last executing test programs: 5.814925136s ago: executing program 1 (id=107): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x800}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) unshare(0x2040400) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="000013911ac72d71d5176be89b760052d7000000000000000000000000c794cb391fcdcd558ebb681d52832a254f4767a0dd91ed472ea8eb8dd4b2246239ac4df2ec13710bb907bb1c8eac25d013cd946a35021797be626f148421b7ca61c94277b80ed2e19b4d2d8260e24c3021623fc19dd5fbb571e1c23596096aca9a39fad778ec334c34df12c3881e", @ANYRES16=r3, @ANYRES32, @ANYRESDEC, @ANYRES8=r1, @ANYRES32=r2], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000c02d55140169baba08750000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$null(r2, &(0x7f0000000280)='./file0\x00', 0x100, 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.987520464s ago: executing program 2 (id=111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200500c4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x200488d4}, 0x20000080) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x25, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2a}, {}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000740)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x6, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xf, 0xbe1e, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0x1, r9]}, 0x94) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r10, 0x29, 0xcf, &(0x7f0000000a40)=0x4, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r12, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1d3b}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) sendmsg$NL80211_CMD_DISCONNECT(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x66}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048040}, 0x50) sched_setscheduler(0x0, 0xea6e4bee5f1203da, &(0x7f0000000d40)=0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r11, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) syz_open_dev$dmmidi(&(0x7f0000000ec0), 0xd464, 0x2081) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r11) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4761b8bcf75ea04f}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x54, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '!/'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'NLBL_MGMT\x00'}]}, 0x54}}, 0x4000000) 4.68788396s ago: executing program 2 (id=112): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001000), 0x40000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x800}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x1, r3}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x68040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000001) r7 = socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x4, 0x100000000, 0x8, 0x100000001, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x2, 0x7}, {0xc, 0x3}, 0x70bd29, 0x0, 0xa}}, 0xf0}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.936678694s ago: executing program 3 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_setup(0x42d3, &(0x7f0000000240)={0x0, 0x615f, 0x2a000, 0x1, 0x42}, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f00000002c0)=0x26c38cfc, 0x0, 0x4) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000f16000000090282"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000300)) 3.875753204s ago: executing program 1 (id=114): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x8, 0xfffffffe, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, &(0x7f00000001c0)='./file0\x00') r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000102505a8a440000102260109021b000101000000090400ff0207010100090501020000030000b921a06d4e981b60f53ed4704aaddb30e7e2a7bdf84cdcf84c4e5f077bd8e812711f55dea67bf14de68b0fe1c078c7a72ebbccd606664b4e74a46ada908fba8ee605eb6a948b"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x60b, 0x0) write$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) 3.60813529s ago: executing program 2 (id=116): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x101, 0xfffffffffffffe00}, &(0x7f0000000180)=0x18) (fail_nth: 1) 3.027776945s ago: executing program 2 (id=119): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001ec0)=ANY=[@ANYBLOB="12011001cda7174047050373411c0102030109021200010908a0080904e50900fe70ec02"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_clone(0x20400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000001c0)='fdinfo/4\x00') syz_open_procfs(r1, &(0x7f0000000180)='net/netstat\x00') wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x200, 0x2}, {0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}, {0x9}, 0x47bf, 0x0, 0x1, 0x1, 0x9833bf88d1b218f5, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x6c}, 0x0, @in=@empty, 0x40, 0x0, 0x3, 0x4, 0x8}}, 0xe8) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x8c23e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 2.26263802s ago: executing program 0 (id=122): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0xae1, &(0x7f0000000180)={0x0, 0xc383, 0x3000, 0x8002, 0x200004}, &(0x7f0000000100), &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x10, 0x0, 0x2, 0x10000000}, 0x76) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x22020, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x4) (async) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB="7454616e733d66642c7266646ec8b21a5e6643452af2c75049ca1db4da6de0e16465634ec0383f7f5232aabfb9575c04a856695b81ec3f003103fcc5625e33a74385bb3af186f439aceb6a6f9a67a4cf027c270d7c889b5d270f00f6b24a8019043f6318f926a0ce342838698e7e5258c1f83c37faac6fb86cd4a3d20ab94c9f355dc1f037e2e345f2b8513a036269", @ANYRES64=r3, @ANYBLOB=',wfdno=', @ANYRESDEC]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008810) 2.052512851s ago: executing program 4 (id=123): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x3c, 0xc, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x40, 0x8, [0x401]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7f, 0x1, [0x7, 0xffffffffffffffff, 0x61, 0xfffffffffffffc00]}}, @enc_lim={0x4, 0x1, 0xe}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x13}, @enc_lim={0x4, 0x1, 0x40}]}, 0x70) (async) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) 1.899874214s ago: executing program 4 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 1.84256828s ago: executing program 4 (id=125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x38, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r5) 1.797454751s ago: executing program 3 (id=126): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="8ed80000000004000000000000fb000060110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) (async) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000025, &(0x7f0000000200)=0x1, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) 1.311857515s ago: executing program 2 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)) 1.30268736s ago: executing program 2 (id=128): r0 = syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x2}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x8, 0x8, 0x8, 0x6, 0x20}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) msgget$private(0x0, 0x1c0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="92010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x11, 0x32, {0x32, 0x23, "7f7c6527c45006ed0490dec3510f6070028e38988e0ea6faf1b86bee76a6f2c20a1ef16cb5a39b845b8bc33d89b43c01"}}, &(0x7f00000001c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "01950947989c3122c910e83e40c57cf885871587f605e6144986c793246ec315f7cb060cb35b4642ff48d57e6a19c5a81091d3ce931a2e94691acba05c3a52ca1fa07a703916593a83203c43a977bbb4d71495c5675822ef4e01716a2e31865ef63c7c927f705b523a326e23f59414cf38e51d33fe4112e286f5436a2ab9543173afe36a9ed7dbd656203c87d533d3da5628"}}, &(0x7f0000000280)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x4, 0xbd36}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0xff, 0xf, 0x1ff, [0xf, 0xc00f, 0xf0]}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0xde, 0x5, "a76aa307", "c1c1027f"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x7, 0xe2, 0x2, 0x6, 0x6}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x20, 0x31, 0x55, "667a564bbc159d5070833d761a485fb6aa748fc652378c959adc52135ef85f9f5eb253bd4ca0e6591aa7119f623d8aaf8ba1f069ccc0ffec55ec051b779ab5a3a1ef2ff1886df105b403d7c3753bde9548080e4b8c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x20, 0x1, [0xff]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'Cu'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9958"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x92d}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.253252633s ago: executing program 0 (id=129): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x101, 0xfffffffffffffe00}, &(0x7f0000000180)=0x18) (fail_nth: 2) 1.199801804s ago: executing program 3 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff6900000000000100000018009b3900000200861fa72e5b01504104bfeacdd5a9007d1636f7c0929980d6180d78e9beced88a8de37c26acc8f1aa7733306ffbe33a6e624d3ccaeb39ab3c175948f6d4", 0x58, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) 1.122572838s ago: executing program 3 (id=131): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r2 = syz_open_pts(r1, 0x100) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x541b, &(0x7f0000000ec0)=0x8) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) (async, rerun: 64) socket(0x2, 0x80805, 0x0) (rerun: 64) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x3, 0x8, 0x5, 0x0, @time={0x2, 0x195b43bb}, {0x31, 0x6}, {0x10, 0x4}, @addr={0x4, 0x94}}], 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000380), 0x201, 0x639282) (async, rerun: 64) io_setup(0x6, &(0x7f0000000300)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='xprtrdma_err_chunk\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (rerun: 64) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x1}, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) 820.377941ms ago: executing program 0 (id=132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x101, 0xfffffffffffffe00}, &(0x7f0000000180)=0x18) 819.518899ms ago: executing program 1 (id=133): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x6, 0xfffffffc, 0x8b, 0x0, 0x2000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x101, 0xfffffffffffffe00}, &(0x7f0000000180)=0x18) 723.533594ms ago: executing program 0 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800c00230006000000000004"], 0x50}}, 0x0) readahead(r0, 0xffffffffffffff49, 0x5) 631.778793ms ago: executing program 0 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 631.433607ms ago: executing program 0 (id=136): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x80087601, 0x1000000000000) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = accept4$packet(r2, 0x0, &(0x7f0000000080), 0x80000) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000040)=0x669, 0x3e) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x52, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xffffffffffffff93, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001a0001002dbd7004000800000a000000", @ANYRES32=0x0, @ANYBLOB="0100e8081400030007000000026afe"], 0x44}}, 0x71d0b8801b5f1c98) socket$nl_generic(0x10, 0x3, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x2a0082) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) 600.318495ms ago: executing program 1 (id=137): r0 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102368, 0x18fe0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x17, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x2000010, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 493.513727ms ago: executing program 3 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b15000000080000002500000000", @ANYRES8=r0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x400c080) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000801) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) (async) getpeername$packet(r3, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300ffeddd00000010000200030010000800014004000000", 0x58}], 0x1) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x9, 0x5}, 0x0) (async) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={r7, r8+60000000}) (async) fcntl$getown(r4, 0x9) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 319.758802ms ago: executing program 4 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)) 319.444062ms ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x70bd25, 0xffffbffc, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 234.424122ms ago: executing program 3 (id=141): r0 = semget$private(0x0, 0x2, 0x40) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/247) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000100)=""/140) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) prlimit64(r1, 0xf, &(0x7f0000000200)={0xfffffffffffffffa, 0x4}, &(0x7f0000000240)) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r2 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000002c0)=[0x5]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r5 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000400)={{0x2, 0xffffffffffffffff, r4, r5, r6, 0x28, 0x2}, 0x5, 0xa86, 0x0, 0x0, 0x0, 0x0, 0x5}) r7 = syz_open_dev$MSR(&(0x7f0000000480), 0x1, 0x0) semctl$SEM_STAT_ANY(r2, 0x2, 0x14, &(0x7f00000004c0)=""/252) r8 = semget(0x2, 0x0, 0x22) semtimedop(r8, &(0x7f00000005c0)=[{0x1, 0x4, 0x1000}, {0x2, 0x3, 0x800}, {0x1, 0x47, 0x800}], 0x3, &(0x7f0000000600)={0x77359400}) semctl$SEM_STAT(r8, 0x1, 0x12, &(0x7f0000000640)=""/180) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x0, 0x0, {0x3}}, 0x18) sched_setscheduler(r3, 