1c69f4e76bb0761597e60", r6, r7, {0x6, 0x80000000}, {0x2, 0x72be}, 0x1, [0x5, 0x9d, 0x3, 0x10, 0x962, 0x4, 0x7c80000, 0x6, 0x5, 0x9, 0xf6a5, 0x9, 0x2, 0x4, 0x8000, 0xc]}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 32.901660739s ago: executing program 5 (id=1001): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4bcc72dd61070bec0494f1422be64cd0e12182ae31ab5d3970e5", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 31.304922641s ago: executing program 6 (id=1002): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x0]}, @CTA_LABELS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300), &(0x7f00000002c0)) 19.602372737s ago: executing program 7 (id=1003): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 0s ago: executing program 37 (id=996): socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) kernel console output (not intermixed with test programs): t } for pid=6184 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.113960][ T6201] hub 8-0:1.0: USB hub found [ 106.118990][ T6201] hub 8-0:1.0: 1 port detected [ 107.060317][ T5813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.652392][ T30] audit: type=1400 audit(1748228019.439:173): avc: denied { setopt } for pid=6216 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.059174][ T6233] netlink: 11 bytes leftover after parsing attributes in process `syz.0.79'. [ 109.566014][ T5813] usb 2-1: config 5 has an invalid interface number: 13 but max is 0 [ 109.590688][ T5813] usb 2-1: config 5 has no interface number 0 [ 109.633834][ T5813] usb 2-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=4b.77 [ 109.653216][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.729616][ T5813] usb 2-1: can't set config #5, error -71 [ 109.743304][ T5813] usb 2-1: USB disconnect, device number 3 [ 110.592410][ T30] audit: type=1326 audit(1748228022.779:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 112.048922][ T6263] hub 8-0:1.0: USB hub found [ 112.060448][ T6263] hub 8-0:1.0: 1 port detected [ 113.354841][ T30] audit: type=1400 audit(1748228025.549:175): avc: denied { create } for pid=6271 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.376741][ T30] audit: type=1400 audit(1748228025.549:176): avc: denied { write } for pid=6271 comm="syz.1.90" path="socket:[8844]" dev="sockfs" ino=8844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.670213][ T30] audit: type=1400 audit(1748228025.549:177): avc: denied { create } for pid=6271 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.836392][ T30] audit: type=1400 audit(1748228026.029:178): avc: denied { ioctl } for pid=6280 comm="syz.3.93" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8852 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.750191][ T30] audit: type=1400 audit(1748228026.659:179): avc: denied { bind } for pid=6280 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.886697][ T30] audit: type=1400 audit(1748228026.659:180): avc: denied { name_bind } for pid=6280 comm="syz.3.93" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.957102][ T30] audit: type=1400 audit(1748228026.659:181): avc: denied { node_bind } for pid=6280 comm="syz.3.93" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.960410][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 115.000750][ T30] audit: type=1400 audit(1748228026.669:182): avc: denied { connect } for pid=6280 comm="syz.3.93" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.188006][ T30] audit: type=1400 audit(1748228026.669:183): avc: denied { name_connect } for pid=6280 comm="syz.3.93" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.238973][ T30] audit: type=1400 audit(1748228026.979:184): avc: denied { map } for pid=6280 comm="syz.3.93" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.410598][ T6297] mmap: syz.0.94 (6297) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.594619][ T6300] 9pnet_fd: Insufficient options for proto=fd [ 115.603437][ T6300] loop6: detected capacity change from 0 to 524287999 [ 116.990710][ T6320] hub 8-0:1.0: USB hub found [ 117.000500][ T6320] hub 8-0:1.0: 1 port detected [ 117.490247][ T5813] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 118.140933][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.259868][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.299577][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.320761][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.603328][ T5813] usb 4-1: usb_control_msg returned -32 [ 119.670273][ T5813] usbtmc 4-1:16.0: can't read capabilities [ 119.743805][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 119.743820][ T30] audit: type=1400 audit(1748228031.939:188): avc: denied { mounton } for pid=6334 comm="syz.1.106" path="/20/file1" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.158029][ T5867] usb 4-1: USB disconnect, device number 2 [ 121.112695][ T6354] 9pnet_fd: Insufficient options for proto=fd [ 121.119271][ T6354] loop6: detected capacity change from 0 to 524287999 [ 121.272084][ T6356] 9pnet_fd: Insufficient options for proto=fd [ 122.110197][ T30] audit: type=1400 audit(1748228034.269:189): avc: denied { append } for pid=6363 comm="syz.3.114" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.610269][ T30] audit: type=1326 audit(1748228034.279:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 122.896962][ T30] audit: type=1326 audit(1748228034.279:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 122.920128][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.878120][ T30] audit: type=1326 audit(1748228034.279:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 124.321574][ T30] audit: type=1326 audit(1748228034.279:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 124.346368][ T30] audit: type=1326 audit(1748228034.279:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 124.635703][ T30] audit: type=1326 audit(1748228034.279:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 125.106601][ T30] audit: type=1326 audit(1748228034.279:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 125.131139][ T30] audit: type=1326 audit(1748228034.279:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 125.222264][ T30] audit: type=1326 audit(1748228034.279:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 125.454188][ T30] audit: type=1326 audit(1748228034.279:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 125.540318][ T30] audit: type=1400 audit(1748228034.989:200): avc: denied { read } for pid=6369 comm="syz.1.115" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.783689][ T6394] 9pnet_fd: Insufficient options for proto=fd [ 125.790433][ T6394] loop6: detected capacity change from 0 to 524287999 [ 125.897037][ T6398] netlink: 96 bytes leftover after parsing attributes in process `syz.1.124'. [ 126.189972][ T30] audit: type=1400 audit(1748228034.989:201): avc: denied { open } for pid=6369 comm="syz.1.115" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.659364][ T30] audit: type=1400 audit(1748228034.989:202): avc: denied { ioctl } for pid=6369 comm="syz.1.115" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.896364][ T30] audit: type=1326 audit(1748228035.939:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480458e969 code=0x7fc00000 [ 126.919621][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.417043][ T30] audit: type=1326 audit(1748228035.939:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f480458e969 code=0x7fc00000 [ 127.440183][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.494586][ T30] audit: type=1326 audit(1748228035.949:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480458e969 code=0x7fc00000 [ 127.517821][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.404250][ T6441] netlink: 68 bytes leftover after parsing attributes in process `syz.1.136'. [ 131.155998][ T6443] netlink: 96 bytes leftover after parsing attributes in process `syz.4.137'. [ 131.361135][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 131.361163][ T30] audit: type=1400 audit(1748228043.439:267): avc: denied { read } for pid=6447 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.529849][ T30] audit: type=1400 audit(1748228043.439:268): avc: denied { open } for pid=6447 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.554798][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.561408][ T30] audit: type=1400 audit(1748228043.439:269): avc: denied { getattr } for pid=6447 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.586562][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.660756][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.667085][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.290392][ T30] audit: type=1400 audit(1748228045.449:270): avc: denied { bind } for pid=6481 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.349617][ T6478] fuse: Bad value for 'fd' [ 133.384723][ T30] audit: type=1400 audit(1748228045.459:271): avc: denied { write } for pid=6481 comm="syz.1.147" path="socket:[9170]" dev="sockfs" ino=9170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.093027][ T30] audit: type=1400 audit(1748228045.529:272): avc: denied { read write } for pid=6477 comm="syz.4.148" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.093822][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 134.123162][ T6473] ceph: No mds server is up or the cluster is laggy [ 134.132055][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 134.163431][ T30] audit: type=1400 audit(1748228045.529:273): avc: denied { open } for pid=6477 comm="syz.4.148" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.211286][ T30] audit: type=1400 audit(1748228045.619:274): avc: denied { mount } for pid=6477 comm="syz.4.148" name="/" dev="ramfs" ino=9183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.413012][ T30] audit: type=1400 audit(1748228046.599:275): avc: denied { write } for pid=6431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.450336][ T6500] syz.4.148: attempt to access beyond end of device [ 134.450336][ T6500] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 134.463695][ T6500] FAT-fs (loop9): unable to read boot sector [ 134.472145][ T30] audit: type=1400 audit(1748228046.599:276): avc: denied { add_name } for pid=6431 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.710739][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 136.717069][ T30] audit: type=1400 audit(1748228048.859:284): avc: denied { ioctl } for pid=6522 comm="syz.1.156" path="socket:[9213]" dev="sockfs" ino=9213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.993468][ T6555] ceph: No mds server is up or the cluster is laggy [ 139.004369][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 139.266394][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 140.591065][ T6572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.163'. [ 141.300724][ T6579] netlink: 11 bytes leftover after parsing attributes in process `syz.4.166'. [ 141.950853][ T30] audit: type=1400 audit(1748228054.139:285): avc: denied { read write } for pid=6586 comm="syz.1.168" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 142.193105][ T6593] hub 8-0:1.0: USB hub found [ 142.200328][ T6593] hub 8-0:1.0: 1 port detected [ 142.585969][ T6589] lo speed is unknown, defaulting to 1000 [ 142.658399][ T30] audit: type=1400 audit(1748228054.139:286): avc: denied { open } for pid=6586 comm="syz.1.168" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 142.684040][ T6589] lo speed is unknown, defaulting to 1000 [ 142.699975][ T6589] lo speed is unknown, defaulting to 1000 [ 142.779671][ T30] audit: type=1400 audit(1748228054.699:287): avc: denied { setopt } for pid=6586 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.804833][ T30] audit: type=1400 audit(1748228054.729:288): avc: denied { create } for pid=6586 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 142.821927][ T6589] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.856879][ T30] audit: type=1400 audit(1748228054.749:289): avc: denied { write } for pid=6586 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 142.981409][ T6589] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 143.042383][ T6589] lo speed is unknown, defaulting to 1000 [ 143.058671][ T30] audit: type=1400 audit(1748228054.799:290): avc: denied { connect } for pid=6586 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.066185][ T6589] lo speed is unknown, defaulting to 1000 [ 143.181619][ T6589] lo speed is unknown, defaulting to 1000 [ 143.188744][ T6589] lo speed is unknown, defaulting to 1000 [ 143.231679][ T6589] lo speed is unknown, defaulting to 1000 [ 145.073475][ T30] audit: type=1400 audit(1748228057.259:291): avc: denied { ioctl } for pid=6621 comm="syz.3.178" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.845072][ T30] audit: type=1400 audit(1748228057.299:292): avc: denied { set_context_mgr } for pid=6621 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 146.579530][ T6638] netlink: 44 bytes leftover after parsing attributes in process `syz.1.179'. [ 151.327004][ T6667] netlink: 92 bytes leftover after parsing attributes in process `syz.3.190'. [ 152.816322][ T5821] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 152.945326][ T6686] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 153.205207][ T5821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.309424][ T6702] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.523482][ T5821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.560948][ T30] audit: type=1400 audit(1748228066.489:293): avc: denied { create } for pid=6692 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.596725][ T6703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.196'. [ 154.611248][ T5821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.629273][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.672099][ T5821] usb 1-1: can't set config #16, error -71 [ 154.685274][ T5821] usb 1-1: USB disconnect, device number 2 [ 154.741289][ T30] audit: type=1400 audit(1748228066.499:294): avc: denied { write } for pid=6692 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.825424][ T6729] siw: device registration error -23 [ 159.849907][ T6741] Bluetooth: MGMT ver 1.23 [ 159.854684][ T6741] Bluetooth: hci0: unsupported parameter 2327 [ 159.861356][ T6741] Bluetooth: hci0: unsupported parameter 256 [ 159.867346][ T6741] Bluetooth: hci0: unsupported parameter 2327 [ 159.919352][ T6741] Bluetooth: hci0: unsupported parameter 256 [ 159.963008][ T6754] fuse: Bad value for 'fd' [ 160.311941][ T6761] syz.1.211: attempt to access beyond end of device [ 160.311941][ T6761] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 160.324935][ T6761] FAT-fs (loop3): unable to read boot sector [ 160.354823][ T6756] netlink: 11 bytes leftover after parsing attributes in process `syz.3.201'. [ 161.697774][ T6769] netlink: 44 bytes leftover after parsing attributes in process `syz.1.213'. [ 161.760574][ T6771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.214'. [ 162.646275][ T6778] siw: device registration error -23 [ 164.680884][ T30] audit: type=1400 audit(1748228076.849:295): avc: denied { read write } for pid=6793 comm="syz.3.221" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.110576][ T30] audit: type=1400 audit(1748228076.849:296): avc: denied { open } for pid=6793 comm="syz.3.221" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.687460][ T6825] netlink: 11 bytes leftover after parsing attributes in process `syz.4.226'. [ 167.384536][ T30] audit: type=1400 audit(1748228079.579:297): avc: denied { create } for pid=6827 