last executing test programs: 12.782199136s ago: executing program 0 (id=97): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffc, @private}, 0x4}}, 0x26) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0x1}, &(0x7f0000000340), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 11.862160709s ago: executing program 0 (id=99): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) 11.339123388s ago: executing program 1 (id=101): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c040007008000", 0x22) 10.494957229s ago: executing program 4 (id=103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/262, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, 0xffffffffffffffff, 0xce9e1000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='\',!-{$#^\\/!(%&%{*/\x00', 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x32d5c}}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xffffffffffffff17) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$netlink(0x10, 0x3, 0x2) 10.436046565s ago: executing program 0 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) 9.844173734s ago: executing program 0 (id=105): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x9, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x7ff, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x80000007) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="201fef6100000000ff04"], 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x11, 0x6, "a419000e7878"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x10000000, 0x101}) 9.700227506s ago: executing program 3 (id=106): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x7, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$usbfs(0x0, 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r10, 0xffffd000) r11 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x29) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff48ad821d000009000000b704000005000000850600008200000018110000a78c4d92b82b81d40bc36e082508462459566e846a6797ab34e27561d7b251187b247f23fbc80cc484491c8fc695da924645a42b292549b2d188f49d3101e2715afc9b011a6dd450e8eedf806f204ef2aa161aea15f5a193d4b02ce8b634643eefff5c48c263ffbf348bfed09eb9d91bfe7a14475d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.994481093s ago: executing program 3 (id=108): syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) 8.554302631s ago: executing program 4 (id=109): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffc, @private}, 0x4}}, 0x26) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0x1}, &(0x7f0000000340), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 7.978586545s ago: executing program 1 (id=110): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x14b042, 0x0) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000001140)='smaps_rollup\x00') openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0), 0x80, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) process_mrelease(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc6, @remote}, 0x1c) sendmmsg$alg(r6, &(0x7f00000010c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x101}], 0x18, 0x20040000}], 0x1, 0x800) 7.799857558s ago: executing program 4 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000004000), r2) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xc4, 0x453, 0x20, 0x70bd2b, 0x25dfdbfe, "7801e069480bfe61ae9bb0db97fc074cbfd7e52950e5fe984575f8da056d9c44b6daa97251bc70910bbb33915085513608e1341a6d4ce16127ae3b3184240efda735f1b4462c4cbf60575c1b7d863cc8d653ed161d4d4381a6554041effec1cfc91f069ada0bed85ae4543ac597742e0c6389e7ccf9b58c840b9cbed23d97a627757854f88fc5bf326c208debb36a6b8f6f211ea8791fdfffc82a1b3efd121f533633b55ee9201eb87d45080d6007faaff3d", ["", "", "", "", "", "", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x48050}, 0x800) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) 5.540950719s ago: executing program 1 (id=113): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x41) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 5.532319112s ago: executing program 2 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000100811203000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) 5.459162673s ago: executing program 3 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) 5.327394306s ago: executing program 2 (id=116): syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe00000300000001ff0200000000000000000000000000018900907800000000fe"], 0x0) 5.325311559s ago: executing program 4 (id=117): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32, @ANYBLOB="b440655756bc11db3ae49c6dabd399368cb9b810a6b70e51362a08414e1473dc5d8696e69b11dfb986eade501ffce622393469f6a07902e950e35433e39365ab2fda730870a88caa4ff07e4d7b06000000000000002074a126bc78d3aa982291816733c5365077e31dc77a9fe5206cf4382af0709923ff5d04822fda3400697a15a0885d637d64a8418f4995ff4b4ec3aa1145cd443ff8255e56319ea9418f3d4451b0928ebf975ea586ca7d3325978e66000000"], 0x1c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1bc, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x20c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00'}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x148, 0x178, 0xc, 0x0, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'wlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x836, 0x0, 0x1, 0x0, 0xfffffffc}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.148113454s ago: executing program 0 (id=118): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x7, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$usbfs(0x0, 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r10, 0xffffd000) r11 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x29) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff48ad821d000009000000b704000005000000850600008200000018110000a78c4d92b82b81d40bc36e082508462459566e846a6797ab34e27561d7b251187b247f23fbc80cc484491c8fc695da924645a42b292549b2d188f49d3101e2715afc9b011a6dd450e8eedf806f204ef2aa161aea15f5a193d4b02ce8b634643eefff5c48c263ffbf348bfed09eb9d91bfe7a14475d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.147098546s ago: executing program 3 (id=119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/262, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, 0xffffffffffffffff, 0xce9e1000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x75}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='\',!-{$#^\\/!