0x6, &(0x7f0000000740)=0x5) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x0, @initdev}, &(0x7f00000007c0)=0x10, 0x0) recvmmsg(r9, &(0x7f0000002740)=[{{&(0x7f0000000800)=@caif, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/237, 0xed}, {&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/169, 0xa9}], 0x3, &(0x7f0000000b80)=""/42, 0x2a}, 0xc50}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000c40)=""/134, 0x86}, {&(0x7f0000000d00)=""/61, 0x3d}, {&(0x7f0000000d40)=""/111, 0x6f}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/45, 0x2d}, {&(0x7f0000001e40)=""/189, 0xbd}, {&(0x7f0000001f00)=""/180, 0xb4}], 0x8, &(0x7f0000002040)=""/238, 0xee}, 0x8}, {{&(0x7f0000002140)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002640)=[{&(0x7f00000021c0)=""/52, 0x34}, {&(0x7f0000002200)=""/107, 0x6b}, {&(0x7f0000002280)=""/84, 0x54}, {&(0x7f0000002300)=""/191, 0xbf}, {&(0x7f00000023c0)=""/215, 0xd7}, {&(0x7f00000024c0)=""/171, 0xab}, {&(0x7f0000002580)=""/149, 0x95}], 0x7, &(0x7f00000026c0)=""/82, 0x52}, 0x2}], 0x3, 0x100, &(0x7f0000002800)={0x77359400}) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000002840)=""/89) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000028c0)={0xffffffffffffffff}) bind$tipc(r10, &(0x7f0000002900)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x3}}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000002940)={'veth1_to_hsr\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000002980), r12) read$msr(r7, &(0x7f00000029c0)=""/147, 0x93) syz_usb_connect(0x3, 0x564, &(0x7f0000002a80)={{0x12, 0x1, 0x110, 0x24, 0x1f, 0xcd, 0x0, 0x12d1, 0x70bc, 0xcb7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x552, 0x2, 0x4, 0x1, 0x10, 0x8, [{{0x9, 0x4, 0x4a, 0x4, 0x6, 0xff, 0x4, 0x62, 0x2, [@generic={0x84, 0x5, "502c90e7e02a78cfaa8dc45bef0eb5d723c46dced17f9ff47bc2c304115e3a165dc5de8ebff40b806d064db58d9109175fc107ac09542c9827fcd75bf087bc79865c8911d10d9ae31728524f2d3beaf5dc620435fe4839445a20b0ab85511c0f6475e53e3a3194a8bf1b64c7722db05c847bd8c5cf1137d25c3b3275488f5e4df865"}, @generic={0x3b, 0x31, "8dc8357d15fd467c1d24898438b069b9045891d40a8c41c329c4a0169efa925fe6d62ff05f51a75604549f9d7f5aa3dc8d54f200be95afc885"}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}, @generic={0xfb, 0xb, "45ff7c18d0e3df77b44946345106dded033ed6620c76c294003568c7241790d8949959a6fea25b7144a3d69fd911bd546dddb71410aa97c9e75980f6e3b7bbc433b260491b528a2c0f7a76f28e6010be3671e55a691c368f53a7aa27a395c56a031bc067cf0cde39a63ac42fe8537cad99c1e31370147b9d37d0ede488b5e77da523a082923a200962493a3b8a8ef87f316d57d4b45909ebb83a886fc215f5e61ee211cd145b54db7bf8d41f5ed7a9c47b6f6fa03eaf109098633458d87c148f9c46ed87fa7cd021124423efe40fee5bd2fe188f28550edca95fb6f5d495879c6d42d63f7a0605cb336ad0ab6a127b84a105b6eb503e3caab1"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x0, 0xb, 0x3, [@generic={0x38, 0x7, "4252a0df7d5c5acc1677ed9762b9fc29913da8f89e68dd5a6f8102eca51b8b5f0c92988acb4fb401c3389798b4d2ad96b7eb13dc3ed0"}, @generic={0x2a, 0x22, "1e1e48f1e9af408fe82d77269d097fceec116396e9a20f3b2a9310ef98e05022f4c6e13ba2a54250"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x0, 0x9, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x41, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x3, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf, 0xa, 0x9, [@generic={0xf9, 0x24, "c2b67c8c042f0048572636e62f4cbd7848383613468ddc6356ef6bb1fdea90f50fb4cd95d9b24e17d6cdfb0c4b2fbf114d06abc1775c06d0a3e67de9f73043480edd850555936e802934b21b4f1959b953fab187b163af38cb03625495a3311bd71a0996a58a08115122a8d2d63b7126ba8b3395fcddd2c9d3fa97314d0fefc0f679ccfead14f0c7f08d10f1afa5d92388433841af53aa2e486dbb2ee7074157ab83e3365462ebac1cab4ea2a9775bd753eb17a1d57ee22e1f1267d9d8f33274079b4d59da8f745d56e91959528b09e03ef85bc6aecfcf6969a8c96ba93ff8b3d10ef0871531adb59f6ba23e2c3e92204de88e8037a2bd"}, @generic={0xbb, 0x11, "fe83943cd4b3897d8b8e60d64439a5b935bc01f3263e43b35e20107fa492ac3bff50f732c01b6b39c7c110d4d52fac8bf71af048f03604645047c3104dac2bac1b6b191d22af0fbfbfcdcd78bb92f0ceab26694d07074138890b894044b4dae4a96d55bee91e4a1781e561bb4d6872e1020af53f729d8810cf2f706a99bc857b010ee7035a33055ca0b6e45d2d1bef1f2bea8a89bc968e6413bbb66f4c9354e7293d460e4170f03af7d5d8cfac00bac309d61419f3c87325ac"}]}}]}}, {{0x9, 0x4, 0x5c, 0x7f, 0x1, 0xe3, 0x9f, 0x44, 0x3, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x57b, 0x2, 0x2, "4f62a3389ce170de84"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x5, 0x80, "c2e2ab422e"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x1002}]}], [{{0x9, 0x5, 0x8, 0x8, 0x200, 0x9, 0xc, 0x8, [@generic={0xe5, 0x22, "b6fa1f4ae125947ca46a144fc0d11f77be7e8bf7b1e244150bf4b53b6b343a52749a3ccf8e320d1a8d6517bedb5b9162a2f5513708898faf416f709071532de1a4690477fbae6e715013b938f867f1b7d78a1924eba0e69c2b7cb6c87c97c808b9a97ab739d5008733cd545d5f382e09708fde4f040e8e476dd2bf65ed0e3b24eecec0a41f2906fb372c654f31d59a23dfabbf7ed08477ceed022253a09c825507ef902b9a4280419718aa6af8f111182eca503b7739873b038bafa228852c7cd5221f322f25d7f5f84ad1b44dd503c55934546c2433e0765a648c229d06301146a5dc"}]}}]}}]}}]}}, &(0x7f0000003400)={0xa, &(0x7f0000003000)={0xa, 0x6, 0x201, 0x4, 0x16, 0x4, 0x20, 0x3}, 0x14d, &(0x7f0000003040)={0x5, 0xf, 0x14d, 0x5, [@generic={0xe7, 0x10, 0xa, "e2e01f07063fb52eb52294b9616b939dff6ab8ce8e484ec64c1ac06df1d19ebc7711179355c93395eb67aaa02fe6021dcc71a32414648470b0c36f7f46264265c3ef81e100c7c11d893be7aaac7829e1759703e225db588a76f9a3cdffef5f452c0b5e975677971f888d1a1888b286994a977b90e3d8ed0bbca10f67b78494d73134df90635248488e9fb3e73986bfa8cfa2ab6958622296883bf8659ec4349a8a23db9ba2eb60dea08af53eaa4f1f048a52c3738a1692106c26fbb0c5a54a8b7756ab18df4dfcc892d17810c2729302eb67da89a5936d54fe0424062aa486396b531baf"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x6, 0x29, 0x9, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x64, 0x34, 0xc, 0xa, 0x1c}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7, 0x2, 0xe782}, @generic={0x41, 0x10, 0xb, "bf7300cd50f29e62b49416afea777c62abe7bc8314303217ad3ba0be6d018da8ae9fa9183d5c87f943f8ec777920f9e84fe8b92a125f7b70bc8d3f23ebb7"}]}, 0x8, [{0x4, &(0x7f00000031c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000003200)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000003300)=@lang_id={0x4, 0x3, 0xa}}, {0x4, &(0x7f0000003340)=@lang_id={0x4, 0x3, 0x407}}, {0x7f, &(0x7f0000003380)=@string={0x7f, 0x3, "2bf57c61127a8bc39ecbcd4c09a06513e4c6349f6dbce27936bf08967f45bb1fd40f7f2a7c6b4a7991a8597882d344fd27b4f2724e9dcbe78bed6de2950eeea4433ec11b14af438732859ccbf538fdeb6fedc2cb5f1954c8ea28d6cf4d3d4fb9f20fa1915ea2a6178dc5a58f1f532a5e2e61987145756dc370e31b3ba8"}}]}) 223.683728ms ago: executing program 4 (id=142): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) r1 = eventfd2(0x9, 0x80801) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x3c, 0x55, {0x55, 0x21, "1c5ba8e458205a856d135ad3559613dc9e459c06e0dce6555a73528386dc0bf576d43850ab74f4c40647cb372afcc5ffde5c59538263ec6670bc16638020af41c164427e89e1911f6a7b8964be4b0b5880aaff"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x20, 0x3, 0xe5, "ba7b8c634a32fd3ddbfc336ebfac50d3c55ecf8bac1e4170ae95379f8b9b39f7a41ed95abad05df688ee8e2e1d64ad4c2360f21e44d12d01ea2ef749f329367aeff8a26f69b8b987328b38af43c5b7049504e76ee35f50ef35756060905b3b697d02fd713d07595434b69c5287d89c66949d40bf120133d2d00bbca1eb0c953e651faafb9f5a83e95fc00a8e5f1998d3bff1e6bf76b14178a56c305b3a613d92ccaf0f9948b0480751ba8e1bdeb754f4c90eef206269f74b2f6b43b9e56d6a9b5dd61be2b59320bb613e5a2a4cc7f484081476dfc70bfab85eac4914744c593761ddfcd854"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x81, 0x1, "88"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "6dfd"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '<'}, &(0x7f0000000400)={0x20, 0x84, 0x4, "5bb724cc"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "ce360d"}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc8, &(0x7f0000000440)={[{}, {0xbd, 0x4e00, "9d38e6393818d30302c87efcfde3493edacd69e582c3b9c19d6dd5a62aaa0bd5890f96f98fddb77510ce533f415d6a59d3f10f9296544db0ab379a82b67744dad0468cf58339c7c520ecfd4b3f6d91f7df06f2f1c951ec97e8e03cdbd4887fd9994f41ae4854f29662b67ce05f57d195fe6c3bf16be1cf95505ac1a555abb7390844f3b1b83dedb3c4961153d4bff735fa37f5ed5be8ce3a8762e51f16bad2634c1db38714f2c020aaed3275c2b0ed7cf19567ce3b76435647d69f1456"}]}) 30.283806ms ago: executing program 1 (id=143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20000000}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x54}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) unshare(0x400) fsetxattr$security_ima(r3, &(0x7f0000000040), &(0x7f0000000180)=@md5={0x1, "1338d28b96ff51153385b4821c8606be"}, 0x11, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x2, 0x3, 0x1, 0x1}]}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 0s ago: executing program 4 (id=144): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x8, 0xfffffffe, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, &(0x7f00000001c0)='./file0\x00') r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000102505a8a440000102260109021b000101000000090400ff0207010100090501020000030000b921a06d4e981b60f53ed4704aaddb30e7e2a7bdf84cdcf84c4e5f077bd8e812711f55dea67bf14de68b0fe1c078c7a72ebbccd606664b4e74a46ada908fba8ee605eb6a948b"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x60b, 0x0) write$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 67.414862][ T30] audit: type=1400 audit(1751986590.479:62): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.419461][ T5819] cgroup: Unknown subsys name 'net' [ 67.437612][ T30] audit: type=1400 audit(1751986590.479:63): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.467835][ T30] audit: type=1400 audit(1751986590.529:64): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.613948][ T5819] cgroup: Unknown subsys name 'cpuset' [ 67.622366][ T5819] cgroup: Unknown subsys name 'rlimit' [ 67.800133][ T30] audit: type=1400 audit(1751986590.859:65): avc: denied { setattr } for pid=5819 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.833718][ T30] audit: type=1400 audit(1751986590.859:66): avc: denied { create } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.864886][ T30] audit: type=1400 audit(1751986590.859:67): avc: denied { write } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.885317][ T30] audit: type=1400 audit(1751986590.859:68): avc: denied { read } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.906611][ T30] audit: type=1400 audit(1751986590.859:69): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.931704][ T30] audit: type=1400 audit(1751986590.859:70): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.955231][ T30] audit: type=1400 audit(1751986590.899:71): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.998015][ T5821] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 68.991608][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.181248][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.187690][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.314911][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.324325][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.337477][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.345651][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.361624][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.380547][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.390511][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.408259][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.420878][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.424846][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.432885][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.437243][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.443290][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.451576][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.471583][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.472738][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.489114][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.497087][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.505420][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.521426][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.566539][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.582100][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.591021][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.599832][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.611483][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.944903][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.189275][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.196678][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.204127][ T5832] bridge_slave_0: entered allmulticast mode [ 72.212952][ T5832] bridge_slave_0: entered promiscuous mode [ 72.224569][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.234847][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.242071][ T5832] bridge_slave_1: entered allmulticast mode [ 72.249283][ T5832] bridge_slave_1: entered promiscuous mode [ 72.256381][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.266390][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.291898][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 72.325639][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 72.387293][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.399570][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.485373][ T5832] team0: Port device team_slave_0 added [ 72.493981][ T5832] team0: Port device team_slave_1 added [ 72.518058][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.525279][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.532678][ T5834] bridge_slave_0: entered allmulticast mode [ 