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 167.413328][ T6830] delete_channel: no stack [ 167.434092][ T6830] netlink: 224 bytes leftover after parsing attributes in process `syz.3.227'. [ 167.744783][ T6831] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.236000][ T6827] delete_channel: no stack [ 170.626267][ T30] audit: type=1400 audit(1748228082.819:298): avc: denied { create } for pid=6846 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 170.715847][ T30] audit: type=1400 audit(1748228082.879:299): avc: denied { read append } for pid=6846 comm="syz.4.232" name="sg0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.792974][ T30] audit: type=1400 audit(1748228082.879:300): avc: denied { open } for pid=6846 comm="syz.4.232" path="/dev/sg0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.123050][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 171.134990][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 171.267433][ T6858] ceph: No mds server is up or the cluster is laggy [ 171.485675][ T30] audit: type=1326 audit(1748228083.649:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63618e969 code=0x7fc00000 [ 171.747192][ T30] audit: type=1326 audit(1748228083.649:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fe63618e969 code=0x7fc00000 [ 172.593426][ T30] audit: type=1326 audit(1748228083.649:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63618e969 code=0x7fc00000 [ 172.660602][ T30] audit: type=1326 audit(1748228083.649:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63618e969 code=0x7fc00000 [ 172.753100][ T30] audit: type=1326 audit(1748228083.649:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63618e969 code=0x7fc00000 [ 173.970908][ T30] audit: type=1326 audit(1748228083.649:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63618e969 code=0x7fc00000 [ 173.996406][ T30] audit: type=1326 audit(1748228083.649:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63618e969 code=0x7fc00000 [ 174.470271][ T6887] hub 8-0:1.0: USB hub found [ 174.476857][ T6887] hub 8-0:1.0: 1 port detected [ 176.508305][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 176.517460][ T6901] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 176.526292][ T6901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.510106][ T6913] fuse: Bad value for 'fd' [ 177.792299][ T6919] syz.1.248: attempt to access beyond end of device [ 177.792299][ T6919] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 177.805355][ T6919] FAT-fs (loop3): unable to read boot sector [ 179.010558][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 179.019446][ T6926] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 179.027117][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.313176][ T6938] hub 8-0:1.0: USB hub found [ 180.319570][ T6938] hub 8-0:1.0: 1 port detected [ 181.219757][ T6946] netlink: 96 bytes leftover after parsing attributes in process `syz.0.256'. [ 181.794491][ T6950] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 181.999111][ T6950] xt_HMARK: spi-set and port-set can't be combined [ 182.970751][ T6960] delete_channel: no stack [ 184.549220][ T6956] delete_channel: no stack [ 185.199701][ T6976] netlink: 11 bytes leftover after parsing attributes in process `syz.0.263'. [ 189.076176][ T7006] hub 8-0:1.0: USB hub found [ 189.081762][ T7006] hub 8-0:1.0: 1 port detected [ 191.566226][ T7024] hub 8-0:1.0: USB hub found [ 191.571126][ T7024] hub 8-0:1.0: 1 port detected [ 191.660803][ T7028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.271'. [ 193.610534][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 193.610551][ T30] audit: type=1400 audit(1748228105.779:321): avc: denied { create } for pid=7032 comm="syz.3.277" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.704764][ T30] audit: type=1400 audit(1748228105.869:322): avc: denied { write } for pid=7032 comm="syz.3.277" name="file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.832897][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.839280][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.848106][ T30] audit: type=1400 audit(1748228105.869:323): avc: denied { open } for pid=7032 comm="syz.3.277" path="/46/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.140865][ T30] audit: type=1400 audit(1748228107.289:324): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.902836][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 195.908889][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 195.914970][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 195.920972][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 195.921007][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 198.033498][ T7083] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.300491][ T5869] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 198.466348][ T5869] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 198.794085][ T5869] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 198.813672][ T5869] usb 4-1: config 1 has no interface number 1 [ 198.821455][ T5869] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 198.837123][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.849052][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.857599][ T5869] usb 4-1: Product: syz [ 199.778336][ T5869] usb 4-1: Manufacturer: syz [ 199.783022][ T5869] usb 4-1: SerialNumber: syz [ 201.054585][ T5872] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 203.486428][ T5869] usb 4-1: 2:1 : unsupported format bits 0x100 [ 203.559585][ T5869] usb 4-1: USB disconnect, device number 3 [ 204.367011][ T7117] xt_HMARK: spi-set and port-set can't be combined [ 204.411179][ T30] audit: type=1400 audit(1748228116.049:325): avc: denied { write } for pid=7112 comm="syz.1.295" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.436962][ T7119] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 204.825284][ T30] audit: type=1400 audit(1748228116.049:326): avc: denied { open } for pid=7112 comm="syz.1.295" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.858747][ T30] audit: type=1400 audit(1748228116.139:327): avc: denied { connect } for pid=7112 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.878757][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.890376][ T5867] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.560310][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 205.626955][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.649861][ T5867] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 205.676692][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.690575][ T5867] usb 5-1: Product: syz [ 205.696897][ T5867] usb 5-1: Manufacturer: syz [ 205.808257][ T5867] usb 5-1: SerialNumber: syz [ 206.303422][ T5867] usb 5-1: config 0 descriptor?? [ 206.608757][ T5813] usb 5-1: USB disconnect, device number 4 [ 207.795039][ T7156] 9pnet_fd: Insufficient options for proto=fd [ 208.170214][ T7156] loop6: detected capacity change from 0 to 524287999 [ 208.692069][ T7161] fuse: Bad value for 'fd' [ 209.132894][ T7166] syz.4.307: attempt to access beyond end of device [ 209.132894][ T7166] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 210.944954][ T7166] FAT-fs (loop9): unable to read boot sector [ 214.662090][ T30] audit: type=1400 audit(1748228126.589:328): avc: denied { ioctl } for pid=7188 comm="syz.4.313" path="/55/file0" dev="tmpfs" ino=306 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 215.389802][ T7213] 9pnet_fd: Insufficient options for proto=fd [ 215.396758][ T7213] loop6: detected capacity change from 0 to 524287999 [ 217.030757][ T30] audit: type=1400 audit(1748228129.179:329): avc: denied { mount } for pid=7207 comm="syz.4.317" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 217.209443][ T30] audit: type=1400 audit(1748228129.399:330): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.794756][ T7254] netlink: 224 bytes leftover after parsing attributes in process `syz.2.331'. [ 222.070348][ T7250] delete_channel: no stack [ 222.088693][ T7250] delete_channel: no stack [ 222.353738][ T7261] 9pnet_fd: Insufficient options for proto=fd [ 222.363335][ T7261] loop6: detected capacity change from 0 to 524287999 [ 223.027811][ T30] audit: type=1400 audit(1748228135.129:331): avc: denied { setattr } for pid=7260 comm="syz.0.334" name="[kvm-gmem]" dev="anon_inodefs" ino=11669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.263969][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 224.273023][ T7268] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 224.280717][ T7268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.475735][ T30] audit: type=1400 audit(1748228137.669:332): avc: denied { read write } for pid=7271 comm="syz.4.322" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.499628][ T30] audit: type=1400 audit(1748228137.669:333): avc: denied { open } for pid=7271 comm="syz.4.322" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.524586][ T30] audit: type=1400 audit(1748228137.669:334): avc: denied { ioctl } for pid=7271 comm="syz.4.322" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.867747][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 226.510354][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 226.651146][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.791251][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 226.826974][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.844355][ T58] usb 5-1: Product: syz [ 226.849388][ T58] usb 5-1: Manufacturer: syz [ 226.862098][ T58] usb 5-1: SerialNumber: syz [ 226.880181][ T58] usb 5-1: config 0 descriptor?? [ 227.642052][ T6973] usb 5-1: USB disconnect, device number 5 [ 227.900379][ T30] audit: type=1400 audit(1748228140.029:335): avc: denied { create } for pid=7292 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.006671][ T30] audit: type=1400 audit(1748228140.029:336): avc: denied { connect } for pid=7292 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.056556][ T30] audit: type=1400 audit(1748228140.029:337): avc: denied { bind } for pid=7292 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.100420][ T30] audit: type=1400 audit(1748228140.029:338): avc: denied { write } for pid=7292 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.475006][ T7303] netlink: 11 bytes leftover after parsing attributes in process `syz.3.345'. [ 232.198006][ T7344] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.390908][ T7359] fuse: Bad value for 'fd' [ 236.470646][ T7372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.363'. [ 237.026955][ T30] audit: type=1400 audit(1748228148.669:339): avc: denied { write } for pid=7362 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 237.121824][ T30] audit: type=1326 audit(1748228149.179:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.147871][ T30] audit: type=1326 audit(1748228149.179:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.171613][ T30] audit: type=1326 audit(1748228149.189:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.195048][ T30] audit: type=1326 audit(1748228149.189:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.341267][ T30] audit: type=1326 audit(1748228149.189:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.380200][ T30] audit: type=1326 audit(1748228149.189:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.406325][ T30] audit: type=1326 audit(1748228149.189:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.543888][ T30] audit: type=1326 audit(1748228149.189:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 237.573005][ T30] audit: type=1326 audit(1748228149.189:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 239.398836][ T7397] hub 8-0:1.0: USB hub found [ 239.404203][ T7397] hub 8-0:1.0: 1 port detected [ 240.212456][ T7409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'. [ 240.787843][ T7412] netlink: 11 bytes leftover after parsing attributes in process `syz.3.373'. [ 240.887809][ T7416] fuse: Bad value for 'fd' [ 241.679530][ T58] libceph: connect (1)[c::]:6789 error -101 [ 242.072819][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 242.154746][ T7423] ceph: No mds server is up or the cluster is laggy [ 243.723396][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 243.723431][ T30] audit: type=1400 audit(1748228155.359:406): avc: denied { create } for pid=7432 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 243.946869][ T6973] libceph: connect (1)[c::]:6789 error -101 [ 243.991913][ T6973] libceph: mon0 (1)[c::]:6789 connect error [ 244.001216][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 244.171940][ T30] audit: type=1400 audit(1748228155.359:407): avc: denied { bind } for pid=7432 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.232296][ T7446] ceph: No mds server is up or the cluster is laggy [ 244.251649][ T58] libceph: connect (1)[c::]:6789 error -101 [ 244.275697][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 245.355259][ T7472] netlink: 11 bytes leftover after parsing attributes in process `syz.2.386'. [ 246.178165][ T7476] fuse: Bad value for 'fd' [ 246.652140][ T7482] ./file0: Can't lookup blockdev [ 247.937626][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.385'. [ 248.669522][ T7503] siw: device registration error -23 [ 250.587475][ T30] audit: type=1400 audit(1748228162.399:408): avc: denied { execute } for pid=7512 comm="syz.4.397" path="/66/cpuset.memory_pressure_enabled" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.196387][ T7552] delete_channel: no stack [ 254.253075][ T7552] netlink: 224 bytes leftover after parsing attributes in process `syz.2.404'. [ 255.262308][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.268803][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.284998][ T7545] delete_channel: no stack [ 255.289580][ T30] audit: type=1400 audit(1748228167.479:409): avc: denied { open } for pid=7545 comm="syz.2.404" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 256.001032][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 256.009964][ T7566] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 256.017557][ T7566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.516286][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 258.910762][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 258.929234][ T7590] ceph: No mds server is up or the cluster is laggy [ 259.512160][ T7607] delete_channel: no stack [ 259.614700][ T7607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.416'. [ 260.778259][ T7623] netlink: 36 bytes leftover after parsing attributes in process `syz.3.421'. [ 261.327723][ T7601] delete_channel: no stack [ 261.359656][ T30] audit: type=1326 audit(1748228173.389:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 261.437985][ T30] audit: type=1326 audit(1748228173.389:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 261.480339][ T30] audit: type=1326 audit(1748228173.389:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 261.527807][ T30] audit: type=1326 audit(1748228173.389:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 261.910758][ T30] audit: type=1326 audit(1748228173.389:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 262.058332][ T7627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.422'. [ 262.617421][ T30] audit: type=1326 audit(1748228173.389:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 262.813898][ T7626] delete_channel: no stack [ 262.818394][ T7626] delete_channel: no stack [ 262.843919][ T30] audit: type=1326 audit(1748228173.389:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 