(%&%{*/\x00', 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x32d5c}}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xffffffffffffff17) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$netlink(0x10, 0x3, 0x2) 5.053275772s ago: executing program 2 (id=120): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000d4fcfb5d00850000002a0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) close(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r5, 0x8b30, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) socket$rds(0x15, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 4.057331485s ago: executing program 2 (id=121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc, 0x2}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x5192b310db075dd6, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x0) iopl(0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x1) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='bfs\x00', 0x208000, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 3.844447862s ago: executing program 1 (id=122): add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'U+', 0x2}, 0x16, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) creat(0x0, 0x4) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x5}}, {@sq={'sq', 0x3d, 0x10000}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x3}}]}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x30, r6, 0xf2473ed90fb552e1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6783aa80767d79b3dea83eef1994e49b"}]}, 0x30}}, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x80, '\x00', r8, r0, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.589297485s ago: executing program 4 (id=123): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x81, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000004a00)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0x0, 0x29, 0x2f, 0x0, @multicast1, @private=0xa010104}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 2.339668313s ago: executing program 3 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x4c000) 2.314581085s ago: executing program 0 (id=125): syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) 2.23606838s ago: executing program 2 (id=126): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r6, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x41) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.200617389s ago: executing program 1 (id=127): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0xfe, r5, 0x0, 0x0, 0x1}}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0xffffffffffffff72) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r9 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x6) r10 = dup(r9) finit_module(r10, 0x0, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x4b7, 0xe, 0x1280, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.199690233s ago: executing program 4 (id=128): set_mempolicy(0x3, &(0x7f00000000c0)=0x7b, 0x8) r0 = socket(0x11, 0x800, 0x4000000) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r8 = syz_io_uring_setup(0x5046, 0x0, &(0x7f0000000140), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000003c0)={0x9, 0x0, &(0x7f0000000340)=[r7, r1, 0xffffffffffffffff, r2, r6, r4]}, 0x6) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1.976947064s ago: executing program 3 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) 1.117197ms ago: executing program 1 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x102300) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000180)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0xa3ffccc740e8ac77, &(0x7f0000000080)}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x2}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r3, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 0s ago: executing program 2 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000004000), r2) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xc4, 0x453, 0x20, 0x70bd2b, 0x25dfdbfe, "7801e069480bfe61ae9bb0db97fc074cbfd7e52950e5fe984575f8da056d9c44b6daa97251bc70910bbb33915085513608e1341a6d4ce16127ae3b3184240efda735f1b4462c4cbf60575c1b7d863cc8d653ed161d4d4381a6554041effec1cfc91f069ada0bed85ae4543ac597742e0c6389e7ccf9b58c840b9cbed23d97a627757854f88fc5bf326c208debb36a6b8f6f211ea8791fdfffc82a1b3efd121f533633b55ee9201eb87d45080d6007faaff3d", ["", "", "", "", "", "", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x48050}, 0x800) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) kernel console output (not intermixed with test programs): pfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.438155][ T29] audit: type=1400 audit(1736914639.039:87): avc: denied { getattr } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 56.289413][ T29] audit: type=1400 audit(1736914647.959:88): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.293973][ T5804] cgroup: Unknown subsys name 'net' [ 56.312202][ T29] audit: type=1400 audit(1736914647.959:89): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.342837][ T29] audit: type=1400 audit(1736914648.019:90): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.468181][ T5804] cgroup: Unknown subsys name 'cpuset' [ 56.476281][ T5804] cgroup: Unknown subsys name 'rlimit' [ 56.623836][ T29] audit: type=1400 audit(1736914648.289:91): avc: denied { setattr } for pid=5804 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.655588][ T29] audit: type=1400 audit(1736914648.289:92): avc: denied { create } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.679333][ T29] audit: type=1400 audit(1736914648.289:93): avc: denied { write } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.702205][ T29] audit: type=1400 audit(1736914648.299:94): avc: denied { read } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.722669][ T29] audit: type=1400 audit(1736914648.299:95): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.727151][ T5806] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 56.747578][ T29] audit: type=1400 audit(1736914648.299:96): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.780211][ T29] audit: type=1400 audit(1736914648.339:97): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.673011][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.729930][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.750529][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.758084][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.766649][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.774346][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.782126][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.790071][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.794125][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.805611][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.813073][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.820396][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.829232][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.837113][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.844934][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.846767][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.852502][ T5822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.859222][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.866523][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.874858][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.891547][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.899348][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.899832][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.915565][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.920784][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.922761][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.929809][ T5822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.944155][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.953379][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.968677][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.979028][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.309041][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 