72.539469][ T5834] bridge_slave_0: entered promiscuous mode [ 72.599798][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.607078][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.614572][ T5834] bridge_slave_1: entered allmulticast mode [ 72.621755][ T5834] bridge_slave_1: entered promiscuous mode [ 72.647694][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.654714][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.681021][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.716566][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.723839][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.731787][ T5843] bridge_slave_0: entered allmulticast mode [ 72.738534][ T5843] bridge_slave_0: entered promiscuous mode [ 72.747906][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.754919][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.781117][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.812305][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.819416][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.827187][ T5829] bridge_slave_0: entered allmulticast mode [ 72.834086][ T5829] bridge_slave_0: entered promiscuous mode [ 72.842734][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.849866][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.857120][ T5829] bridge_slave_1: entered allmulticast mode [ 72.864028][ T5829] bridge_slave_1: entered promiscuous mode [ 72.879420][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.886696][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.894338][ T5843] bridge_slave_1: entered allmulticast mode [ 72.901754][ T5843] bridge_slave_1: entered promiscuous mode [ 72.915442][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.922572][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.929788][ T5847] bridge_slave_0: entered allmulticast mode [ 72.936802][ T5847] bridge_slave_0: entered promiscuous mode [ 72.954924][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.966753][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.001531][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.008647][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.017677][ T5847] bridge_slave_1: entered allmulticast mode [ 73.024650][ T5847] bridge_slave_1: entered promiscuous mode [ 73.068963][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.092152][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.104025][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.116535][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.137317][ T5834] team0: Port device team_slave_0 added [ 73.148456][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.159615][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.198274][ T5834] team0: Port device team_slave_1 added [ 73.256261][ T5829] team0: Port device team_slave_0 added [ 73.267256][ T5832] hsr_slave_0: entered promiscuous mode [ 73.274089][ T5832] hsr_slave_1: entered promiscuous mode [ 73.295396][ T5843] team0: Port device team_slave_0 added [ 73.304552][ T5843] team0: Port device team_slave_1 added [ 73.312957][ T5847] team0: Port device team_slave_0 added [ 73.321531][ T5829] team0: Port device team_slave_1 added [ 73.339966][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.347106][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.373277][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.396560][ T5847] team0: Port device team_slave_1 added [ 73.426936][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.434055][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.461109][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.482450][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.489413][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.515932][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.541582][ T5840] Bluetooth: hci0: command tx timeout [ 73.543916][ T5841] Bluetooth: hci1: command tx timeout [ 73.552984][ T5830] Bluetooth: hci2: command tx timeout [ 73.559890][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.567124][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.593127][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.604782][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.611776][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.637890][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.637917][ T5830] Bluetooth: hci3: command tx timeout [ 73.660030][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.667045][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.692985][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.703651][ T5830] Bluetooth: hci4: command tx timeout [ 73.736965][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.744472][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.770696][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.807981][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.815901][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.842202][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.909968][ T5829] hsr_slave_0: entered promiscuous mode [ 73.916165][ T5829] hsr_slave_1: entered promiscuous mode [ 73.922643][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.931437][ T5829] Cannot create hsr debugfs directory [ 73.951750][ T5834] hsr_slave_0: entered promiscuous mode [ 73.957860][ T5834] hsr_slave_1: entered promiscuous mode [ 73.964278][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.971897][ T5834] Cannot create hsr debugfs directory [ 73.983947][ T5843] hsr_slave_0: entered promiscuous mode [ 73.989999][ T5843] hsr_slave_1: entered promiscuous mode [ 73.996123][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.003715][ T5843] Cannot create hsr debugfs directory [ 74.113140][ T5847] hsr_slave_0: entered promiscuous mode [ 74.119437][ T5847] hsr_slave_1: entered promiscuous mode [ 74.125890][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.133571][ T5847] Cannot create hsr debugfs directory [ 74.371050][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.411483][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.428337][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.459545][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.554778][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.570710][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.582208][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.592693][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.684136][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.712317][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.723591][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.756766][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.823726][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.859966][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.872043][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.882518][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.907786][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.946506][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.964328][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.001562][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.008732][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.027502][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.034657][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.052640][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.063702][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.099491][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.125035][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.139302][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.146475][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.161262][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.177518][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.184723][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.238693][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.273062][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.341610][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 75.341631][ T30] audit: type=1400 audit(1751986598.409:86): avc: denied { sys_module } for pid=5834 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.347799][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.406477][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.413656][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.428880][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.436001][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.522837][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.624348][ T5830] Bluetooth: hci2: command tx timeout [ 75.624798][ T5841] Bluetooth: hci1: command tx timeout [ 75.629762][ T5830] Bluetooth: hci0: command tx timeout [ 75.648597][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.664100][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.708103][ T5830] Bluetooth: hci3: command tx timeout [ 75.719403][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.726565][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.781637][ T5830] Bluetooth: hci4: command tx timeout [ 75.815573][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.822704][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.848228][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.912729][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.948836][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.979759][ T5834] veth0_vlan: entered promiscuous mode [ 75.994303][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.001506][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.048778][ T5834] veth1_vlan: entered promiscuous mode [ 76.070142][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.085952][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.093129][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.274141][ T5834] veth0_macvtap: entered promiscuous mode [ 76.324153][ T5834] veth1_macvtap: entered promiscuous mode [ 76.349172][ T5843] veth0_vlan: entered promiscuous mode [ 76.423836][ T5843] veth1_vlan: entered promiscuous mode [ 76.460850][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.481748][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.527849][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.588636][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.599057][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.609310][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.622099][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.644100][ T5832] veth0_vlan: entered promiscuous mode [ 76.656607][ T5843] veth0_macvtap: entered promiscuous mode [ 76.681715][ T5843] veth1_macvtap: entered promiscuous mode [ 76.716822][ T5832] veth1_vlan: entered promiscuous mode [ 76.739695][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.753221][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.761900][ T5829] veth0_vlan: entered promiscuous mode [ 76.788852][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.827069][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.836192][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.845172][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.854656][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.877121][ T5829] veth1_vlan: entered promiscuous mode [ 76.924310][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.932739][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.000073][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.008228][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.036166][ T5832] veth0_macvtap: entered promiscuous mode [ 77.057832][ T5847] veth0_vlan: entered promiscuous mode [ 77.066633][ T5832] veth1_macvtap: entered promiscuous mode [ 77.080123][ T30] audit: type=1400 audit(1751986600.139:87): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.sInnCj/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.084775][ T5829] veth0_macvtap: entered promiscuous mode [ 77.116359][ T30] audit: type=1400 audit(1751986600.179:88): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.147298][ T30] audit: type=1400 audit(1751986600.179:89): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.sInnCj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.175900][ T30] audit: type=1400 audit(1751986600.179:90): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.197697][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.208347][ T30] audit: type=1400 audit(1751986600.179:91): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.sInnCj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.209897][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.240260][ T5847] veth1_vlan: entered promiscuous mode [ 77.255715][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.264472][ T30] audit: type=1400 audit(1751986600.179:92): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.sInnCj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.280733][ T5829] veth1_macvtap: entered promiscuous mode [ 77.306324][ T30] audit: type=1400 audit(1751986600.209:93): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.326642][ T30] audit: type=1400 audit(1751986600.209:94): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.347765][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.356530][ T30] audit: type=1400 