262.916736][ T30] audit: type=1326 audit(1748228173.389:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 263.999856][ T30] audit: type=1326 audit(1748228173.399:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 264.023449][ T30] audit: type=1326 audit(1748228173.399:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 265.481865][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.429'. [ 266.384349][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 266.384361][ T30] audit: type=1326 audit(1748228178.539:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 266.430236][ T30] audit: type=1326 audit(1748228178.549:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 266.454834][ T30] audit: type=1326 audit(1748228178.549:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 266.478186][ T30] audit: type=1326 audit(1748228178.549:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 266.502341][ T30] audit: type=1326 audit(1748228178.549:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 266.526656][ T30] audit: type=1326 audit(1748228178.549:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 266.693670][ T30] audit: type=1326 audit(1748228178.549:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 266.732738][ T30] audit: type=1326 audit(1748228178.549:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 267.014175][ T58] libceph: connect (1)[c::]:6789 error -101 [ 267.027210][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 267.300776][ T30] audit: type=1326 audit(1748228178.549:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 267.646069][ T6973] libceph: connect (1)[c::]:6789 error -101 [ 267.691306][ T6973] libceph: mon0 (1)[c::]:6789 connect error [ 268.080181][ T30] audit: type=1326 audit(1748228178.549:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 268.117427][ T7672] ceph: No mds server is up or the cluster is laggy [ 270.304617][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 270.313557][ T7708] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 270.321277][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.868887][ T58] libceph: connect (1)[c::]:6789 error -101 [ 270.962528][ T7709] ceph: No mds server is up or the cluster is laggy [ 271.002052][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 272.408452][ T58] libceph: connect (1)[c::]:6789 error -101 [ 272.415359][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 272.680896][ T7718] ceph: No mds server is up or the cluster is laggy [ 275.496346][ T7751] 9pnet_fd: Insufficient options for proto=fd [ 275.601689][ T7751] loop6: detected capacity change from 0 to 524287999 [ 276.059785][ T7758] 9pnet_fd: Insufficient options for proto=fd [ 277.134971][ T7770] hub 8-0:1.0: USB hub found [ 277.140484][ T7770] hub 8-0:1.0: 1 port detected [ 279.484161][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 279.563241][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 279.563269][ T30] audit: type=1400 audit(1748228191.739:728): avc: denied { create } for pid=7768 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 280.573916][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 280.692326][ T7784] ceph: No mds server is up or the cluster is laggy [ 280.817434][ T7802] Bluetooth: hci0: unsupported parameter 2327 [ 280.823777][ T7802] Bluetooth: hci0: unsupported parameter 256 [ 280.841355][ T6973] libceph: connect (1)[c::]:6789 error -101 [ 280.853867][ T7802] Bluetooth: hci0: unsupported parameter 2327 [ 280.862517][ T6973] libceph: mon0 (1)[c::]:6789 connect error [ 280.874519][ T7802] Bluetooth: hci0: unsupported parameter 256 [ 282.285319][ T30] audit: type=1400 audit(1748228194.459:729): avc: denied { write } for pid=7807 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 283.039416][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 283.066308][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 283.107543][ T7817] ceph: No mds server is up or the cluster is laggy [ 283.738736][ T7829] netlink: 11 bytes leftover after parsing attributes in process `syz.1.468'. [ 283.775665][ T30] audit: type=1400 audit(1748228195.969:730): avc: denied { shutdown } for pid=7826 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.896262][ T7830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.709706][ T30] audit: type=1400 audit(1748228195.999:731): avc: denied { getopt } for pid=7826 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.732468][ T30] audit: type=1400 audit(1748228195.999:732): avc: denied { name_connect } for pid=7826 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 288.644616][ T7875] netlink: 224 bytes leftover after parsing attributes in process `syz.2.480'. [ 289.122996][ T58] libceph: connect (1)[c::]:6789 error -101 [ 289.129887][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 290.142649][ T58] libceph: connect (1)[c::]:6789 error -101 [ 290.150055][ T7896] netlink: 68 bytes leftover after parsing attributes in process `syz.2.483'. [ 290.224904][ T7887] ceph: No mds server is up or the cluster is laggy [ 290.334021][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 291.267046][ T30] audit: type=1400 audit(1748228203.459:733): avc: denied { read append } for pid=7901 comm="syz.4.486" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 291.558245][ T30] audit: type=1400 audit(1748228203.459:734): avc: denied { open } for pid=7901 comm="syz.4.486" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 291.649720][ T30] audit: type=1400 audit(1748228203.459:735): avc: denied { map } for pid=7901 comm="syz.4.486" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 291.674493][ T30] audit: type=1400 audit(1748228203.459:736): avc: denied { write execute } for pid=7901 comm="syz.4.486" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 292.206665][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 292.472848][ T7918] fuse: Bad value for 'fd' [ 292.792086][ T7921] ./file0: Can't lookup blockdev [ 292.904546][ T7923] netlink: 11 bytes leftover after parsing attributes in process `syz.1.488'. [ 295.227263][ T7950] netlink: 68 bytes leftover after parsing attributes in process `syz.2.497'. [ 295.254286][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 295.255249][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 295.779722][ T58] libceph: connect (1)[c::]:6789 error -101 [ 295.790069][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 295.807194][ T7951] ceph: No mds server is up or the cluster is laggy [ 298.107253][ T7979] 9pnet_fd: Insufficient options for proto=fd [ 298.151260][ T7979] loop6: detected capacity change from 0 to 524287999 [ 299.313158][ T7986] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.192436][ T30] audit: type=1326 audit(1748228213.389:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.268149][ T8007] netlink: 68 bytes leftover after parsing attributes in process `syz.0.510'. [ 301.357474][ T30] audit: type=1326 audit(1748228213.389:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.380812][ T30] audit: type=1326 audit(1748228213.389:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.404949][ T30] audit: type=1326 audit(1748228213.389:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.445459][ T30] audit: type=1326 audit(1748228213.389:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.514471][ T30] audit: type=1326 audit(1748228213.389:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.718057][ T30] audit: type=1326 audit(1748228213.389:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.743579][ T30] audit: type=1326 audit(1748228213.389:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 301.969907][ T8017] 9pnet_fd: Insufficient options for proto=fd [ 301.980481][ T8017] loop6: detected capacity change from 0 to 524287999 [ 302.372739][ T30] audit: type=1326 audit(1748228213.389:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 302.408274][ T30] audit: type=1326 audit(1748228213.389:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 305.299405][ T5869] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 305.327104][ T8053] ceph: No mds server is up or the cluster is laggy [ 305.344253][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 305.351016][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 305.473869][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 305.484649][ T5869] usb 1-1: not running at top speed; connect to a high speed hub [ 305.564652][ T6973] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 307.870596][ T6973] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 307.947771][ T6973] usb 2-1: can't read configurations, error -71 [ 308.305412][ T8071] netlink: 68 bytes leftover after parsing attributes in process `syz.2.523'. [ 309.448689][ T8080] 9pnet_fd: Insufficient options for proto=fd [ 309.458202][ T8080] loop6: detected capacity change from 0 to 524287999 [ 310.540996][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -110 [ 310.548757][ T5869] usb 1-1: can't read configurations, error -110 [ 312.500553][ T5869] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 313.040172][ T5869] usb 1-1: device descriptor read/64, error -32 [ 313.205354][ T5869] usb usb1-port1: attempt power cycle [ 313.541085][ T8101] hub 8-0:1.0: USB hub found [ 313.546887][ T8101] hub 8-0:1.0: 1 port detected [ 316.243391][ T8122] delete_channel: no stack [ 316.255445][ T8122] netlink: 224 bytes leftover after parsing attributes in process `syz.0.534'. [ 316.529601][ T8111] delete_channel: no stack [ 316.757450][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.763839][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.409747][ T8125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.614444][ T8147] 9pnet_fd: Insufficient options for proto=fd [ 320.940699][ T8172] hub 8-0:1.0: USB hub found [ 320.946107][ T8172] hub 8-0:1.0: 1 port detected [ 321.100263][ T6973] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 321.666602][ T6973] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.690187][ T6973] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.724946][ T6973] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.750161][ T6973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.011512][ T6973] usb 4-1: usb_control_msg returned -32 [ 322.017110][ T6973] usbtmc 4-1:16.0: can't read capabilities [ 322.290565][ T8198] netlink: 11 bytes leftover after parsing attributes in process `syz.4.551'. [ 324.109864][ T6973] usb 4-1: USB disconnect, device number 4 [ 325.755270][ T8217] hub 8-0:1.0: USB hub found [ 325.760907][ T8217] hub 8-0:1.0: 1 port detected [ 326.568500][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 326.577449][ T8222] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 326.585077][ T8222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.683637][ T8254] ceph: No mds server is up or the cluster is laggy [ 330.708225][ T974] libceph: connect (1)[c::]:6789 error -101 [ 330.910295][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 332.392885][ T8277] 9pnet_fd: Insufficient options for proto=fd [ 332.400024][ T8277] loop6: detected capacity change from 0 to 524287999 [ 332.506121][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 332.506137][ T30] audit: type=1326 audit(1748228244.699:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8265 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 332.792966][ T30] audit: type=1326 audit(1748228244.699:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8265 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 332.816196][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.884548][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 332.894658][ T8287] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 332.902931][ T8287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.632148][ T30] audit: type=1326 audit(1748228244.699:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8265 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 333.695770][ T30] audit: type=1326 audit(1748228244.699:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8265 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 333.795985][ T30] audit: type=1326 audit(1748228244.699:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8265 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 333.836276][ T8295] delete_channel: no stack [ 333.864937][ T8295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.580'. [ 334.522815][ T30] audit: type=1326 audit(1748228244.699:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8265 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 334.751458][ T8305] delete_channel: no stack [ 335.371860][ T8305] netlink: 224 bytes leftover after parsing attributes in process `syz.2.583'. [ 335.378864][ T8290] delete_channel: no stack [ 335.627992][ T8300] delete_channel: no stack [ 335.766224][ T8314] delete_channel: no stack [ 335.773804][ T8314] netlink: 224 bytes leftover after parsing attributes in process `syz.1.585'. [ 336.219579][ T8310] delete_channel: no stack [ 337.713508][ T58] libceph: connect (1)[c::]:6789 error -101 [ 337.928363][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 338.020273][ T5867] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 338.063589][ T8334] ceph: No mds server is up or the cluster is laggy [ 338.130155][ T30] audit: type=1326 audit(1748228250.319:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e438e969 code=0x7fc00000 [ 339.019246][ T5867] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 339.099225][ T5867] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 339.140034][ T5867] usb 5-1: config 1 has no interface number 1 [ 339.340557][ T8358] hub 8-0:1.0: USB hub found [ 339.346962][ T8358] hub 8-0:1.0: 1 port detected [ 340.050184][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 340.076965][ T5867] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.527799][ T5867] usb 5-1: string descriptor 0 read error: -71 [ 340.541231][ T5867] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.555308][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.651095][ T5867] usb 5-1: can't set config #1, error -71 [ 340.692297][ T5867] usb 5-1: USB disconnect, device number 6 [ 342.534181][ T58] libceph: connect (1)[c::]:6789 error -101 [ 342.540357][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 342.641609][ T8382] ceph: No mds server is up or the cluster is laggy [ 343.000539][ T6973] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 343.563782][ T8400] hub 8-0:1.0: USB hub found [ 343.570254][ T8400] hub 8-0:1.0: 1 port detected [ 344.317654][ T58] libceph: connect (1)[c::]:6789 error -101 [ 344.354068][ T8402] ceph: No mds server is up or the cluster is laggy [ 344.656665][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 344.666978][ T6973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.678442][ T6973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.838139][ T6973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 344.849820][ T6973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.909050][ T8411] 9pnet_fd: Insufficient options for proto=fd [ 344.919873][ T8411] loop6: detected capacity change from 0 to 524287999 [ 345.613558][ T30] audit: type=1326 audit(1748228257.599:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 345.805714][ T30] audit: type=1326 audit(1748228257.599:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 345.829230][ T6973] usb 5-1: can't set config #16, error -71 [ 345.852858][ T6973] usb 5-1: USB disconnect, device number 7 [ 345.965341][ T30] audit: type=1326 audit(1748228257.599:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 345.989190][ T30] audit: type=1326 audit(1748228257.599:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 346.037096][ T30] audit: type=1326 audit(1748228257.599:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 346.249305][ T30] audit: type=1326 audit(1748228257.599:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 346.277895][ T30] audit: type=1326 audit(1748228257.599:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 346.409234][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 346.418812][ T8424] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 346.426624][ T8424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.741584][ T30] audit: type=1326 audit(1748228257.599:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 347.142829][ T8429] delete_channel: no stack [ 347.216295][ T8429] netlink: 224 bytes leftover after parsing attributes in process `syz.0.614'. [ 351.048876][ T8460] hub 8-0:1.0: USB hub found [ 351.053674][ T8460] hub 8-0:1.0: 1 port detected [ 352.506864][ T8425] delete_channel: no stack [ 352.578952][ T8471] delete_channel: no stack [ 352.600317][ T8471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.624'. [ 353.404405][ T30] audit: type=1326 audit(1748228265.589:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 353.432410][ T30] audit: type=1326 audit(1748228265.589:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 353.482764][ T30] audit: type=1326 audit(1748228265.589:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 353.516461][ T8465] delete_channel: no stack [ 353.575319][ T30] audit: type=1326 audit(1748228265.589:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 353.629589][ T30] audit: type=1326 audit(1748228265.589:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255318e969 code=0x7fc00000 [ 353.653384][ T30] audit: type=1400 audit(1748228265.709:825): avc: denied { ioctl } for pid=8465 comm="syz.1.624" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 354.529466][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'. [ 355.140446][ T30] audit: type=1326 audit(1748228267.099:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8485 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480458e969 code=0x7fc00000 [ 355.310591][ T30] audit: type=1326 audit(1748228267.099:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8485 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f480458e969 code=0x7fc00000 [ 355.452854][ T8484] delete_channel: no stack [ 355.490316][ T30] audit: type=1326 audit(1748228267.099:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8485 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480458e969 code=0x7fc00000 [ 355.528675][ T30] audit: type=1326 audit(1748228267.099:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8485 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480458e969 code=0x7fc00000 [ 356.233930][ T58] libceph: connect (1)[c::]:6789 error -101 [ 356.244466][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 356.345877][ T8518] delete_channel: no stack [ 356.355464][ T8518] netlink: 224 bytes leftover after parsing attributes in process `syz.0.636'. [ 356.401974][ T8508] ceph: No mds server is up or the cluster is laggy [ 357.703245][ T8512] delete_channel: no stack [ 358.551978][ T8541] ceph: No mds server is up or the cluster is laggy [ 358.559106][ T58] libceph: connect (1)[c::]:6789 error -101 [ 358.572860][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 360.657732][ T8570] delete_channel: no stack [ 360.663692][ T8570] netlink: 224 bytes leftover after parsing attributes in process `syz.4.649'. [ 360.714570][ T8565] delete_channel: no stack [ 361.318818][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 361.318832][ T30] audit: type=1326 audit(1748228273.509:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8558 comm="syz.0.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 361.364056][ T30] audit: type=1326 audit(1748228273.549:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8558 comm="syz.0.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 362.316560][ T30] audit: type=1326 audit(1748228273.549:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8558 comm="syz.0.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf8e969 code=0x7fc00000 [ 364.268621][ T8608] 9pnet_fd: Insufficient options for proto=fd [ 364.337532][ T8612] loop6: detected capacity change from 0 to 524287999 [ 364.863263][ T8614] fuse: Bad value for 'fd' [ 365.185713][ T8616] syz.2.664: attempt to access beyond end of device [ 365.185713][ T8616] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 365.198764][ T8616] FAT-fs (loop5): unable to read boot sector [ 367.288989][ T8626] delete_channel: no stack [ 367.305994][ T8626] netlink: 224 bytes leftover after parsing attributes in process `syz.2.667'. [ 367.961169][ T8624] delete_channel: no stack [ 367.999543][ T8633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.392601][ T8654] netlink: 11 bytes leftover after parsing attributes in process `syz.0.675'. [ 370.419750][ T58] libceph: connect (1)[c::]:6789 error -101 [ 370.432224][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 370.700344][ T8650] ceph: No mds server is up or the cluster is laggy [ 370.891264][ T58] libceph: connect (1)[c::]:6789 error -101 [ 370.897431][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 372.739739][ T8672] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 372.741625][ T58] libceph: connect (1)[c::]:6789 error -101 [ 372.804783][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 373.867196][ T8687] 9pnet_fd: Insufficient options for proto=fd [ 373.901475][ T8687] loop6: detected capacity change from 0 to 524287999 [ 374.034240][ T8693] delete_channel: no stack [ 374.056517][ T8693] netlink: 224 bytes leftover after parsing attributes in process `syz.1.684'. [ 374.516561][ T8689] delete_channel: no stack [ 378.403645][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.410019][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.215471][ T8746] netlink: 224 bytes leftover after parsing attributes in process `syz.2.698'. [ 380.253205][ T30] audit: type=1400 audit(1748228292.399:897): avc: denied { create } for pid=8743 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.737369][ T8741] delete_channel: no stack [ 380.764927][ T8741] delete_channel: no stack [ 381.223234][ T8762] netlink: 11 bytes leftover after parsing attributes in process `syz.1.701'. [ 394.126034][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.133970][ T8820] batadv_slave_0: entered promiscuous mode [ 398.862768][ T8844] 9pnet_fd: Insufficient options for proto=fd [ 399.602266][ T8843] delete_channel: no stack [ 399.648261][ T8843] netlink: 224 bytes leftover after parsing attributes in process `syz.1.726'. [ 402.290524][ T8839] delete_channel: no stack [ 404.776466][ T8866] 9pnet_fd: Insufficient options for proto=fd [ 412.723605][ T8872] sched: DL replenish lagged too much [ 449.380542][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.386864][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.465203][ T4389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.266969][ T4389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.338177][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.340901][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.354728][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.364640][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.375236][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.382981][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.395358][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.405810][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.417031][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.424764][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.467305][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.475751][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.483407][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.494130][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.501831][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 457.646147][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.668202][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.678057][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.711126][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.711560][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.726443][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.748157][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.754720][ T4389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.773104][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.794405][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.809915][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.955323][ T4389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.979858][ T8900] lo speed is unknown, defaulting to 1000 [ 458.029866][ T8898] lo speed is unknown, defaulting to 1000 [ 458.078776][ T8895] lo speed is unknown, defaulting to 1000 [ 458.120532][ T8897] lo speed is unknown, defaulting to 1000 [ 458.248313][ T8902] lo speed is unknown, defaulting to 1000 [ 458.517171][ T4389] bridge_slave_1: left allmulticast mode [ 458.523023][ T4389] bridge_slave_1: left promiscuous mode [ 458.529561][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.598908][ T4389] bridge_slave_0: left allmulticast mode [ 458.611066][ T4389] bridge_slave_0: left promiscuous mode [ 458.616841][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.379288][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.393936][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.404851][ T4389] bond0 (unregistering): Released all slaves [ 459.500232][ T5824] Bluetooth: hci5: command tx timeout [ 459.580206][ T5824] Bluetooth: hci0: command tx timeout [ 459.586097][ T5824] Bluetooth: hci1: command tx timeout [ 459.822186][ T5824] Bluetooth: hci2: command tx timeout [ 459.904371][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 459.911288][ T5824] Bluetooth: hci4: command tx timeout [ 459.939553][ T8898] chnl_net:caif_netlink_parms(): no params data found [ 460.622924][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 460.766970][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 460.974894][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.988482][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.997926][ T8900] bridge_slave_0: entered allmulticast mode [ 461.012101][ T8900] bridge_slave_0: entered promiscuous mode [ 461.258950][ T4389] hsr_slave_0: left promiscuous mode [ 461.288587][ T4389] hsr_slave_1: left promiscuous mode [ 461.303765][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.330309][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.340942][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.348353][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.427322][ T4389] veth1_macvtap: left promiscuous mode [ 461.445359][ T4389] veth0_macvtap: left promiscuous mode [ 461.460579][ T4389] veth1_vlan: left promiscuous mode [ 461.466092][ T4389] veth0_vlan: left promiscuous mode [ 461.580198][ T5824] Bluetooth: hci5: command tx timeout [ 461.661003][ T5824] Bluetooth: hci1: command tx timeout [ 461.666429][ T5824] Bluetooth: hci0: command tx timeout [ 461.900581][ T5824] Bluetooth: hci2: command tx timeout [ 461.983945][ T5824] Bluetooth: hci4: command tx timeout [ 462.304799][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 462.359059][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 462.898203][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.905911][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.918318][ T8900] bridge_slave_1: entered allmulticast mode [ 462.949531][ T8900] bridge_slave_1: entered promiscuous mode [ 463.067340][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.076142][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.084122][ T8898] bridge_slave_0: entered allmulticast mode [ 463.091820][ T8898] bridge_slave_0: entered promiscuous mode [ 463.274428][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.307719][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.335817][ T8898] bridge_slave_1: entered allmulticast mode [ 463.357613][ T8898] bridge_slave_1: entered promiscuous mode [ 463.461745][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.543516][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.643498][ T8902] chnl_net:caif_netlink_parms(): no params data found [ 463.660538][ T5824] Bluetooth: hci5: command tx timeout [ 463.681551][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.698907][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.740619][ T5817] Bluetooth: hci1: command tx timeout [ 463.746126][ T5824] Bluetooth: hci0: command tx timeout [ 463.830658][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.837787][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.854712][ T8897] bridge_slave_0: entered allmulticast mode [ 463.871806][ T8897] bridge_slave_0: entered promiscuous mode [ 463.930524][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.944110][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.955983][ T8895] bridge_slave_0: entered allmulticast mode [ 463.967981][ T8895] bridge_slave_0: entered promiscuous mode [ 463.986501][ T5824] Bluetooth: hci2: command tx timeout [ 464.055081][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.062671][ T5824] Bluetooth: hci4: command tx timeout [ 464.077558][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.087536][ T8897] bridge_slave_1: entered allmulticast mode [ 464.099784][ T8897] bridge_slave_1: entered promiscuous mode [ 464.155766][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.168267][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.179391][ T8895] bridge_slave_1: entered allmulticast mode [ 464.202396][ T8895] bridge_slave_1: entered promiscuous mode [ 464.407638][ T8900] team0: Port device team_slave_0 added [ 464.442851][ T8898] team0: Port device team_slave_0 added [ 464.505300][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.587805][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.631880][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.653793][ T8900] team0: Port device team_slave_1 added [ 464.684447][ T8898] team0: Port device team_slave_1 added [ 464.693171][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.793244][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.804942][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.831185][ T8902] bridge_slave_0: entered allmulticast mode [ 464.863686][ T8902] bridge_slave_0: entered promiscuous mode [ 465.116589][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.134715][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.146302][ T8902] bridge_slave_1: entered allmulticast mode [ 465.154436][ T8902] bridge_slave_1: entered promiscuous mode [ 465.173676][ T8897] team0: Port device team_slave_0 added [ 465.213186][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.224380][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.257085][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.320281][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.327253][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.363332][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.429171][ T8895] team0: Port device team_slave_0 added [ 465.483686][ T8897] team0: Port device