60.339075][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 60.389769][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 60.468668][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 60.530566][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 60.567559][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.575469][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.582728][ T5818] bridge_slave_0: entered allmulticast mode [ 60.589669][ T5818] bridge_slave_0: entered promiscuous mode [ 60.598920][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.606275][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.613418][ T5818] bridge_slave_1: entered allmulticast mode [ 60.619978][ T5818] bridge_slave_1: entered promiscuous mode [ 60.629355][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.636578][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.643698][ T5814] bridge_slave_0: entered allmulticast mode [ 60.650896][ T5814] bridge_slave_0: entered promiscuous mode [ 60.658738][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.665917][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.673077][ T5814] bridge_slave_1: entered allmulticast mode [ 60.679885][ T5814] bridge_slave_1: entered promiscuous mode [ 60.686861][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.693972][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.701610][ T5816] bridge_slave_0: entered allmulticast mode [ 60.709356][ T5816] bridge_slave_0: entered promiscuous mode [ 60.716891][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.724038][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.731232][ T5816] bridge_slave_1: entered allmulticast mode [ 60.737752][ T5816] bridge_slave_1: entered promiscuous mode [ 60.777727][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.810487][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.821196][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.837183][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.852341][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.877906][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.903090][ T5814] team0: Port device team_slave_0 added [ 60.923268][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.930961][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.938395][ T5823] bridge_slave_0: entered allmulticast mode [ 60.944842][ T5823] bridge_slave_0: entered promiscuous mode [ 60.952492][ T5814] team0: Port device team_slave_1 added [ 60.966672][ T5816] team0: Port device team_slave_0 added [ 60.992624][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.999953][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.007579][ T5823] bridge_slave_1: entered allmulticast mode [ 61.014023][ T5823] bridge_slave_1: entered promiscuous mode [ 61.034059][ T5816] team0: Port device team_slave_1 added [ 61.047221][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.054301][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.062105][ T5819] bridge_slave_0: entered allmulticast mode [ 61.069009][ T5819] bridge_slave_0: entered promiscuous mode [ 61.076684][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.083898][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.091239][ T5819] bridge_slave_1: entered allmulticast mode [ 61.098838][ T5819] bridge_slave_1: entered promiscuous mode [ 61.107014][ T5818] team0: Port device team_slave_0 added [ 61.114637][ T5818] team0: Port device team_slave_1 added [ 61.127739][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.134678][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.160824][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.192704][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.204907][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.215602][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.222546][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.249619][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.266941][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.273884][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.300107][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.320326][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.352559][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.359718][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.386281][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.398555][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.414604][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.421590][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.447549][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.490287][ T5819] team0: Port device team_slave_0 added [ 61.497460][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.504399][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.530548][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.548009][ T5823] team0: Port device team_slave_0 added [ 61.560936][ T5823] team0: Port device team_slave_1 added [ 61.574252][ T5816] hsr_slave_0: entered promiscuous mode [ 61.580591][ T5816] hsr_slave_1: entered promiscuous mode [ 61.589387][ T5819] team0: Port device team_slave_1 added [ 61.604832][ T5814] hsr_slave_0: entered promiscuous mode [ 61.611407][ T5814] hsr_slave_1: entered promiscuous mode [ 61.618042][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.626053][ T5814] Cannot create hsr debugfs directory [ 61.653339][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.660420][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.686432][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.732521][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.740292][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.766726][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.778348][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.785596][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.811622][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.823937][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.830975][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.856884][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.877138][ T5818] hsr_slave_0: entered promiscuous mode [ 61.883684][ T5818] hsr_slave_1: entered promiscuous mode [ 61.889964][ T5824] Bluetooth: hci4: command tx timeout [ 61.896832][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.904384][ T5818] Cannot create hsr debugfs directory [ 61.965631][ T5824] Bluetooth: hci2: command tx timeout [ 61.975381][ T5824] Bluetooth: hci1: command tx timeout [ 62.018632][ T5819] hsr_slave_0: entered promiscuous mode [ 62.024852][ T5819] hsr_slave_1: entered promiscuous mode [ 62.031160][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.039007][ T5819] Cannot create hsr debugfs directory [ 62.045359][ T5824] Bluetooth: hci3: command tx timeout [ 62.045366][ T5822] Bluetooth: hci0: command tx timeout [ 62.069936][ T5823] hsr_slave_0: entered promiscuous mode [ 62.076223][ T5823] hsr_slave_1: entered promiscuous