audit(1751986600.209:95): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="gadgetfs" ino=6462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.428511][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.446253][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.476316][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.480292][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.497642][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.507619][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.517457][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.542631][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.701543][ T5830] Bluetooth: hci0: command tx timeout [ 77.707434][ T5830] Bluetooth: hci1: command tx timeout [ 77.707805][ T5841] Bluetooth: hci2: command tx timeout [ 77.781766][ T5841] Bluetooth: hci3: command tx timeout [ 77.839057][ T5847] veth0_macvtap: entered promiscuous mode [ 77.862309][ T5841] Bluetooth: hci4: command tx timeout [ 77.954795][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.051701][ T5847] veth1_macvtap: entered promiscuous mode [ 78.070479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.106573][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.116032][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.124805][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.133652][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.276988][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.293916][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.300405][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.359556][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.405226][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.425031][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.438811][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.467888][ T5954] Zero length message leads to an empty skb [ 78.477012][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.488055][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.507899][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.569976][ T5956] bridge_slave_0: left allmulticast mode [ 78.576489][ T5956] bridge_slave_0: left promiscuous mode [ 78.584258][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.596805][ T5956] bridge_slave_1: left allmulticast mode [ 78.605123][ T5956] bridge_slave_1: left promiscuous mode [ 78.613277][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.712966][ T5957] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.720288][ T5957] overlayfs: failed to set xattr on upper [ 78.726116][ T5957] overlayfs: ...falling back to redirect_dir=nofollow. [ 78.733160][ T5957] overlayfs: ...falling back to index=off. [ 78.739068][ T5957] overlayfs: ...falling back to uuid=null. [ 78.745600][ T5957] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 79.033935][ T5956] bond0: (slave bond_slave_0): Releasing backup interface [ 79.045512][ T5956] bond0: (slave bond_slave_1): Releasing backup interface [ 79.062713][ T5956] team0: Port device team_slave_0 removed [ 79.075898][ T5956] team0: Port device team_slave_1 removed [ 79.082693][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.090164][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.099437][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.108258][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.243607][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.268020][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.308953][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.317284][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.653459][ T5963] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.668050][ T5963] xt_TCPMSS: Only works on TCP SYN packets [ 79.820687][ T5841] Bluetooth: hci1: command tx timeout [ 79.828624][ T5841] Bluetooth: hci2: command tx timeout [ 79.835163][ T5841] Bluetooth: hci0: command tx timeout [ 79.860875][ T5840] Bluetooth: hci3: command tx timeout [ 79.919805][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.970184][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.990790][ T5840] Bluetooth: hci4: command tx timeout [ 80.588054][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 80.588071][ T30] audit: type=1400 audit(1751986603.639:125): avc: denied { read write } for pid=5968 comm="syz.4.5" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.612234][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.630656][ T30] audit: type=1400 audit(1751986603.639:126): avc: denied { open } for pid=5968 comm="syz.4.5" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.664527][ T30] audit: type=1400 audit(1751986603.639:127): avc: denied { mounton } for pid=5968 comm="syz.4.5" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.689251][ T30] audit: type=1400 audit(1751986603.719:128): avc: denied { create } for pid=5969 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.722199][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.782479][ T30] audit: type=1400 audit(1751986603.759:129): avc: denied { create } for pid=5968 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.906906][ T30] audit: type=1400 audit(1751986603.759:130): avc: denied { create } for pid=5968 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.178734][ T30] audit: type=1400 audit(1751986603.779:131): avc: denied { shutdown } for pid=5968 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.198429][ T30] audit: type=1400 audit(1751986603.779:132): avc: denied { getopt } for pid=5968 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.427355][ T10] cfg80211: failed to load regulatory.db [ 81.981858][ T5979] ======================================================= [ 81.981858][ T5979] WARNING: The mand mount option has been deprecated and [ 81.981858][ T5979] and is ignored by this kernel. Remove the mand [ 81.981858][ T5979] option from the mount to silence this warning. [ 81.981858][ T5979] ======================================================= [ 82.000095][ T5980] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.025130][ T5980] overlayfs: failed to set xattr on upper [ 82.030985][ T5980] overlayfs: ...falling back to redirect_dir=nofollow. [ 82.037824][ T5980] overlayfs: ...falling back to index=off. [ 82.043649][ T5980] overlayfs: ...falling back to uuid=null. [ 82.049463][ T5980] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 82.063423][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 82.072237][ T30] audit: type=1400 audit(1751986603.779:133): avc: denied { connect } for pid=5968 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.100717][ T30] audit: type=1400 audit(1751986603.779:134): avc: denied { name_connect } for pid=5968 comm="syz.4.5" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.345335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.580663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.597774][ T5990] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.632756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.006618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.165955][ T5999] ceph: No mds server is up or the cluster is laggy [ 83.181439][ T9] libceph: connect (1)[c::]:6789 error -101 [ 83.188533][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 83.230739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.381227][ T5886] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.551059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.640662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.749886][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 83.781469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.810717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.549735][ T6012] SELinux: failed to load policy [ 84.833006][ T5886] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 84.876934][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.924741][ T5886] usb 2-1: Product: syz [ 84.928943][ T5886] usb 2-1: Manufacturer: syz [ 84.972599][ T5886] usb 2-1: SerialNumber: syz [ 85.018729][ T5886] usb 2-1: config 0 descriptor?? [ 85.033600][ T5886] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 85.046932][ T5886] usb 2-1: Detected FT-X [ 85.652176][ T5886] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 85.676893][ T5886] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 85.708797][ T5886] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 85.766024][ T5886] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.911000][ T6030] netlink: 'syz.2.21': attribute type 2 has an invalid length. [ 85.936038][ T5886] usb 2-1: USB disconnect, device number 2 [ 86.369443][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 86.369458][ T30] audit: type=1400 audit(1751986609.429:192): avc: denied { read } for pid=6035 comm="syz.0.24" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.398529][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.426585][ T5886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 86.757652][ T5886] ftdi_sio 2-1:0.0: device disconnected [ 86.851759][ T30] audit: type=1400 audit(1751986609.429:193): avc: denied { open } for pid=6035 comm="syz.0.24" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.865609][ T6041] capability: warning: `syz.1.22' uses deprecated v2 capabilities in a way that may be insecure [ 87.736065][ T6048] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28455 sclass=netlink_xfrm_socket pid=6048 comm=syz.2.26 [ 87.836462][ T30] audit: type=1400 audit(1751986609.429:194): avc: denied { write } for pid=6035 comm="syz.0.24" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.897859][ T30] audit: type=1400 audit(1751986609.429:195): avc: denied { ioctl } for pid=6035 comm="syz.0.24" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.929200][ T30] audit: type=1400 audit(1751986609.439:196): avc: denied { allowed } for pid=6035 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.956413][ T30] audit: type=1400 audit(1751986609.489:197): avc: denied { write } for pid=6032 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.299446][ T6050] syz.4.27 (6050): attempted to duplicate a private mapping with mremap. This is not supported. [ 88.818032][ T30] audit: type=1400 audit(1751986609.619:198): avc: denied { write } for pid=6032 comm="syz.4.23" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.845941][ T30] audit: type=1400 audit(1751986609.639:199): avc: denied { write } for pid=6032 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.865137][ T30] audit: type=1400 audit(1751986609.649:200): avc: denied { name_connect } for pid=6032 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 88.885689][ T30] audit: type=1400 audit(1751986609.699:201): avc: denied { ioctl } for pid=6032 comm="syz.4.23" path="socket:[6836]" dev="sockfs" ino=6836 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.382215][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 91.382231][ T30] audit: type=1400 audit(1751986614.439:221): avc: denied { ioctl } for pid=6087 comm="syz.4.38" path="mnt:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.421880][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.694013][ T6093] ALSA: seq fatal error: cannot create timer (-22) [ 91.801404][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 91.896287][ T6097] Device name cannot be null; rc = [-22] [ 91.951087][ T30] audit: type=1400 audit(1751986614.949:222): avc: denied { nlmsg_write } for pid=6095 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.181246][ T5886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 92.217909][ T5886] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 92.244581][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.285997][ T5886] usb 1-1: Product: syz [ 92.290198][ T5886] usb 1-1: Manufacturer: syz [ 92.306345][ T5886] usb 1-1: SerialNumber: syz [ 92.345202][ T5886] usb 1-1: config 0 descriptor?? [ 92.353857][ T30] audit: type=1400 audit(1751986615.409:223): avc: denied { bind } for pid=6100 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.357729][ T5886] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 92.375637][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.408720][ T5886] usb 1-1: Detected FT232R [ 92.429385][ T30] audit: type=1400 audit(1751986615.419:224): avc: denied { create } for pid=6100 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.459455][ T30] audit: type=1400 audit(1751986615.519:225): avc: denied { getopt } for pid=6083 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.577061][ T5886] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 92.710572][ T917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.783311][ T30] audit: type=1400 audit(1751986615.849:226): avc: denied { ioctl } for pid=6098 comm="syz.4.41" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.986259][ T5886] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 93.148314][ T30] audit: type=1400 audit(1751986616.209:227): avc: denied { ioctl } for pid=6110 comm="syz.3.45" path="socket:[8327]" dev="sockfs" ino=8327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.298903][ T30] audit: type=1400 audit(1751986616.239:228): avc: denied { create } for pid=6110 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.353045][ T5886] usb 1-1: USB disconnect, device number 2 [ 93.379081][ T5886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 93.379668][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.390782][ T5886] ftdi_sio 1-1:0.0: device disconnected [ 93.630625][ T30] audit: type=1400 audit(1751986616.529:229): avc: denied { bind } for pid=6110 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.892902][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.910557][ T917] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 93.911722][ T30] audit: type=1400 audit(1751986616.529:230): avc: denied { setopt } for pid=6110 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.919967][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.308838][ T917] usb 