team_slave_1 added [ 465.518022][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.534826][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.565713][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.581285][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.588244][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.623558][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.652331][ T8895] team0: Port device team_slave_1 added [ 465.740376][ T5824] Bluetooth: hci5: command tx timeout [ 465.820482][ T5824] Bluetooth: hci0: command tx timeout [ 465.825909][ T5817] Bluetooth: hci1: command tx timeout [ 465.859204][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.965714][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.973024][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.002383][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.061351][ T5817] Bluetooth: hci2: command tx timeout [ 466.141189][ T5817] Bluetooth: hci4: command tx timeout [ 466.148100][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.199422][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.206488][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.233438][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.245328][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.255411][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.283152][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.324058][ T4389] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.339749][ T8900] hsr_slave_0: entered promiscuous mode [ 466.346371][ T8900] hsr_slave_1: entered promiscuous mode [ 466.353330][ T8900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.361025][ T8900] Cannot create hsr debugfs directory [ 466.373233][ T8898] hsr_slave_0: entered promiscuous mode [ 466.379452][ T8898] hsr_slave_1: entered promiscuous mode [ 466.385683][ T8898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.393466][ T8898] Cannot create hsr debugfs directory [ 466.399437][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.407968][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.435130][ T8895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.454235][ T8902] team0: Port device team_slave_0 added [ 466.463066][ T8902] team0: Port device team_slave_1 added [ 466.486296][ T4389] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.545653][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.552828][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.579152][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.638072][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.647984][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.674192][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.698925][ T4389] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.716999][ T8897] hsr_slave_0: entered promiscuous mode [ 466.723083][ T8897] hsr_slave_1: entered promiscuous mode [ 466.729815][ T8897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.737962][ T8897] Cannot create hsr debugfs directory [ 466.807662][ T4389] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.839546][ T8895] hsr_slave_0: entered promiscuous mode [ 466.846104][ T8895] hsr_slave_1: entered promiscuous mode [ 466.852723][ T8895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.860478][ T8895] Cannot create hsr debugfs directory [ 466.994902][ T8902] hsr_slave_0: entered promiscuous mode [ 467.001897][ T8902] hsr_slave_1: entered promiscuous mode [ 467.007822][ T8902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.015637][ T8902] Cannot create hsr debugfs directory [ 467.324841][ T4389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.444485][ T4389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.508986][ T8900] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 467.520360][ T8900] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 467.550812][ T8900] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 467.572625][ T4389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.597704][ T8900] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 467.639106][ T4389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.678224][ T8897] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.688354][ T8897] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 467.700653][ T8897] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 467.716955][ T8897] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 467.804413][ T8898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 467.842372][ T8898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.853879][ T8898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.880308][ T8898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.977294][ T4389] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.011524][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.050880][ T4389] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.082352][ T8895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 468.106493][ T8895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 468.118386][ T8895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 468.155189][ T8895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 468.201036][ T4389] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.228762][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.301804][ T4389] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.321206][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.328328][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.365658][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.398528][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.405671][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.454242][ T8902] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 468.478848][ T8902] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 468.495336][ T8902] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 468.513473][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.547856][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.566485][ T8902] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 468.644270][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.651439][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.669244][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.676433][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.695447][ T8898] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.813824][ T4389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.830765][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.837856][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.859273][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.866413][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.886106][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.915499][ T4389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.977107][ T4389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.059072][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.102052][ T4389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.166045][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.173228][ T6520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.224204][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.231381][ T6520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.278668][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.453538][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.607653][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.698366][ T4389] bridge_slave_1: left allmulticast mode [ 469.717803][ T4389] bridge_slave_1: left promiscuous mode [ 469.724573][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.733995][ T4389] bridge_slave_0: left allmulticast mode [ 469.739648][ T4389] bridge_slave_0: left promiscuous mode [ 469.749236][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.763688][ T4389] bridge_slave_1: left allmulticast mode [ 469.769360][ T4389] bridge_slave_1: left promiscuous mode [ 469.775896][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.786866][ T4389] bridge_slave_0: left allmulticast mode [ 469.793243][ T4389] bridge_slave_0: left promiscuous mode [ 469.799639][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.812007][ T4389] bridge_slave_1: left allmulticast mode [ 469.817661][ T4389] bridge_slave_1: left promiscuous mode [ 469.825052][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.835808][ T4389] bridge_slave_0: left allmulticast mode [ 469.842377][ T4389] bridge_slave_0: left promiscuous mode [ 469.848773][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.865266][ T4389] bridge_slave_1: left allmulticast mode [ 469.873611][ T4389] bridge_slave_1: left promiscuous mode [ 469.879313][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.891881][ T4389] bridge_slave_0: left allmulticast mode [ 469.897549][ T4389] bridge_slave_0: left promiscuous mode [ 469.904228][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.608371][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.619261][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.629359][ T4389] bond0 (unregistering): Released all slaves [ 470.692321][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.702793][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.714470][ T4389] bond0 (unregistering): Released all slaves [ 470.774983][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.785574][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.795240][ T4389] bond0 (unregistering): Released all slaves [ 470.861325][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.873412][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.882878][ T4389] bond0 (unregistering): Released all slaves [ 470.912211][ T8902] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.937093][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.944252][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.018787][ T8898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.092848][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.099972][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.383529][ T8900] veth0_vlan: entered promiscuous mode [ 471.462700][ T8900] veth1_vlan: entered promiscuous mode [ 471.608046][ T8900] veth0_macvtap: entered promiscuous mode [ 471.664107][ T8900] veth1_macvtap: entered promiscuous mode [ 471.720839][ T8897] veth0_vlan: entered promiscuous mode [ 471.758333][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.789468][ T8897] veth1_vlan: entered promiscuous mode [ 471.831203][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.867707][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.969330][ T8900] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.000416][ T8900] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.009153][ T8900] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.026861][ T8900] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.096844][ T8898] veth0_vlan: entered promiscuous mode [ 472.110286][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.257213][ T8898] veth1_vlan: entered promiscuous mode [ 472.288949][ T8897] veth0_macvtap: entered promiscuous mode [ 472.334398][ T8897] veth1_macvtap: entered promiscuous mode [ 472.439234][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.533399][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.550439][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.573384][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.610432][ T8898] veth0_macvtap: entered promiscuous mode [ 472.673758][ T8895] veth0_vlan: entered promiscuous mode [ 472.689235][ T8897] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.699031][ T8897] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.715133][ T8897] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.725558][ T8897] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.760824][ T8898] veth1_macvtap: entered promiscuous mode [ 472.817055][ T8895] veth1_vlan: entered promiscuous mode [ 472.843378][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.857674][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.886259][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.937110][ T30] audit: type=1400 audit(1748228385.129:898): avc: denied { mounton } for pid=8900 comm="syz-executor" path="/root/syzkaller.JPlu4r/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 472.975366][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.002439][ T30] audit: type=1400 audit(1748228385.189:899): avc: denied { mount } for pid=8900 comm="syz-executor" name="/" dev="gadgetfs" ino=21162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 473.057616][ T8898] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.067862][ T8898] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.081076][ T8898] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.097469][ T8898] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.157443][ T8902] veth0_vlan: entered promiscuous mode [ 473.294429][ T8895] veth0_macvtap: entered promiscuous mode [ 473.317001][ T8902] veth1_vlan: entered promiscuous mode [ 473.339908][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.397053][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.413005][ T8895] veth1_macvtap: entered promiscuous mode [ 473.634965][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.645926][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.666686][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.728868][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.739222][ T8902] veth0_macvtap: entered promiscuous mode [ 473.788037][ T8902] veth1_macvtap: entered promiscuous mode [ 473.833241][ T8895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.870120][ T8895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.885850][ T8895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.899951][ T8895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.937593][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.949198][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.986073][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.114793][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.344920][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.355660][ T8902] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.374120][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.386914][ T8902] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.398021][ T8902] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.415839][ T8902] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.417031][ T9140] fuse: Bad value for 'fd' [ 474.536504][ T9145] netlink: 68 bytes leftover after parsing attributes in process `syz.6.742'. [ 474.644853][ T9140] syz.8.747: attempt to access beyond end of device [ 474.644853][ T9140] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 474.658190][ T9140] FAT-fs (loop17): unable to read boot sector [ 474.920000][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.939591][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.581167][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.718462][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.612599][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.645408][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.791082][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.892976][ T9184] netlink: 11 bytes leftover after parsing attributes in process `syz.6.752'. [ 479.005231][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.273507][ T9196] netlink: 11 bytes leftover after parsing attributes in process `syz.7.756'. [ 481.811630][ T6973] libceph: connect (1)[c::]:6789 error -101 [ 481.818462][ T6973] libceph: mon0 (1)[c::]:6789 connect error [ 481.851954][ T9206] ceph: No mds server is up or the cluster is laggy [ 482.018611][ T30] audit: type=1400 audit(1748228394.189:900): avc: denied { mount } for pid=9201 comm="syz.6.759" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 482.700901][ T9231] 9pnet_fd: Insufficient options for proto=fd [ 482.802254][ T9231] loop6: detected capacity change from 0 to 524287999 [ 483.943194][ T30] audit: type=1400 audit(1748228396.099:901): avc: denied { read write } for pid=9244 comm="syz.6.764" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.312345][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 485.319223][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 485.330078][ T30] audit: type=1400 audit(1748228396.109:902): avc: denied { open } for pid=9244 comm="syz.6.764" path="/4/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.355013][ T30] audit: type=1400 audit(1748228396.549:903): avc: denied { setopt } for pid=9248 comm="syz.9.