mode [ 62.082231][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.089843][ T5823] Cannot create hsr debugfs directory [ 62.258671][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.278285][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.299130][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.308696][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.345381][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.354970][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.378489][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.393143][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.429239][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.441177][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.452794][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.474143][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.526926][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.541149][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.550288][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.561418][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.641685][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.654053][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.668931][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.681076][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.691139][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.728761][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.761646][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.769056][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.779811][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.786928][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.850895][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.864555][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.887661][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.914797][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.924801][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.931923][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.947072][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.959066][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.982810][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.989973][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.998679][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.005786][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.014995][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.022138][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.046402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.053639][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.092528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.099702][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.137164][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.153785][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 63.153800][ T29] audit: type=1400 audit(1736914654.819:111): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.192804][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.204584][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.272205][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.298881][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.306038][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.346975][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.354062][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.427438][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.607513][ T5818] veth0_vlan: entered promiscuous mode [ 63.624797][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.634446][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.649221][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.667791][ T5818] veth1_vlan: entered promiscuous mode [ 63.718302][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.761313][ T5816] veth0_vlan: entered promiscuous mode [ 63.771243][ T5816] veth1_vlan: entered promiscuous mode [ 63.800155][ T5819] veth0_vlan: entered promiscuous mode [ 63.812132][ T5818] veth0_macvtap: entered promiscuous mode [ 63.832684][ T5819] veth1_vlan: entered promiscuous mode [ 63.846403][ T5818] veth1_macvtap: entered promiscuous mode [ 63.870686][ T5816] veth0_macvtap: entered promiscuous mode [ 63.889744][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.917268][ T5823] veth0_vlan: entered promiscuous mode [ 63.928735][ T5816] veth1_macvtap: entered promiscuous mode [ 63.947104][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.961952][ T5823] veth1_vlan: entered promiscuous mode [ 63.968433][ T5824] Bluetooth: hci4: command tx timeout [ 63.979705][ T5819] veth0_macvtap: entered promiscuous mode [ 63.997435][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.008548][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.020014][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.029733][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.040490][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.050610][ T5822] Bluetooth: hci2: command tx timeout [ 64.050693][ T5824] Bluetooth: hci1: command tx timeout [ 64.058140][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.070349][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.079687][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.089035][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.097963][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.124393][ T5819] veth1_macvtap: entered promiscuous mode [ 64.125714][ T5824] Bluetooth: hci0: command tx timeout [ 64.131783][ T5822] Bluetooth: hci3: command tx timeout [ 64.143970][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.160478][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.170599][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.181933][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.193036][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.204526][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.214495][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.225805][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.234529][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.280477][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.291301][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.302254][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.312991][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.323795][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.340444][ T5823] veth0_macvtap: entered promiscuous mode [ 64.363645][ T5814] veth0_vlan: entered promiscuous mode [ 64.375024][ T5823] veth1_macvtap: entered promiscuous mode [ 64.383674][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.392582][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.401720][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.410901][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.427360][ T5814] veth1_vlan: entered promiscuous mode [ 