3-1: config 0 descriptor?? [ 94.924540][ T6126] x_tables: ip_tables: osf match: only valid for protocol 6 [ 95.483507][ T6125] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 95.522852][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 95.538565][ T917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.657648][ T917] usb 3-1: USB disconnect, device number 2 [ 95.757821][ T6135] tmpfs: Bad value for 'mpol' [ 96.526612][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.669665][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 96.669681][ T30] audit: type=1400 audit(1751986619.729:243): avc: denied { ioctl } for pid=6152 comm="syz.3.57" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 96.720236][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 96.721620][ T30] audit: type=1400 audit(1751986619.779:244): avc: denied { getopt } for pid=6152 comm="syz.3.57" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.749779][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 96.759293][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.767920][ T6156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1005 sclass=netlink_tcpdiag_socket pid=6156 comm=syz.2.58 [ 96.786316][ T30] audit: type=1400 audit(1751986619.849:245): avc: denied { write } for pid=6155 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 96.812228][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 96.926818][ T10] pvrusb2: ********** [ 96.930948][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 96.943011][ T10] pvrusb2: Important functionality might not be entirely working. [ 96.951100][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 96.962682][ T10] pvrusb2: ********** [ 97.034062][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.073737][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.194767][ T2336] pvrusb2: Invalid write control endpoint [ 97.340647][ T30] audit: type=1400 audit(1751986620.339:246): avc: denied { setopt } for pid=6158 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.606462][ T917] usb 1-1: USB disconnect, device number 3 [ 97.870679][ T6162] block device autoloading is deprecated and will be removed. [ 97.880201][ T6162] syz.4.60: attempt to access beyond end of device [ 97.880201][ T6162] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.908526][ T30] audit: type=1400 audit(1751986620.929:247): avc: denied { read write } for pid=6166 comm="syz.3.62" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.980505][ T30] audit: type=1400 audit(1751986620.959:248): avc: denied { ioctl open } for pid=6166 comm="syz.3.62" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.046113][ T2336] pvrusb2: Invalid write control endpoint [ 98.072971][ T30] audit: type=1400 audit(1751986620.969:249): avc: denied { setopt } for pid=6166 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.104591][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 98.136066][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 98.155951][ T30] audit: type=1400 audit(1751986620.969:250): avc: denied { read } for pid=6166 comm="syz.3.62" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.182599][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 98.182627][ T2336] pvrusb2: Device being rendered inoperable [ 98.183604][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 98.183669][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 98.185904][ T2336] pvrusb2: Attached sub-driver cx25840 [ 98.185939][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 98.185949][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 98.251545][ T30] audit: type=1400 audit(1751986620.969:251): avc: denied { open } for pid=6166 comm="syz.3.62" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.251596][ T30] audit: type=1400 audit(1751986621.119:252): avc: denied { sys_module } for pid=6157 comm="syz.2.61" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.178298][ T6192] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 99.239454][ T6191] Bluetooth: MGMT ver 1.23 [ 99.360572][ T917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.530555][ T917] usb 4-1: Using ep0 maxpacket: 32 [ 99.558507][ T917] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 99.594428][ T917] usb 4-1: config 0 has no interface number 0 [ 99.619379][ T917] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 99.630898][ T5952] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.688624][ T917] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 99.706210][ T917] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 99.723612][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.741355][ T917] usb 4-1: Product: syz [ 99.749747][ T917] usb 4-1: Manufacturer: syz [ 99.759293][ T917] usb 4-1: SerialNumber: syz [ 99.768258][ T917] usb 4-1: config 0 descriptor?? [ 99.810487][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.828535][ T5952] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 99.849063][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.872323][ T5952] usb 5-1: config 0 descriptor?? [ 99.891746][ T5952] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 99.950675][ T10] usb 1-1: device descriptor read/64, error -71 [ 100.190685][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.220090][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.334397][ T917] radio-si470x 4-1:0.35: this is not a si470x device. [ 100.650952][ T917] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 100.750458][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.900630][ T10] usb 1-1: device descriptor read/64, error -71 [ 101.011412][ T10] usb usb1-port1: attempt power cycle [ 101.023146][ T5966] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.075849][ T5952] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 101.171858][ T5966] usb 2-1: device descriptor read/64, error -71 [ 101.381326][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.458303][ T5966] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.545559][ T10] usb 1-1: device descriptor read/8, error -71 [ 101.675084][ T6212] syz.2.72 (6212) used greatest stack depth: 19224 bytes left [ 101.694473][ T5952] gspca_cpia1: usb_control_msg 01, error -71 [ 101.725085][ T5952] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 101.736997][ T5952] usb 5-1: USB disconnect, device number 2 [ 101.830226][ T5966] usb 2-1: device descriptor read/64, error -71 [ 101.890850][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.910137][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 101.910153][ T30] audit: type=1400 audit(1751986624.969:263): avc: denied { ioctl } for pid=6214 comm="syz.2.73" path="/newroot/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 101.952926][ T10] usb 1-1: device descriptor read/8, error -71 [ 101.965431][ T5966] usb usb2-port1: attempt power cycle [ 102.006530][ T30] audit: type=1400 audit(1751986625.069:264): avc: denied { create } for pid=6216 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.049178][ T30] audit: type=1400 audit(1751986625.099:265): avc: denied { bind } for pid=6216 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.071479][ T10] usb usb1-port1: unable to enumerate USB device [ 102.132244][ T917] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 102.172435][ T917] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 102.237132][ T917] usb 4-1: USB disconnect, device number 2 [ 102.248702][ T917] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 102.330517][ T5966] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.587807][ T5966] usb 2-1: device descriptor read/8, error -71 [ 102.698252][ T30] audit: type=1400 audit(1751986625.759:266): avc: denied { accept } for pid=6221 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.910785][ T5966] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.938995][ T30] audit: type=1400 audit(1751986625.999:267): avc: denied { create } for pid=6233 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.969813][ T5966] usb 2-1: device descriptor read/8, error -71 [ 102.978278][ T30] audit: type=1400 audit(1751986626.029:268): avc: denied { create } for pid=6233 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.039184][ T6230] ALSA: seq fatal error: cannot create timer (-22) [ 103.064215][ T30] audit: type=1400 audit(1751986626.029:269): avc: denied { ioctl } for pid=6233 comm="syz.3.79" path="socket:[9274]" dev="sockfs" ino=9274 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.100766][ T5966] usb usb2-port1: unable to enumerate USB device [ 103.258002][ T30] audit: type=1400 audit(1751986626.319:270): avc: denied { read write } for pid=6239 comm="syz.2.81" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.453645][ T30] audit: type=1400 audit(1751986626.319:271): avc: denied { open } for pid=6239 comm="syz.2.81" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.493259][ T6248] serio: Serial port ptm0 [ 103.540693][ T30] audit: type=1400 audit(1751986626.319:272): avc: denied { ioctl } for pid=6239 comm="syz.2.81" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 104.523752][ T6263] netlink: 10 bytes leftover after parsing attributes in process `syz.3.85'. [ 104.842666][ T6278] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 104.908280][ T6274] syzkaller0: entered promiscuous mode [ 104.942405][ T6274] syzkaller0: entered allmulticast mode [ 104.993851][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 105.081439][ T6278] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.174312][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.196672][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.223548][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.248628][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.257046][ T9] usb 5-1: SerialNumber: syz [ 105.292712][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 105.301448][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 105.752786][ T9] usb 5-1: USB disconnect, device number 3 [ 106.726770][ T6315] ALSA: seq fatal error: cannot create timer (-22) [ 106.943908][ T5886] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.059246][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 107.059258][ T30] audit: type=1400 audit(1751986630.119:280): avc: denied { mount } for pid=6317 comm="syz.4.98" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.102712][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 107.115146][ T5886] usb 1-1: config 1 interface 0 altsetting 162 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.131306][ T30] audit: type=1400 audit(1751986630.159:281): avc: denied { search } for pid=6317 comm="syz.4.98" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.153722][ T5886] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.167108][ T30] audit: type=1400 audit(1751986630.169:282): avc: denied { search } for pid=6317 comm="syz.4.98" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.221023][ T5886] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.40 [ 107.244220][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.260541][ T5886] usb 1-1: Product: ꂑ붌ꇘ柔兡 [ 107.267014][ T5886] usb 1-1: Manufacturer: ဉ [ 107.272926][ T5886] usb 1-1: SerialNumber: ї [ 107.278843][ T30] audit: type=1400 audit(1751986630.169:283): avc: denied { read open } for pid=6317 comm="syz.4.98" path="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.309812][ T30] audit: type=1400 audit(1751986630.199:284): avc: denied { search } for pid=6317 comm="syz.4.98" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.343202][ T30] audit: type=1400 audit(1751986630.199:285): avc: denied { search } for pid=6317 comm="syz.4.98" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.782877][ T5886] usbhid 1-1:1.0: can't add hid device: -71 [ 107.792445][ T5886] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 107.898997][ T5886] usb 1-1: USB disconnect, device number 8 [ 108.795923][ T30] audit: type=1326 audit(1751986631.859:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc58e929 code=0x7ffc0000 [ 108.829748][ T30] audit: type=1326 audit(1751986631.859:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fe1bc58e929 code=0x7ffc0000 [ 108.854091][ T30] audit: type=1326 audit(1751986631.859:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc58e929 code=0x7ffc0000 [ 108.980839][ T30] audit: type=1326 audit(1751986631.859:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1bc58e929 code=0x7ffc0000 [ 109.038260][ T6339] mmap: syz.4.102 (6339) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.638076][ T977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.796209][ T6365] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.803374][ T6365] overlayfs: failed to set xattr on upper [ 110.809125][ T6365] overlayfs: ...falling back to redirect_dir=nofollow. [ 110.816416][ T6365] overlayfs: ...falling back to index=off. [ 110.825628][ T6365] overlayfs: ...falling back to uuid=null. [ 110.832856][ T6365] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 111.232936][ T977] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 111.306626][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.471587][ T977] usb 1-1: config 0 descriptor?? [ 111.503958][ T977] gspca_main: tv8532-2.14.0 probing 0545:808b [ 111.598271][ T6374] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 111.605433][ T6374] overlayfs: failed to set xattr on upper [ 111.611234][ T6374] overlayfs: ...falling back to redirect_dir=nofollow. [ 111.618122][ T6374] overlayfs: ...falling back to index=off. [ 111.624132][ T6374] overlayfs: ...falling back to uuid=null. [ 111.629995][ T6374] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 112.278207][ T6383] overlayfs: missing 'lowerdir' [ 112.360480][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.499592][ T6389] FAULT_INJECTION: forcing a failure. [ 112.499592][ T6389] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.555067][ T6389] CPU: 0 UID: 0 PID: 6389 Comm: syz.2.116 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 112.555097][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.555112][ T6389] Call Trace: [ 112.555119][ T6389] [ 112.555129][ T6389] dump_stack_lvl+0x16c/0x1f0 [ 112.555163][ T6389] should_fail_ex+0x512/0x640 [ 112.555190][ T6389] _copy_from_user+0x2e/0xd0 [ 112.555218][ T6389] do_sock_getsockopt+0x5f4/0x800 [ 112.555251][ T6389] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 112.555278][ T6389] ? __fget_files+0x204/0x3c0 [ 112.555315][ T6389] __sys_getsockopt+0x12f/0x260 [ 112.555346][ T6389] __x64_sys_getsockopt+0xbd/0x160 [ 112.555368][ T6389] ? do_syscall_64+0x91/0x4c0 [ 112.555390][ T6389] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.555412][ T6389] do_syscall_64+0xcd/0x4c0 [ 112.555437][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.555457][ T6389] RIP: 0033:0x7f5ddaf8e929 [ 112.555471][ T6389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.555486][ T6389] RSP: 002b:00007f5ddbe7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 112.555504][ T6389] RAX: ffffffffffffffda RBX: 00007f5ddb1b5fa0 RCX: 00007f5ddaf8e929 [ 112.555515][ T6389] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003 [ 112.555525][ T6389] RBP: 00007f5ddbe7e090 R08: 0000200000000180 R09: 0000000000000000 [ 112.555535][ T6389] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 112.555546][ T6389] R13: 0000000000000000 R14: 00007f5ddb1b5fa0 R15: 00007fff2189a7a8 [ 112.555584][ T6389] [ 112.721224][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.773338][ T5966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5966 comm=kworker/0:8 [ 112.789480][ T6390] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 112.820939][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 112.829559][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.840557][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.841968][ T977] usb 1-1: USB disconnect, device number 9 [ 112.850285][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 112.850312][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.876523][ T9] usb 4-1: config 0 descriptor?? [ 112.950778][ T5886] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.961588][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 112.961623][ T30] audit: type=1400 audit(1751986636.029:300): avc: denied { ioctl } for pid=6376 comm="syz.1.114" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.992401][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.011750][ T30] audit: type=1400 audit(1751986636.059:301): avc: denied { read write } for pid=6393 comm="syz.2.119" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.044207][ T30] audit: type=1400 audit(1751986636.059:302): avc: denied { open } for pid=6393 comm="syz.2.119" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.105562][ T6397] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.118'. [ 113.116352][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 113.119605][ T6397] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 113.136213][ T5886] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.146462][ T5886] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.156360][ T5886] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.169383][ T5886] usb 2-1: config 1 interface 0 has no altsetting 0 [ 113.178117][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.187883][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 113.196025][ T5886] usb 2-1: Product: syz [ 113.200223][ T5886] usb 2-1: Manufacturer: syz [ 113.204962][ T5886] usb 2-1: SerialNumber: syz [ 113.232281][ T5952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.313694][ T9] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 113.397024][ T5952] usb 3-1: config 9 has an invalid interface number: 229 but max is 0 [ 113.410984][ T5952] usb 3-1: config 9 has no interface number 0 [ 113.427679][ T5952] usb 3-1: config 9 interface 229 has no altsetting 0 [ 113.432038][ T5886] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 113.446836][ T5952] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=1c.41 [ 113.470485][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.501723][ T5952] usb 3-1: Product: syz [ 113.520175][ T5952] usb 3-1: Manufacturer: syz [ 113.539396][ T5952] usb 3-1: SerialNumber: syz [ 113.549008][ T5886] usb 4-1: USB disconnect, device number 3 [ 113.634660][ T30] audit: type=1400 audit(1751986636.689:303): avc: denied { read write } for pid=6376 comm="syz.1.114" name="lp0" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 113.658156][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.677535][ T30] audit: type=1400 audit(1751986636.689:304): avc: denied { open } for pid=6376 comm="syz.1.114" path="/dev/usb/lp0" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 113.708721][ T30] audit: type=1400 audit(1751986636.689:305): avc: denied { ioctl } for pid=6376 comm="syz.1.114" path="/dev/usb/lp0" dev="devtmpfs" ino=2838 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 113.735634][ T30] audit: type=1400 audit(1751986636.769:306): avc: denied { connect } for pid=6406 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.755464][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.767988][ T6383] usblp0:failed reading printer status (-71) [ 113.768630][ T9] usb 2-1: USB disconnect, device number 7 [ 113.819974][ T30] audit: type=1400 audit(1751986636.879:307): avc: denied { mounton } for pid=6393 comm="syz.2.119" path="/proc/76/task" dev="proc" ino=8838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.842262][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.888319][ T30] audit: type=1400 audit(1751986636.949:308): avc: denied { connect } for pid=6393 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.985097][ T5952] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 114.029708][ T5952] usb 3-1: USB disconnect, device number 3 [ 114.572991][ T30] audit: type=1400 audit(1751986637.629:309): avc: denied { execute } for pid=6422 comm="syz.3.126" path="/28/blkio.bfq.time" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.784991][ T6435] FAULT_INJECTION: forcing a failure. [ 114.784991][ T6435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.814622][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.0.129 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 114.814648][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.814658][ T6435] Call Trace: [ 114.814664][ T6435] [ 114.814671][ T6435] dump_stack_lvl+0x16c/0x1f0 [ 114.814701][ T6435] should_fail_ex+0x512/0x640 [ 114.814730][ T6435] _copy_from_user+0x2e/0xd0 [ 114.814757][ T6435] sctp_getsockopt+0x4e5/0x6b90 [ 114.814778][ T6435] ? avc_has_perm_noaudit+0x117/0x3b0 [ 114.814803][ T6435] ? __pfx_sctp_getsockopt+0x10/0x10 [ 114.814826][ T6435] ? avc_has_perm+0x11a/0x1c0 [ 114.814843][ T6435] ? __pfx_avc_has_perm+0x10/0x10 [ 114.814863][ T6435] ? __lock_acquire+0xb8a/0x1c90 [ 114.814884][ T6435] ? sock_has_perm+0x259/0x2f0 [ 114.814913][ T6435] ? find_held_lock+0x2b/0x80 [ 114.814936][ T6435] ? __might_fault+0xe3/0x190 [ 114.814958][ T6435] ? __might_fault+0xe3/0x190 [ 114.814980][ T6435] ? __might_fault+0x13b/0x190 [ 114.815009][ T6435] ? sock_common_getsockopt+0x21/0xb0 [ 114.815036][ T6435] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 114.815064][ T6435] do_sock_getsockopt+0x3fc/0x800 [ 114.815096][ T6435] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 114.815122][ T6435] ? __fget_files+0x204/0x3c0 [ 114.815162][ T6435] __sys_getsockopt+0x12f/0x260 [ 114.815190][ T6435] __x64_sys_getsockopt+0xbd/0x160 [ 114.815210][ T6435] ? do_syscall_64+0x91/0x4c0 [ 114.815235][ T6435] ? lockdep_hardirqs_on+0x7c/0x110 [ 114.815257][ T6435] do_syscall_64+0xcd/0x4c0 [ 114.815283][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.815302][ T6435] RIP: 0033:0x7fe1bc58e929 [ 114.815318][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.815335][ T6435] RSP: 002b:00007fe1bd3e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 114.815354][ T6435] RAX: ffffffffffffffda RBX: 00007fe1bc7b5fa0 RCX: 00007fe1bc58e929 [ 114.815366][ T6435] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003 [ 114.815378][ T6435] RBP: 00007fe1bd3e6090 R08: 0000200000000180 R09: 0000000000000000 [ 114.815390][ T6435] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 114.815401][ T6435] R13: 0000000000000000 R14: 00007fe1bc7b5fa0 R15: 00007fff47b50b68 [ 114.815427][ T6435] [ 115.045349][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.099268][ T6382] usblp0: removed [ 115.190445][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.200942][ T6440] fuse: root generation should be zero [ 115.229150][ T6447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 115.351499][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.381093][ T5886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.390214][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.442246][ T5886] usb 3-1: Product: syz [ 115.446453][ T5886] usb 3-1: Manufacturer: syz [ 115.461516][ T5886] usb 3-1: SerialNumber: syz [ 115.466468][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 115.516886][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 115.518009][ T6456] netlink: 'syz.0.136': attribute type 3 has an invalid length. [ 115.528589][ T6457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.138'. [ 115.556033][ T6454] NILFS (nullb0): couldn't find nilfs on the device [ 115.621838][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 115.685090][ T6464] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 115.894015][ T5886] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 115.900751][ T5886] cdc_ncm 3-1:1.0: bind() failure [ 115.921763][ T5886] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 115.964372][ T5886] cdc_ncm 3-1:1.1: bind() failure [ 116.040744][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.204359][ T9] usb 4-1: device descriptor read/64, error -71 [ 116.255524][ T6431] pimreg: entered allmulticast mode [ 116.261322][ T6431] pimreg: left allmulticast mode [ 118.335884][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 118.335923][ T30] audit: type=1400 audit(2000000002.060:314): avc: denied { read } for pid=6477 comm="syz.1.143" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.336280][ T30] audit: type=1400 audit(2000000002.060:315): avc: denied { open } for pid=6477 comm="syz.1.143" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.356455][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.320374][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 223.320410][ C0] rcu: 1-...!: (1 GPs behind) idle=bcf4/1/0x4000000000000000 softirq=19217/19218 fqs=2 [ 223.320841][ C0] rcu: (detected by 0, t=10502 jiffies, g=11857, q=525 ncpus=2) [ 223.320865][ C0] Sending NMI from CPU 0 to CPUs 1: [ 223.320899][ C1] NMI backtrace for cpu 1 [ 223.320917][ C1] CPU: 1 UID: 0 PID: 6431 Comm: syz.2.128 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 223.320937][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.320950][ C1] RIP: 0010:__lock_acquire+0x476/0x1c90 [ 223.320972][ C1] Code: 28 85 c0 74 10 44 8b 1d 98 47 11 0f 45 85 db 0f 84 db 05 00 00 90 31 c9 e9 8a fe ff ff 48 63 44 24 10 48 0f a3 05 5a e7 3e 14 <0f> 82 7b ff ff ff 90 e8 ee c1 40 03 85 c0 74 0e 8b 05 64 47 11 0f [ 223.320988][ C1] RSP: 0018:ffffc90000a08bc8 EFLAGS: 00000047 [ 223.321002][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000008 [ 223.321012][ C1] RDX: 0000000000000000 RSI: ffff888036e2afd0 RDI: ffff888036e2a440 [ 223.321023][ C1] RBP: ffff888036e2a440 R08: 0000000000000001 R09: 0000000000000001 [ 223.321033][ C1] R10: 00000000000000a0 R11: 0000000000000001 R12: ffff888036e2af30 [ 223.321043][ C1] R13: ffff888036e2afd0 R14: 0000000000000004 R15: 0000000000000002 [ 223.321054][ C1] FS: 00007f5ddbe7e6c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 223.321070][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.321081][ C1] CR2: 00007f5ddbe3bf98 CR3: 00000000125da000 CR4: 00000000003526f0 [ 223.321091][ C1] Call Trace: [ 223.321097][ C1] [ 223.321104][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 223.321122][ C1] lock_acquire+0x179/0x350 [ 223.321136][ C1] ? debug_object_activate+0x14c/0x4c0 [ 223.321154][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 223.321172][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 223.321192][ C1] ? debug_object_activate+0x14c/0x4c0 [ 223.321207][ C1] debug_object_activate+0x14c/0x4c0 [ 223.321224][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 223.321241][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 223.321260][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.321279][ C1] enqueue_hrtimer+0x23/0x3b0 [ 223.321298][ C1] __hrtimer_run_queues+0x8ff/0xad0 [ 223.321320][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 223.321339][ C1] ? read_tsc+0x9/0x20 [ 223.321361][ C1] hrtimer_interrupt+0x397/0x8e0 [ 223.321386][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 223.321413][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 223.321435][ C1] [ 223.321440][ C1] [ 223.321446][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.321464][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 223.321488][ C1] Code: 00 e8 d2 62 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 80 8d 20 00 48 85 db 0f 85 55 01 00 00 e8 02 92 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 b7 6d 87 [ 223.321503][ C1] RSP: 