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.768181][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 485.806579][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 485.898607][ T9253] ceph: No mds server is up or the cluster is laggy [ 486.450443][ T30] audit: type=1400 audit(1748228398.599:904): avc: denied { unmount } for pid=8897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 487.030436][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 488.625237][ T9297] 9pnet_fd: Insufficient options for proto=fd [ 488.635649][ T9297] loop6: detected capacity change from 0 to 524287999 [ 491.022151][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 491.028253][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 491.325741][ T9311] ceph: No mds server is up or the cluster is laggy [ 491.467352][ T9326] netlink: 11 bytes leftover after parsing attributes in process `syz.9.777'. [ 491.531112][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 491.595396][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 491.803684][ T4389] hsr_slave_0: left promiscuous mode [ 491.830186][ T4389] hsr_slave_1: left promiscuous mode [ 491.837438][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.949608][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.877726][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.927822][ T9337] Bluetooth: MGMT ver 1.23 [ 492.932440][ T9337] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 492.999331][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.759304][ T4389] hsr_slave_0: left promiscuous mode [ 493.800178][ T4389] hsr_slave_1: left promiscuous mode [ 493.806984][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.859311][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.879457][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.950389][ T4389] hsr_slave_0: left promiscuous mode [ 493.965683][ T4389] hsr_slave_1: left promiscuous mode [ 493.978631][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.998645][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.010398][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.036208][ T4389] hsr_slave_0: left promiscuous mode [ 494.156969][ T4389] hsr_slave_1: left promiscuous mode [ 494.185404][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.235977][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.259821][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.299920][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.812274][ T4389] veth1_macvtap: left promiscuous mode [ 494.817841][ T4389] veth0_macvtap: left promiscuous mode [ 494.824831][ T4389] veth1_vlan: left promiscuous mode [ 494.830237][ T4389] veth0_vlan: left promiscuous mode [ 494.839182][ T4389] veth1_macvtap: left promiscuous mode [ 494.860885][ T4389] veth0_macvtap: left promiscuous mode [ 494.866527][ T4389] veth1_vlan: left promiscuous mode [ 494.891335][ T4389] veth0_vlan: left promiscuous mode [ 494.900931][ T4389] veth1_macvtap: left promiscuous mode [ 494.906473][ T4389] veth0_macvtap: left promiscuous mode [ 494.911140][ T9360] loop6: detected capacity change from 0 to 524287999 [ 494.920235][ T4389] veth1_vlan: left promiscuous mode [ 494.925700][ T4389] veth0_vlan: left promiscuous mode [ 494.933552][ T4389] veth1_macvtap: left promiscuous mode [ 494.939067][ T4389] veth0_macvtap: left promiscuous mode [ 494.951534][ T4389] veth1_vlan: left promiscuous mode [ 494.958694][ T4389] veth0_vlan: left promiscuous mode [ 496.716750][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 496.768780][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 497.576906][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 497.619664][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 498.383915][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 498.436951][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 499.604903][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 499.681274][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 500.489661][ T9044] lo speed is unknown, defaulting to 1000 [ 500.522479][ T9044] infiniband syz0: ib_query_port failed (-19) [ 501.361799][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.368200][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.948575][ T9415] delete_channel: no stack [ 501.975448][ T9415] netlink: 224 bytes leftover after parsing attributes in process `syz.7.797'. [ 502.318336][ T9417] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 503.632584][ T9411] delete_channel: no stack [ 505.930046][ C0] hrtimer: interrupt took 28815 ns [ 505.944029][ T9044] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 506.308585][ T9044] usb 8-1: Using ep0 maxpacket: 8 [ 506.323916][ T9044] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.369978][ T9044] usb 8-1: config 0 has no interface number 0 [ 506.411809][ T9469] delete_channel: no stack [ 506.430867][ T9469] netlink: 224 bytes leftover after parsing attributes in process `syz.5.808'. [ 506.441838][ T9044] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.453467][ T9044] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 506.808527][ T9044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.834181][ T9044] usb 8-1: config 0 descriptor?? [ 507.590432][ T9044] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 507.718955][ T9463] delete_channel: no stack [ 507.749946][ T971] usb 8-1: USB disconnect, device number 2 [ 507.778579][ T9482] fuse: Bad value for 'fd' [ 508.186650][ T9489] syz.9.810: attempt to access beyond end of device [ 508.186650][ T9489] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 508.199760][ T9489] FAT-fs (loop19): unable to read boot sector [ 508.338199][ T58] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 508.521483][ T58] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 508.538988][ T58] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 508.557258][ T58] usb 9-1: config 1 has no interface number 1 [ 508.575260][ T58] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 508.713222][ T58] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.740377][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.748409][ T58] usb 9-1: Product: syz [ 508.773133][ T58] usb 9-1: Manufacturer: syz [ 508.784670][ T58] usb 9-1: SerialNumber: syz [ 508.812529][ T9497] binder: 9496:9497 ioctl 4018620d 0 returned -22 [ 508.996389][ T9499] syz.9.814 uses obsolete (PF_INET,SOCK_PACKET) [ 509.587979][ T9506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.309321][ T30] audit: type=1400 audit(1748228422.479:905): avc: denied { connect } for pid=9477 comm="syz.8.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 511.899673][ T58] usb 9-1: 2:1 : unsupported format bits 0x100 [ 512.085948][ T58] usb 9-1: USB disconnect, device number 2 [ 512.515330][ T7993] udevd[7993]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.081965][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.8.822'. [ 513.427208][ T9106] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 514.123718][ T9106] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 514.483454][ T971] libceph: connect (1)[c::]:6789 error -101 [ 514.816707][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 514.847592][ T9106] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.943871][ T9106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.955950][ T9559] ceph: No mds server is up or the cluster is laggy [ 515.019483][ T9565] binder: 9564:9565 ioctl 4018620d 0 returned -22 [ 515.055465][ T9565] binder: 9564:9565 ioctl c0306201 0 returned -14 [ 516.694869][ T9589] hub 8-0:1.0: USB hub found [ 516.700286][ T9589] hub 8-0:1.0: 1 port detected [ 517.935991][ T9594] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 517.957242][ T9106] usb 7-1: USB disconnect, device number 2 [ 519.105128][ T9611] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 520.777366][ T58] libceph: connect (1)[c::]:6789 error -101 [ 520.995040][ T9634] 9pnet_fd: Insufficient options for proto=fd [ 521.007712][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 521.013904][ T9634] loop6: detected capacity change from 0 to 524287999 [ 521.242216][ T9633] ceph: No mds server is up or the cluster is laggy [ 521.255407][ T9643] netlink: 224 bytes leftover after parsing attributes in process `syz.9.841'. [ 521.283270][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 521.305365][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 521.813148][ T9640] delete_channel: no stack [ 521.817816][ T9640] delete_channel: no stack [ 523.302564][ T9660] hub 8-0:1.0: USB hub found [ 523.351585][ T9660] hub 8-0:1.0: 1 port detected [ 525.082078][ T9705] netlink: 68 bytes leftover after parsing attributes in process `syz.9.847'. [ 526.932667][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 526.943254][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 526.968768][ T9732] ceph: No mds server is up or the cluster is laggy [ 528.473492][ T9752] hub 8-0:1.0: USB hub found [ 528.479073][ T9752] hub 8-0:1.0: 1 port detected [ 529.656998][ T9763] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 530.089168][ T9768] netlink: 224 bytes leftover after parsing attributes in process `syz.8.865'. [ 530.450285][ T9766] delete_channel: no stack [ 530.570582][ T9766] delete_channel: no stack [ 531.571428][ T9789] 9pnet_fd: Insufficient options for proto=fd [ 531.578244][ T9789] loop6: detected capacity change from 0 to 524287999 [ 532.358341][ T9795] binder: 9794:9795 ioctl 4018620d 0 returned -22 [ 532.461907][ T9795] binder: 9794:9795 ioctl c0306201 0 returned -14 [ 532.710244][ T9775] netlink: 68 bytes leftover after parsing attributes in process `syz.6.866'. [ 532.808869][ T9798] ceph: No mds server is up or the cluster is laggy [ 532.815981][ T9389] libceph: connect (1)[c::]:6789 error -101 [ 532.825771][ T9389] libceph: mon0 (1)[c::]:6789 connect error [ 533.347292][ T9389] libceph: connect (1)[c::]:6789 error -101 [ 533.353462][ T9389] libceph: mon0 (1)[c::]:6789 connect error [ 535.512556][ T58] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 536.583911][ T58] usb 10-1: device descriptor read/64, error -71 [ 536.608449][ T9851] netlink: 224 bytes leftover after parsing attributes in process `syz.6.878'. [ 536.914574][ T9840] delete_channel: no stack [ 538.037905][ T58] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 538.476582][ T9868] 9pnet_fd: Insufficient options for proto=fd [ 538.490131][ T9868] loop6: detected capacity change from 0 to 524287999 [ 538.800542][ T58] usb 10-1: device descriptor read/64, error -71 [ 539.310390][ T58] usb usb10-port1: attempt power cycle [ 540.990305][ T30] audit: type=1400 audit(1748228452.959:906): avc: denied { read } for pid=9876 comm="syz.8.885" dev="sockfs" ino=25001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 541.154559][ T9891] 9pnet_fd: Insufficient options for proto=fd [ 541.169615][ T9891] loop6: detected capacity change from 0 to 524287999 [ 541.760367][ T9900] fuse: Bad value for 'fd' [ 542.145310][ T9910] syz.6.889: attempt to access beyond end of device [ 542.145310][ T9910] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 544.459067][ T9910] FAT-fs (loop13): unable to read boot sector [ 545.588241][ T9925] delete_channel: no stack [ 545.733920][ T9925] netlink: 224 bytes leftover after parsing attributes in process `syz.5.894'. [ 545.774506][ T58] libceph: connect (1)[c::]:6789 error -101 [ 545.885659][ T9918] ceph: No mds server is up or the cluster is laggy [ 545.893336][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 546.185931][ T9939] syz.7.895: attempt to access beyond end of device [ 546.185931][ T9939] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 546.386279][ T9939] FAT-fs (loop15): unable to read boot sector [ 546.931701][ T9106] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 546.986455][ T9921] delete_channel: no stack [ 547.658185][ T9106] usb 10-1: device descriptor read/64, error -71 [ 548.474247][ T9106] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 548.705337][ T9106] usb 10-1: device descriptor read/64, error -71 [ 548.838328][ T9968] hub 8-0:1.0: USB hub found [ 548.844475][ T9968] hub 8-0:1.0: 1 port detected [ 549.277489][ T9106] usb usb10-port1: attempt power cycle [ 550.620392][ T9976] 9pnet_fd: Insufficient options for proto=fd [ 550.645732][ T9976] loop6: detected capacity change from 0 to 524287999 [ 551.050454][ T9979] delete_channel: no stack [ 551.056203][ T9979] netlink: 224 bytes leftover after parsing attributes in process `syz.6.904'. [ 551.119982][ T9988] netlink: 36 bytes leftover after parsing attributes in process `syz.9.902'. [ 551.387825][ T30] audit: type=1326 audit(1748228463.549:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.9.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0959b8e969 code=0x7fc00000 [ 551.914720][ T9978] delete_channel: no stack [ 552.241303][T10004] netlink: 44 bytes leftover after parsing attributes in process `syz.7.906'. [ 555.278338][T10034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.716080][T10047] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 557.694330][T10056] ceph: No mds server is up or the cluster is laggy [ 557.721019][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 558.077505][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 558.661434][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 558.736514][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 560.774440][T10101] netlink: 224 bytes leftover after parsing attributes in process `syz.8.921'. [ 561.077023][T10104] delete_channel: no stack [ 561.892860][T10114] ceph: No mds server is up or the cluster is laggy [ 561.903912][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 562.139100][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 562.206856][T10086] delete_channel: no stack [ 562.238075][T10104] netlink: 224 bytes leftover after parsing attributes in process `syz.6.925'. [ 562.447868][T10102] delete_channel: no stack [ 562.464199][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.471278][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.030109][ T5903] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 569.239550][T10180] netlink: 11 bytes leftover after parsing attributes in process `syz.9.939'. [ 569.932966][T10186] delete_channel: no stack [ 569.988589][T10186] netlink: 224 bytes leftover after parsing attributes in process `syz.6.940'. [ 570.408403][T10182] delete_channel: no stack [ 570.770218][ T9106] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 571.190196][ T9106] usb 10-1: device descriptor read/64, error -71 [ 571.430246][ T9106] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 572.007226][ T9106] usb 10-1: device descriptor read/64, error -71 [ 572.462714][ T9106] usb usb10-port1: attempt power cycle [ 572.880398][ T9106] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 573.405654][ T9106] usb 10-1: device not accepting address 10, error -71 [ 573.689929][ T5903] usb 9-1: device descriptor read/64, error -110 [ 574.304430][T10227] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.556718][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 575.390705][ T58] usb 7-1: device descriptor read/64, error -71 [ 576.562657][ T58] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 576.799239][T10244] ceph: No mds server is up or the cluster is laggy [ 576.820725][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 577.093782][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 578.020378][ T9078] libceph: connect (1)[c::]:6789 error -101 [ 578.252750][ T9078] libceph: mon0 (1)[c::]:6789 connect error [ 578.445850][T10258] ceph: No mds server is up or the cluster is laggy [ 578.557292][ T9078] libceph: connect (1)[c::]:6789 error -101 [ 579.114706][ T9078] libceph: mon0 (1)[c::]:6789 connect error [ 580.201931][T10264] Bluetooth: hci4: command 0x0405 tx timeout [ 580.272151][T10284] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 580.332632][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 580.349176][ T5824] Bluetooth: hci5: command 0x0406 tx timeout [ 580.355712][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 580.362721][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 580.511541][T10282] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 580.734781][ T30] audit: type=1400 audit(1748228492.929:908): avc: denied { read write } for pid=10291 comm="syz.9.961" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 581.429285][ T30] audit: type=1400 audit(1748228492.929:909): avc: denied { open } for pid=10291 comm="syz.9.961" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 581.626267][T10293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 581.632420][T10293] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 581.685148][T10293] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 581.691875][T10293] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 581.811424][T10293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.817367][T10293] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 581.858261][T10293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 581.864233][T10293] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 581.927738][T10293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 581.937379][T10293] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 584.581763][T10340] netlink: 36 bytes leftover after parsing attributes in process `syz.9.966'. [ 586.195239][ T30] audit: type=1326 audit(1748228498.379:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.9.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0959b8e969 code=0x7fc00000 [ 586.218560][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.007331][T10352] ceph: No mds server is up or the cluster is laggy [ 587.028422][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 587.036940][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 587.045059][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 587.054690][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 587.408989][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 587.424097][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 587.430148][T10354] ceph: No mds server is up or the cluster is laggy [ 589.200309][ T9106] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 589.463053][ T9106] usb 9-1: device descriptor read/64, error -71 [ 589.880198][ T9106] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 590.050224][ T9106] usb 9-1: device descriptor read/64, error -71 [ 590.184037][ T9106] usb usb9-port1: attempt power cycle [ 590.222895][ T9078] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 590.520440][ T9078] usb 7-1: Using ep0 maxpacket: 8 [ 590.534463][ T9078] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.826630][ T9106] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 590.935742][ T9078] usb 7-1: config 0 has no interface number 0 [ 591.109134][ T9078] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 591.147097][ T9106] usb 9-1: device descriptor read/8, error -71 [ 591.249088][ T9078] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 591.258928][ T9078] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.272807][ T9078] usb 7-1: config 0 descriptor?? [ 591.300954][ T9078] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 592.302677][T10427] delete_channel: no stack [ 592.319671][T10427] netlink: 224 bytes leftover after parsing attributes in process `syz.7.983'. [ 592.373452][ T9078] usb 7-1: USB disconnect, device number 5 [ 592.993919][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 593.021728][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 593.288331][ T9078] libceph: connect (1)[c::]:6789 error -101 [ 593.303031][ T9078] libceph: mon0 (1)[c::]:6789 connect error [ 593.316004][T10434] ceph: No mds server is up or the cluster is laggy [ 593.445359][T10422] delete_channel: no stack [ 595.165227][ T5903] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 596.221496][ T5903] usb 7-1: device descriptor read/64, error -71 [ 601.321882][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 624.553761][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.647435][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.473501][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.485929][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.123942][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.142591][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.239927][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 853.246917][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9388/1:b..l P10527/1:b..l [ 853.256398][ C1] rcu: (detected by 1, t=10502 jiffies, g=27925, q=2270 ncpus=2) [ 853.264207][ C1] task:syz.9.1000 state:R running task stack:27688 pid:10527 tgid:10513 ppid:8902 task_flags:0x400140 flags:0x00004006 [ 853.278503][ C1] Call Trace: [ 853.281802][ C1] [ 853.284735][ C1] __schedule+0x116f/0x5de0 [ 853.289261][ C1] ? __pfx___schedule+0x10/0x10 [ 853.294118][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 853.299074][ C1] ? mark_held_locks+0x49/0x80 [ 853.303851][ C1] preempt_schedule_irq+0x51/0x90 [ 853.308880][ C1] irqentry_exit+0x36/0x90 [ 853.313297][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 853.318757][ C1] RIP: 0010:unwind_next_frame+0x264/0x20a0 [ 853.324564][ C1] Code: 49 d4 91 48 b8 00 00 00 00 00 fc ff df 48 8d 3c 95 80 49 d4 91 49 89 f8 49 c1 e8 03 45 0f b6 04 00 48 89 f8 83 e0 07 83 c0 03 <44> 38 c0 7c 2e 45 84 c0 74 29 48 89 54 24 30 89 4c 24 28 89 74 24 [ 853.344177][ C1] RSP: 0018:ffffc9001434f130 EFLAGS: 00000202 [ 853.350242][ C1] RAX: 0000000000000007 RBX: 0000000000000001 RCX: 000000000019e12e [ 853.358217][ C1] RDX: 00000000000889b9 RSI: 00000000000a7122 RDI: ffffffff91f67064 [ 853.366372][ C1] RBP: ffffc9001434f1e8 R08: 0000000000000000 R09: 0000000000000000 [ 853.374340][ C1] R10: 0000000000000003 R11: 00000000000889b8 R12: ffffc9001434f1f0 [ 853.382393][ C1] R13: ffffc9001434f1a0 R14: ffffc9001434f1d5 R15: ffffffff8989b885 [ 853.390359][ C1] ? ctrl_build_family_msg+0x35/0xa0 [ 853.395664][ C1] ? ctrl_build_family_msg+0x36/0xa0 [ 853.400959][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 853.407115][ C1] arch_stack_walk+0x94/0x100 [ 853.411798][ C1] ? ctrl_build_family_msg+0x36/0xa0 [ 853.417093][ C1] stack_trace_save+0x8e/0xc0 [ 853.421772][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 853.427145][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 853.432098][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 853.437045][ C1] save_stack+0x160/0x1f0 [ 853.441384][ C1] ? __pfx_save_stack+0x10/0x10 [ 853.446245][ C1] ? __free_frozen_pages+0x69d/0xff0 [ 853.451541][ C1] ? __put_partials+0x16d/0x1c0 [ 853.456400][ C1] ? qlist_free_all+0x4e/0x120 [ 853.461177][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 853.466816][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 853.471583][ C1] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 853.478175][ C1] ? kmalloc_reserve+0xef/0x2c0 [ 853.483029][ C1] ? __alloc_skb+0x166/0x380 [ 853.487617][ C1] ? ctrl_build_family_msg+0x36/0xa0 [ 853.492914][ C1] ? page_ext_put+0x3e/0xd0 [ 853.497427][ C1] __reset_page_owner+0x84/0x1a0 [ 853.502364][ C1] __free_frozen_pages+0x69d/0xff0 [ 853.507491][ C1] __put_partials+0x16d/0x1c0 [ 853.512188][ C1] qlist_free_all+0x4e/0x120 [ 853.516785][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 853.522254][ C1] __kasan_kmalloc+0x8a/0xb0 [ 853.526852][ C1] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 853.533268][ C1] ? __alloc_skb+0x166/0x380 [ 853.537869][ C1] kmalloc_reserve+0xef/0x2c0 [ 853.542570][ C1] __alloc_skb+0x166/0x380 [ 853.547010][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 853.551958][ C1] ? idr_get_next+0xec/0x150 [ 853.556557][ C1] ? __pfx_idr_get_next+0x10/0x10 [ 853.561599][ C1] ctrl_build_family_msg+0x36/0xa0 [ 853.566723][ C1] ctrl_getfamily+0x354/0x540 [ 853.571405][ C1] ? __pfx_ctrl_getfamily+0x10/0x10 [ 853.576614][ C1] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 853.583991][ C1] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 853.591375][ C1] genl_family_rcv_msg_doit+0x209/0x2f0 [ 853.596929][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 853.603007][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 853.608039][ C1] ? genl_get_cmd+0x194/0x580 [ 853.612752][ C1] ? __local_bh_enable_ip+0x107/0x120 [ 853.618131][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 853.623254][ C1] ? __radix_tree_lookup+0x21f/0x2c0 [ 853.628547][ C1] genl_rcv_msg+0x55c/0x800 [ 853.633057][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 853.638083][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 853.643461][ C1] ? __pfx_ctrl_getfamily+0x10/0x10 [ 853.648666][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 853.653617][ C1] netlink_rcv_skb+0x16d/0x440 [ 853.658387][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 853.663414][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.668708][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 853.675313][ C1] ? __pfx_down_read+0x10/0x10 [ 853.680079][ C1] genl_rcv+0x28/0x40 [ 853.684063][ C1] netlink_unicast+0x53a/0x7f0 [ 853.688837][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 853.694128][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 853.698899][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.704197][ C1] __sys_sendto+0x498/0x510 [ 853.708697][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 853.713727][ C1] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 853.720249][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 853.725017][ C1] ? do_syscall_64+0x91/0x260 [ 853.729704][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 853.734903][ C1] do_syscall_64+0xcd/0x260 [ 853.739415][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.745311][ C1] RIP: 0033:0x7f0959b907fc [ 853.749746][ C1] RSP: 002b:00007f095a9baec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 853.758172][ C1] RAX: ffffffffffffffda RBX: 00007f095a9bafc0 RCX: 00007f0959b907fc [ 853.766150][ C1] RDX: 0000000000000024 RSI: 00007f095a9bb010 RDI: 0000000000000007 [ 853.774121][ C1] RBP: 0000000000000000 R08: 00007f095a9baf14 R09: 000000000000000c [ 853.782090][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 853.790054][ C1] R13: 00007f095a9baf68 R14: 00007f095a9bb010 R15: 0000000000000000 [ 853.798038][ C1] [ 853.801050][ C1] task:kworker/0:7 state:R running task stack:28280 pid:9388 tgid:9388 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 853.814636][ C1] Workqueue: events_power_efficient gc_worker [ 853.820716][ C1] Call Trace: [ 853.823992][ C1] [ 853.826924][ C1] __schedule+0x116f/0x5de0 [ 853.831433][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 853.836394][ C1] ? __pfx___schedule+0x10/0x10 [ 853.841245][ C1] ? find_held_lock+0x2b/0x80 [ 853.845943][ C1] ? mark_held_locks+0x49/0x80 [ 853.850725][ C1] preempt_schedule_irq+0x51/0x90 [ 853.855754][ C1] irqentry_exit+0x36/0x90 [ 853.860199][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 853.866189][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 853.871392][ C1] Code: 39 0c 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 52 0a ed 0e 0f 82 74 02 00 00 8b 35 ea 39 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 39 0c 12 0f 85 c7 02 00 00 48 83 c4 [ 853.891173][ C1] RSP: 0018:ffffc90004507ae8 EFLAGS: 00000206 [ 853.897242][ C1] RAX: 0000000000000046 RBX: ffffffff8e3bfc00 RCX: 00000000d07a8b30 [ 853.905208][ C1] RDX: 0000000000000000 RSI: ffffffff8dbbf273 RDI: ffffffff8bf4a520 [ 853.913178][ C1] RBP: 0000000000000002 R08: 15bd7c2dbaef4bdd R09: 0000000000000000 [ 853.921150][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 853.929118][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 853.937102][ C1] ? __pfx___might_resched+0x10/0x10 [ 853.942402][ C1] ? gc_worker+0x999/0x16e0 [ 853.946929][ C1] gc_worker+0x241/0x16e0 [ 853.951264][ C1] ? gc_worker+0x230/0x16e0 [ 853.955781][ C1] ? __pfx_gc_worker+0x10/0x10 [ 853.960560][ C1] ? rcu_is_watching+0x12/0xc0 [ 853.965347][ C1] process_one_work+0x9cf/0x1b70 [ 853.970297][ C1] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 853.976801][ C1] ? __pfx_process_one_work+0x10/0x10 [ 853.982189][ C1] ? assign_work+0x1a0/0x250 [ 853.986779][ C1] worker_thread+0x6c8/0xf10 [ 853.991379][ C1] ? __pfx_worker_thread+0x10/0x10 [ 853.996486][ C1] kthread+0x3c2/0x780 [ 854.000558][ C1] ? __pfx_kthread+0x10/0x10 [ 854.005148][ C1] ? __pfx_kthread+0x10/0x10 [ 854.009733][ C1] ? __pfx_kthread+0x10/0x10 [ 854.014327][ C1] ? __pfx_kthread+0x10/0x10 [ 854.018917][ C1] ? rcu_is_watching+0x12/0xc0 [ 854.023681][ C1] ? __pfx_kthread+0x10/0x10 [ 854.028273][ C1] ret_from_fork+0x45/0x80 [ 854.032685][ C1] ? __pfx_kthread+0x10/0x10 [ 854.037273][ C1] ret_from_fork_asm+0x1a/0x30 [ 854.042057][ C1] [ 854.045077][ C1] rcu: rcu_preempt kthread starved for 8386 jiffies! g27925 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 854.056179][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 854.066136][ C1] rcu: RCU grace-period kthread stack dump: [ 854.072012][ C1] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 854.085502][ C1] Call Trace: [ 854.088772][ C1] [ 854.091702][ C1] __schedule+0x116f/0x5de0 [ 854.096221][ C1] ? __pfx___schedule+0x10/0x10 [ 854.101075][ C1] ? find_held_lock+0x2b/0x80 [ 854.105754][ C1] ? schedule+0x2d7/0x3a0 [ 854.110086][ C1] schedule+0xe7/0x3a0 [ 854.114156][ C1] schedule_timeout+0x123/0x290 [ 854.119013][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 854.124386][ C1] ? __pfx_process_timeout+0x10/0x10 [ 854.129674][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 854.135482][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 854.140953][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 854.145723][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 854.151016][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 