0018:ffffc9000fecf268 EFLAGS: 00000293 [ 223.321515][ C1] RAX: ffffffff8f2ebd98 RBX: 0000000000000000 RCX: ffffffff819b54a0 [ 223.321526][ C1] RDX: ffff888036e2a440 RSI: ffffffff819b54ae RDI: 0000000000000007 [ 223.321537][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 223.321547][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8f2ebd98 [ 223.321557][ C1] R13: ffffffff8f2ebd40 R14: ffffc9000fecf2f8 R15: dffffc0000000000 [ 223.321571][ C1] ? console_flush_all+0x990/0xc60 [ 223.321590][ C1] ? console_flush_all+0x99e/0xc60 [ 223.321611][ C1] ? console_flush_all+0x99e/0xc60 [ 223.321633][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 223.321656][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 223.321680][ C1] console_unlock+0xd8/0x210 [ 223.321698][ C1] ? __pfx_console_unlock+0x10/0x10 [ 223.321719][ C1] ? _printk+0xc7/0x100 [ 223.321738][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 223.321756][ C1] vprintk_emit+0x418/0x6d0 [ 223.321777][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 223.321797][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 223.321814][ C1] _printk+0xc7/0x100 [ 223.321828][ C1] ? __pfx__printk+0x10/0x10 [ 223.321842][ C1] ? nlmsg_notify+0x9e/0x220 [ 223.321858][ C1] ? ip_mroute_setsockopt+0x98c/0x1040 [ 223.321874][ C1] ? do_ip_setsockopt+0x2ae/0x3240 [ 223.321894][ C1] ? ip_setsockopt+0x59/0xf0 [ 223.321911][ C1] ? raw_setsockopt+0xb7/0x2a0 [ 223.321931][ C1] ? do_sock_setsockopt+0x221/0x470 [ 223.321954][ C1] ? __sys_setsockopt+0x1a0/0x230 [ 223.321973][ C1] ? __x64_sys_setsockopt+0xbd/0x160 [ 223.321992][ C1] ? do_syscall_64+0xcd/0x4c0 [ 223.322017][ C1] __netdev_printk+0x379/0x500 [ 223.322042][ C1] netdev_info+0xe4/0x120 [ 223.322064][ C1] ? __pfx_netdev_info+0x10/0x10 [ 223.322087][ C1] ? nsim_fib_event_nb+0x175/0x10d0 [ 223.322112][ C1] ? lock_acquire+0x179/0x350 [ 223.322126][ C1] ? find_held_lock+0x2b/0x80 [ 223.322145][ C1] ? netif_set_allmulti+0x17e/0x3d0 [ 223.322167][ C1] netif_set_allmulti+0x1a9/0x3d0 [ 223.322190][ C1] dev_set_allmulti+0xb7/0x260 [ 223.322214][ C1] vif_delete+0x3b5/0x960 [ 223.322236][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 223.322261][ C1] ? __pfx_vif_delete+0x10/0x10 [ 223.322283][ C1] ? __asan_memset+0x23/0x50 [ 223.322306][ C1] mroute_clean_tables+0x188/0xb50 [ 223.322324][ C1] ? __pfx_mroute_clean_tables+0x10/0x10 [ 223.322340][ C1] ? nlmsg_notify+0xac/0x220 [ 223.322354][ C1] ? nlmsg_notify+0x11e/0x220 [ 223.322372][ C1] mrtsock_destruct+0x209/0x290 [ 223.322388][ C1] ? __pfx_mrtsock_destruct+0x10/0x10 [ 223.322403][ C1] ip_ra_control+0x43c/0x590 [ 223.322423][ C1] ip_mroute_setsockopt+0x98c/0x1040 [ 223.322443][ C1] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 223.322468][ C1] do_ip_setsockopt+0x2ae/0x3240 [ 223.322488][ C1] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 223.322506][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 223.322529][ C1] ? sock_has_perm+0x259/0x2f0 [ 223.322547][ C1] ? __pfx_sock_has_perm+0x10/0x10 [ 223.322564][ C1] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 223.322589][ C1] ip_setsockopt+0x59/0xf0 [ 223.322609][ C1] raw_setsockopt+0xb7/0x2a0 [ 223.322630][ C1] ? __pfx_raw_setsockopt+0x10/0x10 [ 223.322650][ C1] ? selinux_socket_setsockopt+0x6a/0x80 [ 223.322669][ C1] ? sock_common_setsockopt+0x2e/0xf0 [ 223.322693][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 223.322717][ C1] do_sock_setsockopt+0x221/0x470 [ 223.322745][ C1] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 223.322777][ C1] __sys_setsockopt+0x1a0/0x230 [ 223.322798][ C1] __x64_sys_setsockopt+0xbd/0x160 [ 223.322818][ C1] ? do_syscall_64+0x91/0x4c0 [ 223.322839][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.322859][ C1] do_syscall_64+0xcd/0x4c0 [ 223.322882][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.322898][ C1] RIP: 0033:0x7f5ddaf8e929 [ 223.322912][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.322927][ C1] RSP: 002b:00007f5ddbe7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.322942][ C1] RAX: ffffffffffffffda RBX: 00007f5ddb1b5fa0 RCX: 00007f5ddaf8e929 [ 223.322953][ C1] RDX: 00000000000000c9 RSI: 0000000000000000 RDI: 0000000000000005 [ 223.322962][ C1] RBP: 00007f5ddb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 223.322972][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.322982][ C1] R13: 0000000000000000 R14: 00007f5ddb1b5fa0 R15: 00007fff2189a7a8 [ 223.322999][ C1] [ 223.323888][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g11857 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 223.323910][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 223.323919][ C0] rcu: RCU grace-period kthread stack dump: [ 223.323925][ C0] task:rcu_preempt state:R running task stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 223.323995][ C0] Call Trace: [ 223.324002][ C0] [ 223.324013][ C0] __schedule+0x116a/0x5de0 [ 223.324047][ C0] ? __lock_acquire+0x622/0x1c90 [ 223.324071][ C0] ? __pfx___schedule+0x10/0x10 [ 223.324101][ C0] ? find_held_lock+0x2b/0x80 [ 223.324125][ C0] ? schedule+0x2d7/0x3a0 [ 223.324152][ C0] schedule+0xe7/0x3a0 [ 223.324176][ C0] schedule_timeout+0x123/0x290 [ 223.324197][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 223.324220][ C0] ? __pfx_process_timeout+0x10/0x10 [ 223.324250][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 223.324274][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 223.324307][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 223.324330][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 223.324350][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.324375][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 223.324392][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 223.324417][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.324444][ C0] rcu_gp_kthread+0x270/0x380 [ 223.324464][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 223.324487][ C0] ? rcu_is_watching+0x12/0xc0 [ 223.324512][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.324538][ C0] ? __kthread_parkme+0x19e/0x250 [ 223.324567][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 223.324586][ C0] kthread+0x3c5/0x780 [ 223.324606][ C0] ? __pfx_kthread+0x10/0x10 [ 223.324628][ C0] ? rcu_is_watching+0x12/0xc0 [ 223.324651][ C0] ? __pfx_kthread+0x10/0x10 [ 223.324672][ C0] ret_from_fork+0x5d4/0x6f0 [ 223.324698][ C0] ? __pfx_kthread+0x10/0x10 [ 223.324718][ C0] ret_from_fork_asm+0x1a/0x30 [ 223.324754][ C0] [ 223.324762][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 223.324773][ C0] CPU: 0 UID: 0 PID: 6481 Comm: syz.4.144 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 223.324823][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.324847][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 223.324875][ C0] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 223.324892][ C0] RSP: 0018:ffffc900101575b0 EFLAGS: 00000202 [ 223.324907][ C0] RAX: 0000000000000001 RBX: ffff8880b853fe20 RCX: ffffc9000cfc2000 [ 223.324920][ C0] RDX: 0000000000080000 RSI: 0000000000000001 RDI: 0000000000000000 [ 223.324932][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 223.324943][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 223.324955][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 223.324968][ C0] FS: 00007f3673d7f6c0(0000) GS:ffff888124718000(0000) knlGS:0000000000000000 [ 223.324987][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.325000][ C0] CR2: 00002000000bd038 CR3: 000000001263c000 CR4: 00000000003526f0 [ 223.325013][ C0] Call Trace: [ 223.325019][ C0] [ 223.325025][ C0] smp_call_function_many_cond+0xd9d/0x1510 [ 223.325050][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 223.325084][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 223.325114][ C0] ? lock_acquire+0x179/0x350 [ 223.325136][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 223.325158][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 223.325181][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 223.325206][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 223.325230][ C0] ? page_table_check_clear+0x362/0x740 [ 223.325260][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 223.325287][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 223.325313][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 223.325337][ C0] ptep_clear_flush+0x136/0x180 [ 223.325367][ C0] do_wp_page+0x1683/0x4f20 [ 223.325394][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 223.325415][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.325445][ C0] __handle_mm_fault+0x2223/0x5490 [ 223.325480][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 223.325500][ C0] ? __pfx_mt_find+0x10/0x10 [ 223.325544][ C0] ? find_vma+0xbf/0x140 [ 223.325571][ C0] ? __pfx_find_vma+0x10/0x10 [ 223.325601][ C0] handle_mm_fault+0x589/0xd10 [ 223.325624][ C0] ? __pkru_allows_pkey+0x41/0xb0 [ 223.325653][ C0] do_user_addr_fault+0x7a6/0x1370 [ 223.325683][ C0] ? rcu_is_watching+0x12/0xc0 [ 223.325710][ C0] exc_page_fault+0x5c/0xb0 [ 223.325734][ C0] asm_exc_page_fault+0x26/0x30 [ 223.325752][ C0] RIP: 0010:__put_user_4+0xd/0x20 [ 223.325776][ C0] Code: 66 89 01 31 c9 0f 01 ca e9 10 5b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 223.325793][ C0] RSP: 0018:ffffc90010157cf0 EFLAGS: 00050202 [ 223.325808][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000bd038 [ 223.325821][ C0] RDX: 0000000000080000 RSI: ffffffff8956e009 RDI: ffffffff8c158660 [ 223.325833][ C0] RBP: 0000000000000000 R08: 3b8f596bbd88045d R09: 0000000000000000 [ 223.325846][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000040000 [ 223.325857][ C0] R13: 00002000000bd000 R14: 0000000000000317 R15: 0000000000000318 [ 223.325879][ C0] ? __sys_sendmmsg+0x229/0x420 [ 223.325907][ C0] __sys_sendmmsg+0x234/0x420 [ 223.325936][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.325970][ C0] ? __pfx_do_futex+0x10/0x10 [ 223.325996][ C0] ? fput+0x70/0xf0 [ 223.326028][ C0] ? xfd_validate_state+0x61/0x180 [ 223.326061][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 223.326085][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.326110][ C0] do_syscall_64+0xcd/0x4c0 [ 223.326137][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.326156][ C0] RIP: 0033:0x7f3672f8e929 [ 223.326172][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.326188][ C0] RSP: 002b:00007f3673d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.326207][ C0] RAX: ffffffffffffffda RBX: 00007f36731b5fa0 RCX: 00007f3672f8e929 [ 223.326219][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 223.326232][ C0] RBP: 00007f3673010b39 R08: 0000000000000000 R09: 0000000000000000 [ 223.326243][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.326255][ C0] R13: 0000000000000000 R14: 00007f36731b5fa0 R15: 00007ffe6e943598 [ 223.326282][ C0] [ 376.009718][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.4.144:6481] [ 376.009744][ C0] Modules linked in: [ 376.009755][ C0] irq event stamp: 1177310 [ 376.009762][ C0] hardirqs last enabled at (1177309): [] irqentry_exit+0x3b/0x90 [ 376.009796][ C0] hardirqs last disabled at (1177310): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 376.009822][ C0] softirqs last enabled at (1177308): [] handle_softirqs+0x5be/0x8e0 [ 376.009849][ C0] softirqs last disabled at (1177287): [] __irq_exit_rcu+0x109/0x170 [ 376.009896][ C0] CPU: 0 UID: 0 PID: 6481 Comm: syz.4.144 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 376.009918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.009932][ C0] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 376.009966][ C0] Code: e8 6a 19 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 07 1e 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 376.009984][ C0] RSP: 0018:ffffc900101575b8 EFLAGS: 00000246 [ 376.009998][ C0] RAX: 0000000000080000 RBX: ffff8880b853fe20 RCX: ffffc9000cfc2000 [ 376.010011][ C0] RDX: 0000000000080000 RSI: ffffffff81afc8a9 RDI: 0000000000000005 [ 376.010023][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 376.010033][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 376.010045][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 376.010057][ C0] FS: 00007f3673d7f6c0(0000) GS:ffff888124718000(0000) knlGS:0000000000000000 [ 376.010074][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.010086][ C0] CR2: 00002000000bd038 CR3: 000000001263c000 CR4: 00000000003526f0 [ 376.010098][ C0] Call Trace: [ 376.010104][ C0] [ 376.010116][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 376.010150][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 376.010180][ C0] ? lock_acquire+0x179/0x350 [ 376.010202][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 376.010223][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 376.010245][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 376.010270][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 376.010293][ C0] ? page_table_check_clear+0x362/0x740 [ 376.010327][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 376.010353][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 376.010379][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 376.010402][ C0] ptep_clear_flush+0x136/0x180 [ 376.010431][ C0] do_wp_page+0x1683/0x4f20 [ 376.010457][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 376.010478][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.010508][ C0] __handle_mm_fault+0x2223/0x5490 [ 376.010537][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.010557][ C0] ? __pfx_mt_find+0x10/0x10 [ 376.010600][ C0] ? find_vma+0xbf/0x140 [ 376.010626][ C0] ? __pfx_find_vma+0x10/0x10 [ 376.010655][ C0] handle_mm_fault+0x589/0xd10 [ 376.010677][ C0] ? __pkru_allows_pkey+0x41/0xb0 [ 376.010706][ C0] do_user_addr_fault+0x7a6/0x1370 [ 376.010736][ C0] ? rcu_is_watching+0x12/0xc0 [ 376.010763][ C0] exc_page_fault+0x5c/0xb0 [ 376.010787][ C0] asm_exc_page_fault+0x26/0x30 [ 376.010805][ C0] RIP: 0010:__put_user_4+0xd/0x20 [ 376.010829][ C0] Code: 66 89 01 31 c9 0f 01 ca e9 10 5b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 376.010846][ C0] RSP: 0018:ffffc90010157cf0 EFLAGS: 00050202 [ 376.010860][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000bd038 [ 376.010871][ C0] RDX: 0000000000080000 RSI: ffffffff8956e009 RDI: ffffffff8c158660 [ 376.010883][ C0] RBP: 0000000000000000 R08: 3b8f596bbd88045d R09: 0000000000000000 [ 376.010894][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000040000 [ 376.010905][ C0] R13: 00002000000bd000 R14: 0000000000000317 R15: 0000000000000318 [ 376.010926][ C0] ? __sys_sendmmsg+0x229/0x420 [ 376.010954][ C0] __sys_sendmmsg+0x234/0x420 [ 376.010982][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 376.011015][ C0] ? __pfx_do_futex+0x10/0x10 [ 376.011041][ C0] ? fput+0x70/0xf0 [ 376.011071][ C0] ? xfd_validate_state+0x61/0x180 [ 376.011103][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 376.011126][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.011150][ C0] do_syscall_64+0xcd/0x4c0 [ 376.011177][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.011195][ C0] RIP: 0033:0x7f3672f8e929 [ 376.011211][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.011227][ C0] RSP: 002b:00007f3673d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 376.011244][ C0] RAX: ffffffffffffffda RBX: 00007f36731b5fa0 RCX: 00007f3672f8e929 [ 376.011256][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 376.011267][ C0] RBP: 00007f3673010b39 R08: 0000000000000000 R09: 0000000000000000 [ 376.011278][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.011289][ C0] R13: 0000000000000000 R14: 00007f36731b5fa0 R15: 00007ffe6e943598 [ 376.011320][ C0] [ 376.011331][ C0] Sending NMI from CPU 0 to CPUs 1: [ 376.011362][ C1] NMI backtrace for cpu 1 [ 376.011372][ C1] CPU: 1 UID: 0 PID: 6431 Comm: syz.2.128 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 376.011391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.011400][ C1] RIP: 0010:write_comp_data+0x1f/0x90 [ 376.011418][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 d7 9f 14 12 65 8b 05 e8 9f 14 12 a9 00 01 ff 00 74 1d c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 3c [ 376.011432][ C1] RSP: 0018:ffffc90000a08e38 EFLAGS: 00000006 [ 376.011445][ C1] RAX: 0000000080010001 RBX: ffff8880b8527d80 RCX: ffffffff81a8ebbd [ 376.011456][ C1] RDX: ffff888036e2a440 RSI: 0000000000000007 RDI: 0000000000000005 [ 376.011465][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000007 [ 376.011475][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880b8527c80 [ 376.011485][ C1] R13: 0000000000000001 R14: ffff88807a427340 R15: ffffffff899aa520 [ 376.011496][ C1] FS: 00007f5ddbe7e6c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 376.011511][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.011522][ C1] CR2: 00007f5ddbe3bf98 CR3: 00000000125da000 CR4: 00000000003526f0 [ 376.011533][ C1] Call Trace: [ 376.011538][ C1] [ 376.011543][ C1] __hrtimer_run_queues+0x54d/0xad0 [ 376.011567][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 376.011585][ C1] ? read_tsc+0x9/0x20 [ 376.011607][ C1] hrtimer_interrupt+0x397/0x8e0 [ 376.011632][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 376.011660][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 376.011680][ C1] [ 376.011685][ C1] [ 376.011691][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.011708][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 376.011729][ C1] Code: 00 e8 d2 62 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 80 8d 20 00 48 85 db 0f 85 55 01 00 00 e8 02 92 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 b7 6d 87 [ 376.011743][ C1] RSP: 0018:ffffc9000fecf268 EFLAGS: 00000293 [ 376.011755][ C1] RAX: ffffffff8f2ebd98 RBX: 0000000000000000 RCX: ffffffff819b54a0 [ 376.011766][ C1] RDX: ffff888036e2a440 RSI: ffffffff819b54ae RDI: 0000000000000007 [ 376.011777][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 376.011786][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8f2ebd98 [ 376.011796][ C1] R13: ffffffff8f2ebd40 R14: ffffc9000fecf2f8 R15: dffffc0000000000 [ 376.011811][ C1] ? console_flush_all+0x990/0xc60 [ 376.011830][ C1] ? console_flush_all+0x99e/0xc60 [ 376.011850][ C1] ? console_flush_all+0x99e/0xc60 [ 376.011873][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 376.011896][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 376.011920][ C1] console_unlock+0xd8/0x210 [ 376.011938][ C1] ? __pfx_console_unlock+0x10/0x10 [ 376.011959][ C1] ? _printk+0xc7/0x100 [ 376.011973][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 376.011991][ C1] vprintk_emit+0x418/0x6d0 [ 376.012011][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 376.012031][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 376.012048][ C1] _printk+0xc7/0x100 [ 376.012066][ C1] ? __pfx__printk+0x10/0x10 [ 376.012080][ C1] ? nlmsg_notify+0x9e/0x220 [ 376.012096][ C1] ? ip_mroute_setsockopt+0x98c/0x1040 [ 376.012112][ C1] ? do_ip_setsockopt+0x2ae/0x3240 [ 376.012130][ C1] ? ip_setsockopt+0x59/0xf0 [ 376.012148][ C1] ? raw_setsockopt+0xb7/0x2a0 [ 376.012167][ C1] ? do_sock_setsockopt+0x221/0x470 [ 376.012189][ C1] ? __sys_setsockopt+0x1a0/0x230 [ 376.012208][ C1] ? __x64_sys_setsockopt+0xbd/0x160 [ 376.012226][ C1] ? do_syscall_64+0xcd/0x4c0 [ 376.012253][ C1] __netdev_printk+0x379/0x500 [ 376.012277][ C1] netdev_info+0xe4/0x120 [ 376.012299][ C1] ? __pfx_netdev_info+0x10/0x10 [ 376.012322][ C1] ? nsim_fib_event_nb+0x175/0x10d0 [ 376.012347][ C1] ? lock_acquire+0x179/0x350 [ 376.012362][ C1] ? find_held_lock+0x2b/0x80 [ 376.012381][ C1] ? netif_set_allmulti+0x17e/0x3d0 [ 376.012403][ C1] netif_set_allmulti+0x1a9/0x3d0 [ 376.012426][ C1] dev_set_allmulti+0xb7/0x260 [ 376.012450][ C1] vif_delete+0x3b5/0x960 [ 376.012473][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 376.012496][ C1] ? __pfx_vif_delete+0x10/0x10 [ 376.012519][ C1] ? __asan_memset+0x23/0x50 [ 376.012541][ C1] mroute_clean_tables+0x188/0xb50 [ 376.012559][ C1] ? __pfx_mroute_clean_tables+0x10/0x10 [ 376.012576][ C1] ? nlmsg_notify+0xac/0x220 [ 376.012589][ C1] ? nlmsg_notify+0x11e/0x220 [ 376.012608][ C1] mrtsock_destruct+0x209/0x290 [ 376.012624][ C1] ? __pfx_mrtsock_destruct+0x10/0x10 [ 376.012639][ C1] ip_ra_control+0x43c/0x590 [ 376.012660][ C1] ip_mroute_setsockopt+0x98c/0x1040 [ 376.012679][ C1] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 376.012705][ C1] do_ip_setsockopt+0x2ae/0x3240 [ 376.012726][ C1] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 376.012744][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 376.012766][ C1] ? sock_has_perm+0x259/0x2f0 [ 376.012785][ C1] ? __pfx_sock_has_perm+0x10/0x10 [ 376.012803][ C1] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 376.012828][ C1] ip_setsockopt+0x59/0xf0 [ 376.012848][ C1] raw_setsockopt+0xb7/0x2a0 [ 376.012868][ C1] ? __pfx_raw_setsockopt+0x10/0x10 [ 376.012889][ C1] ? selinux_socket_setsockopt+0x6a/0x80 [ 376.012907][ C1] ? sock_common_setsockopt+0x2e/0xf0 [ 376.012931][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 376.012955][ C1] do_sock_setsockopt+0x221/0x470 [ 376.012979][ C1] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 376.013011][ C1] __sys_setsockopt+0x1a0/0x230 [ 376.013033][ C1] __x64_sys_setsockopt+0xbd/0x160 [ 376.013052][ C1] ? do_syscall_64+0x91/0x4c0 [ 376.013077][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.013097][ C1] do_syscall_64+0xcd/0x4c0 [ 376.013119][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.013135][ C1] RIP: 0033:0x7f5ddaf8e929 [ 376.013147][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.013162][ C1] RSP: 002b:00007f5ddbe7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.013176][ C1] RAX: ffffffffffffffda RBX: 00007f5ddb1b5fa0 RCX: 00007f5ddaf8e929 [ 376.013187][ C1] RDX: 00000000000000c9 RSI: 0000000000000000 RDI: 0000000000000005 [ 376.013197][ C1] RBP: 00007f5ddb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 376.013207][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.013217][ C1] R13: 0000000000000000 R14: 00007f5ddb1b5fa0 R15: 00007fff2189a7a8 [ 376.013234][ C1] [ 376.013355][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 376.013369][ C0] CPU: 0 UID: 0 PID: 6481 Comm: syz.4.144 Tainted: G L 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 376.013396][ C0] Tainted: [L]=SOFTLOCKUP [ 376.013403][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.013413][ C0] Call Trace: [ 376.013421][ C0] [ 376.013428][ C0] dump_stack_lvl+0x3d/0x1f0 [ 376.013455][ C0] panic+0x71c/0x800 [ 376.013483][ C0] ? __pfx_panic+0x10/0x10 [ 376.013507][ C0] ? __pfx__printk+0x10/0x10 [ 376.013529][ C0] ? nmi_backtrace_stall_check+0x6e/0x540 [ 376.013560][ C0] ? irq_work_queue+0xce/0x100 [ 376.013585][ C0] ? watchdog_timer_fn+0x5f9/0x7d0 [ 376.013607][ C0] ? watchdog_timer_fn+0x5ec/0x7d0 [ 376.013633][ C0] watchdog_timer_fn+0x60a/0x7d0 [ 376.013657][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 376.013678][ C0] __hrtimer_run_queues+0x5ed/0xad0 [ 376.013709][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 376.013730][ C0] ? read_tsc+0x9/0x20 [ 376.013759][ C0] hrtimer_interrupt+0x397/0x8e0 [ 376.013795][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 376.013826][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 376.013849][ C0] [ 376.013856][ C0] [ 376.013864][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.013884][ C0] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 376.013908][ C0] Code: e8 6a 19 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 07 1e 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 376.013926][ C0] RSP: 0018:ffffc900101575b8 EFLAGS: 00000246 [ 376.013941][ C0] RAX: 0000000000080000 RBX: ffff8880b853fe20 RCX: ffffc9000cfc2000 [ 376.013954][ C0] RDX: 0000000000080000 RSI: ffffffff81afc8a9 RDI: 0000000000000005 [ 376.013966][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 376.013977][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 376.013989][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 376.014011][ C0] ? smp_call_function_many_cond+0xd79/0x1510 [ 376.014039][ C0] ? smp_call_function_many_cond+0xd79/0x1510 [ 376.014062][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 376.014095][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 376.014124][ C0] ? lock_acquire+0x179/0x350 [ 376.014146][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 376.014169][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 376.014191][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 376.014217][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 376.014240][ C0] ? page_table_check_clear+0x362/0x740 [ 376.014269][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 376.014296][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 376.014326][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 376.014350][ C0] ptep_clear_flush+0x136/0x180 [ 376.014379][ C0] do_wp_page+0x1683/0x4f20 [ 376.014405][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 376.014427][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.014456][ C0] __handle_mm_fault+0x2223/0x5490 [ 376.014486][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.014506][ C0] ? __pfx_mt_find+0x10/0x10 [ 376.014549][ C0] ? find_vma+0xbf/0x140 [ 376.014575][ C0] ? __pfx_find_vma+0x10/0x10 [ 376.014605][ C0] handle_mm_fault+0x589/0xd10 [ 376.014628][ C0] ? __pkru_allows_pkey+0x41/0xb0 [ 376.014656][ C0] do_user_addr_fault+0x7a6/0x1370 [ 376.014686][ C0] ? rcu_is_watching+0x12/0xc0 [ 376.014713][ C0] exc_page_fault+0x5c/0xb0 [ 376.014738][ C0] asm_exc_page_fault+0x26/0x30 [ 376.014755][ C0] RIP: 0010:__put_user_4+0xd/0x20 [ 376.014779][ C0] Code: 66 89 01 31 c9 0f 01 ca e9 10 5b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 376.014796][ C0] RSP: 0018:ffffc90010157cf0 EFLAGS: 00050202 [ 376.014811][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000bd038 [ 376.014822][ C0] RDX: 0000000000080000 RSI: ffffffff8956e009 RDI: ffffffff8c158660 [ 376.014835][ C0] RBP: 0000000000000000 R08: 3b8f596bbd88045d R09: 0000000000000000 [ 376.014847][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000040000 [ 376.014859][ C0] R13: 00002000000bd000 R14: 0000000000000317 R15: 0000000000000318 [ 376.014880][ C0] ? __sys_sendmmsg+0x229/0x420 [ 376.014908][ C0] __sys_sendmmsg+0x234/0x420 [ 376.014937][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 376.014970][ C0] ? __pfx_do_futex+0x10/0x10 [ 376.014996][ C0] ? fput+0x70/0xf0 [ 376.015027][ C0] ? xfd_validate_state+0x61/0x180 [ 376.015059][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 376.015083][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.015107][ C0] do_syscall_64+0xcd/0x4c0 [ 376.015135][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.015154][ C0] RIP: 0033:0x7f3672f8e929 [ 376.015168][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.015185][ C0] RSP: 002b:00007f3673d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 376.015202][ C0] RAX: ffffffffffffffda RBX: 00007f36731b5fa0 RCX: 00007f3672f8e929 [ 376.015215][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 376.015227][ C0] RBP: 00007f3673010b39 R08: 0000000000000000 R09: 0000000000000000 [ 376.015239][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.015250][ C0] R13: 0000000000000000 R14: 00007f36731b5fa0 R15: 00007ffe6e943598 [ 376.015278][ C0] [ 377.098191][ C0] Shutting down cpus with NMI [ 377.098434][ C0] Kernel Offset: disabled