854.155875][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 854.161685][ C1] rcu_gp_kthread+0x270/0x380 [ 854.166369][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 854.171574][ C1] ? rcu_is_watching+0x12/0xc0 [ 854.176339][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 854.181542][ C1] ? __kthread_parkme+0x19e/0x250 [ 854.186582][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 854.191784][ C1] kthread+0x3c2/0x780 [ 854.195848][ C1] ? __pfx_kthread+0x10/0x10 [ 854.200441][ C1] ? __pfx_kthread+0x10/0x10 [ 854.205025][ C1] ? __pfx_kthread+0x10/0x10 [ 854.209609][ C1] ? __pfx_kthread+0x10/0x10 [ 854.214194][ C1] ? rcu_is_watching+0x12/0xc0 [ 854.218959][ C1] ? __pfx_kthread+0x10/0x10 [ 854.223544][ C1] ret_from_fork+0x45/0x80 [ 854.227961][ C1] ? __pfx_kthread+0x10/0x10 [ 854.232545][ C1] ret_from_fork_asm+0x1a/0x30 [ 854.237326][ C1] [ 854.240340][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 854.246652][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 854.258285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 854.268334][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 854.274095][ C1] Code: d5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 a0 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 854.293704][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 854.299772][ C1] RAX: 0000000003168389 RBX: 0000000000000001 RCX: ffffffff8b6d5419 [ 854.307738][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe4885 RDI: ffffffff8bf4a520 [ 854.315715][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a65bd [ 854.323690][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 854.331661][ C1] R13: ffff88801e2ea440 R14: ffffffff90853110 R15: 0000000000000000 [ 854.339627][ C1] FS: 0000000000000000(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 854.348560][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 854.355142][ C1] CR2: 00007ffe200e1dfc CR3: 000000005fc50000 CR4: 00000000003526f0 [ 854.363129][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 854.371109][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 854.379084][ C1] Call Trace: [ 854.382383][ C1] [ 854.385307][ C1] default_idle+0x13/0x20 [ 854.389637][ C1] default_idle_call+0x6d/0xb0 [ 854.394401][ C1] do_idle+0x391/0x510 [ 854.398474][ C1] ? __pfx_do_idle+0x10/0x10 [ 854.403067][ C1] ? do_idle+0x1c/0x510 [ 854.407231][ C1] cpu_startup_entry+0x4f/0x60 [ 854.411997][ C1] start_secondary+0x21d/0x2b0 [ 854.416768][ C1] ? __pfx_start_secondary+0x10/0x10 [ 854.422058][ C1] common_startup_64+0x13e/0x148 [ 854.427009][ C1] [ 854.775736][ T31] INFO: task kworker/0:1:10 blocked for more than 166 seconds. [ 854.789997][ T31] Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 [ 854.797641][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.813070][ T31] task:kworker/0:1 state:D stack:24584 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 854.831844][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 854.838900][ T31] Call Trace: [ 854.855715][ T31] [ 854.858668][ T31] __schedule+0x116f/0x5de0 [ 854.870335][ T31] ? find_held_lock+0x2b/0x80 [ 854.875151][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 854.894460][ T31] ? __pfx___schedule+0x10/0x10 [ 854.899358][ T31] ? find_held_lock+0x2b/0x80 [ 854.910842][ T31] ? schedule+0x2d7/0x3a0 [ 854.915201][ T31] schedule+0xe7/0x3a0 [ 854.919282][ T31] schedule_preempt_disabled+0x13/0x30 [ 854.931487][ T31] __mutex_lock+0x6c7/0xb90 [ 854.936022][ T31] ? reg_check_chans_work+0x110/0x1170 [ 854.955060][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 854.974089][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 854.993639][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 854.998704][ T31] ? reg_check_chans_work+0x110/0x1170 [ 855.010996][ T31] reg_check_chans_work+0x110/0x1170 [ 855.016308][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 855.035613][ T31] ? rcu_is_watching+0x12/0xc0 [ 855.053944][ T31] process_one_work+0x9cf/0x1b70 [ 855.059011][ T31] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 855.071453][ T31] ? __pfx_process_one_work+0x10/0x10 [ 855.076849][ T31] ? assign_work+0x1a0/0x250 [ 855.095069][ T31] worker_thread+0x6c8/0xf10 [ 855.099703][ T31] ? __pfx_worker_thread+0x10/0x10 [ 855.111614][ T31] kthread+0x3c2/0x780 [ 855.115708][ T31] ? __pfx_kthread+0x10/0x10 [ 855.133786][ T31] ? __pfx_kthread+0x10/0x10 [ 855.138395][ T31] ? __pfx_kthread+0x10/0x10 [ 855.156575][ T31] ? __pfx_kthread+0x10/0x10 [ 855.174967][ T31] ? rcu_is_watching+0x12/0xc0 [ 855.179844][ T31] ? __pfx_kthread+0x10/0x10 [ 855.191463][ T31] ret_from_fork+0x45/0x80 [ 855.195899][ T31] ? __pfx_kthread+0x10/0x10 [ 855.214446][ T31] ret_from_fork_asm+0x1a/0x30 [ 855.219250][ T31] [ 855.236306][ T31] [ 855.236306][ T31] Showing all locks held in the system: [ 855.251221][ T31] 1 lock held by kthreadd/2: [ 855.255820][ T31] 4 locks held by kworker/0:1/10: [ 855.274820][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 855.293722][ T31] #1: ffffc900000f7d18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 855.311246][ T31] #2: ffffffff90128d68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 855.334860][ T31] #3: ffff88808e960768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x110/0x1170 [ 855.352148][ T31] 3 locks held by kworker/u8:0/12: [ 855.357264][ T31] 3 locks held by kworker/u8:1/13: [ 855.376328][ T31] 1 lock held by khungtaskd/31: [ 855.395152][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 855.412018][ T31] 5 locks held by kworker/u8:2/36: [ 855.417133][ T31] 2 locks held by kworker/u8:3/52: [ 855.436208][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 855.454382][ T31] #1: ffffc90000be7d18 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 855.472938][ T31] 3 locks held by kworker/1:1/58: [ 855.477970][ T31] 3 locks held by kworker/u8:4/76: [ 855.490066][ T31] 4 locks held by kswapd0/87: [ 855.494745][ T31] 1 lock held by hwrng/758: [ 855.499239][ T31] 3 locks held by kworker/1:2/971: [ 855.511392][ T31] 3 locks held by kworker/0:2/974: [ 855.516505][ T31] 4 locks held by kworker/u8:5/1310: [ 855.535783][ T31] #0: ffff88802330b148 ((wq_completion)wg-kex-wg0#17){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 855.553849][ T31] #1: ffffc90004667d18 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 855.573839][ T31] #2: ffff88808bea1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x650 [ 855.593244][ T31] #3: ffff88802c2920f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x650 [ 855.613062][ T31] 3 locks held by kworker/R-ipv6_/3162: [ 855.618616][ T31] #0: ffff88814c64f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 855.636750][ T31] #1: ffffc9000bfcfcb0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 855.656837][ T31] #2: ffffffff90128d68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 855.673367][ T31] 2 locks held by kworker/R-bat_e/3392: [ 855.678920][ T31] 3 locks held by kworker/u8:6/3496: [ 855.691220][ T31] 3 locks held by kworker/u8:7/4389: [ 855.696512][ T31] 4 locks held by udevd/5184: [ 855.715107][ T31] 2 locks held by getty/5573: [ 855.719792][ T31] #0: ffff888036e9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 855.736603][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 855.753752][ T31] 1 lock held by syz-executor/5797: [ 855.758957][ T31] 4 locks held by kworker/1:3/5813: [ 855.771194][ T31] #0: ffff88807ac2a148 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 855.796218][ T31] #1: ffffc900045d7d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 855.842888][ T31] #2: ffff88808bea1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 855.862371][ T31] #3: ffff88802c2920f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 855.874494][ T31] 3 locks held by kworker/1:4/5821: [ 855.879695][ T31] 2 locks held by kworker/0:3/5867: [ 855.884934][ T31] 3 locks held by kworker/1:5/5868: [ 855.890170][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 855.890299][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 855.900724][ T31] #1: ffffc9000508fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 855.916578][ T31] #2: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 855.926659][ T31] 2 locks held by kworker/0:4/5869: [ 855.931908][ T31] 4 locks held by kworker/0:5/5872: [ 855.937111][ T31] 3 locks held by kworker/u8:8/5890: [ 855.942437][ T31] 3 locks held by kworker/u8:9/6017: [ 855.947719][ T31] 3 locks held by kworker/u8:10/6368: [ 855.953154][ T31] 3 locks held by kworker/u8:11/6520: [ 855.958522][ T31] 3 locks held by kworker/u8:12/7357: [ 855.963951][ T31] 4 locks held by kworker/u8:13/7606: [ 855.969313][ T31] #0: ffff8880546e1948 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 855.980443][ T31] #1: ffffc9001b55fd18 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 855.993301][ T31] #2: ffff88803291d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x650 [ 856.005631][ T31] #3: ffff88802c295278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x650 [ 856.009946][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.017245][ T31] 2 locks held by syz-executor/8895: [ 856.028756][ T31] 2 locks held by syz-executor/8897: [ 856.034068][ T31] 2 locks held by syz-executor/8898: [ 856.039350][ T31] #0: ffff888031b80308 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x5e/0x520 [ 856.048996][ T31] #1: ffffffff8e55c380 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x979/0x23f0 [ 856.059437][ T31] 3 locks held by kworker/0:0/9044: [ 856.064667][ T31] 4 locks held by kworker/1:7/9078: [ 856.069859][ T31] #0: ffff88807e10d148 ((wq_completion)wg-kex-wg2#16){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 856.081027][ T31] #1: ffffc900045e7d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 856.120653][ T31] #2: ffff88808af75308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22b/0x950 [ 856.133029][ T31] #3: ffff88805a2e0d20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x2f7/0x950 [ 856.144543][ T31] 4 locks held by kworker/1:8/9106: [ 856.149724][ T31] 3 locks held by kworker/0:7/9388: [ 856.154930][ T31] 1 lock held by syz.9.1000/10516: [ 856.160032][ T31] 4 locks held by syz.9.1000/10527: [ 856.165200][ T31] 2 locks held by dhcpcd-run-hook/10517: [ 856.170812][ T31] 2 locks held by modprobe/10528: [ 856.175803][ T31] 4 locks held by kworker/u8:14/10529: [ 856.181292][ T31] #0: ffff88807ec25948 ((wq_completion)wg-kex-wg1#19){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 856.192339][ T31] #1: ffffc90013a1fd18 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 856.205109][ T31] #2: ffff88808fe95308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x650 [ 856.217361][ T31] #3: ffff888029d39708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x650 [ 856.228914][ T31] [ 856.231229][ T31] ============================================= [ 856.231229][ T31] [ 856.239606][ T31] NMI backtrace for cpu 1 [ 856.239615][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 856.239628][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 856.239635][ T31] Call Trace: [ 856.239640][ T31] [ 856.239645][ T31] dump_stack_lvl+0x116/0x1f0 [ 856.239664][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 856.239677][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 856.239690][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 856.239703][ T31] watchdog+0xf70/0x12c0 [ 856.239717][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.239727][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 856.239743][ T31] ? __kthread_parkme+0x19e/0x250 [ 856.239759][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.239770][ T31] kthread+0x3c2/0x780 [ 856.239781][ T31] ? __pfx_kthread+0x10/0x10 [ 856.239791][ T31] ? __pfx_kthread+0x10/0x10 [ 856.239800][ T31] ? __pfx_kthread+0x10/0x10 [ 856.239810][ T31] ? __pfx_kthread+0x10/0x10 [ 856.239819][ T31] ? rcu_is_watching+0x12/0xc0 [ 856.239832][ T31] ? __pfx_kthread+0x10/0x10 [ 856.239843][ T31] ret_from_fork+0x45/0x80 [ 856.239853][ T31] ? __pfx_kthread+0x10/0x10 [ 856.239864][ T31] ret_from_fork_asm+0x1a/0x30 [ 856.239886][ T31] [ 856.239889][ T31] Sending NMI from CPU 1 to CPUs 0: [ 856.370694][ C0] NMI backtrace for cpu 0 [ 856.370708][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 856.370725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 856.370733][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 856.370755][ C0] Code: d5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 a0 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 856.370768][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 856.370779][ C0] RAX: 0000000000ed043f RBX: 0000000000000000 RCX: ffffffff8b6d5419 [ 856.370788][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe4885 RDI: ffffffff8bf4a520 [ 856.370797][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 856.370805][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 856.370813][ C0] R13: ffffffff8e097740 R14: ffffffff90853110 R15: 0000000000000000 [ 856.370822][ C0] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 856.370836][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.370845][ C0] CR2: 0000200000110030 CR3: 0000000035c2c000 CR4: 00000000003526f0 [ 856.370854][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 856.370862][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 856.370870][ C0] Call Trace: [ 856.370875][ C0] [ 856.370879][ C0] default_idle+0x13/0x20 [ 856.370892][ C0] default_idle_call+0x6d/0xb0 [ 856.370903][ C0] do_idle+0x391/0x510 [ 856.370921][ C0] ? __pfx_do_idle+0x10/0x10 [ 856.370936][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 856.370957][ C0] cpu_startup_entry+0x4f/0x60 [ 856.370972][ C0] rest_init+0x16b/0x2b0 [ 856.370985][ C0] ? acpi_subsystem_init+0x133/0x180 [ 856.371002][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 856.371017][ C0] start_kernel+0x3e9/0x4d0 [ 856.371029][ C0] x86_64_start_reservations+0x18/0x30 [ 856.371049][ C0] x86_64_start_kernel+0xb0/0xc0 [ 856.371061][ C0] common_startup_64+0x13e/0x148 [ 856.371081][ C0] [ 856.800040][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 856.806950][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 856.818756][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 856.828817][ T31] Call Trace: [ 856.832096][ T31] [ 856.835024][ T31] dump_stack_lvl+0x3d/0x1f0 [ 856.839624][ T31] panic+0x71c/0x800 [ 856.843530][ T31] ? __pfx_panic+0x10/0x10 [ 856.847961][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 856.853336][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 856.859314][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 856.864689][ T31] ? watchdog+0xdda/0x12c0 [ 856.869100][ T31] ? watchdog+0xdcd/0x12c0 [ 856.873522][ T31] watchdog+0xdeb/0x12c0 [ 856.877766][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.882439][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 856.887647][ T31] ? __kthread_parkme+0x19e/0x250 [ 856.892676][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.897399][ T31] kthread+0x3c2/0x780 [ 856.901466][ T31] ? __pfx_kthread+0x10/0x10 [ 856.906038][ T31] ? __pfx_kthread+0x10/0x10 [ 856.910609][ T31] ? __pfx_kthread+0x10/0x10 [ 856.915181][ T31] ? __pfx_kthread+0x10/0x10 [ 856.919752][ T31] ? rcu_is_watching+0x12/0xc0 [ 856.924526][ T31] ? __pfx_kthread+0x10/0x10 [ 856.929099][ T31] ret_from_fork+0x45/0x80 [ 856.933519][ T31] ? __pfx_kthread+0x10/0x10 [ 856.938093][ T31] ret_from_fork_asm+0x1a/0x30 [ 856.942854][ T31] [ 856.946041][ T31] Kernel Offset: disabled [ 856.950363][ T31] Rebooting in 86400 seconds..