64.484419][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.500476][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.510624][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.521243][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.531316][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.542127][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.553075][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.575752][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.587050][ T3668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.594879][ T3668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.597019][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.613269][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.630246][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.640480][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.651082][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.661419][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.671998][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.683959][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.715959][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.724671][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.738057][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.747149][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.763049][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.771204][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.785835][ T5814] veth0_macvtap: entered promiscuous mode [ 64.802097][ T5814] veth1_macvtap: entered promiscuous mode [ 64.813054][ T29] audit: type=1400 audit(1736914656.479:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.NGd2NF/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.843130][ T29] audit: type=1400 audit(1736914656.479:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.870681][ T29] audit: type=1400 audit(1736914656.479:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.NGd2NF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.904350][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.917437][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.929070][ T29] audit: type=1400 audit(1736914656.479:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.951202][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.962718][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.973067][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.983821][ T29] audit: type=1400 audit(1736914656.479:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.NGd2NF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.011265][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.021178][ T29] audit: type=1400 audit(1736914656.479:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.NGd2NF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.021744][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.052951][ T29] audit: type=1400 audit(1736914656.479:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.059729][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.084262][ T29] audit: type=1400 audit(1736914656.509:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.091295][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.114638][ T29] audit: type=1400 audit(1736914656.509:120): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=7577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.134816][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.183885][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.184252][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.201169][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.212271][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.220806][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.231377][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.242759][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.253495][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.263442][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.274551][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.298875][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.319704][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.341760][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.364851][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.378476][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.388956][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.399264][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.455006][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.463666][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.492401][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.500684][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.644831][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.674679][ T5865] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.674939][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.688462][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.708020][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.766041][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.779436][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.837092][ T5903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.881594][ T5903] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.175632][ T5822] Bluetooth: hci4: command tx timeout [ 66.181077][ T5822] Bluetooth: hci1: command tx timeout [ 66.187253][ T5822] Bluetooth: hci2: command tx timeout [ 66.239272][ T5824] Bluetooth: hci0: command tx timeout [ 66.245402][ T5824] Bluetooth: hci3: command tx timeout [ 66.255831][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 66.522136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.591253][ T5865] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.609647][ T5865] usb 3-1: config 179 has no interface number 0 [ 66.616043][ T5865] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.627383][ T5865] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 66.638963][ T5865] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.650128][ T5865] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 66.661576][ T5865] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.674865][ T5865] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 66.683957][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.731254][ T5916] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 66.818129][ T5896] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.239806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.248619][ T8] IPVS: starting estimator thread 0... [ 67.442931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.515963][ T5911] IPVS: using max 35 ests per chain, 84000 per kthread [ 67.645916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.875103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.895147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.057843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.234921][ T5822] Bluetooth: hci2: command tx timeout [ 68.255518][ T5822] Bluetooth: hci1: command tx timeout [ 68.261050][ T5822] Bluetooth: hci4: command tx timeout [ 68.285633][ T5822] Bluetooth: hci3: command tx timeout [ 68.286553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.291371][ T5822] Bluetooth: hci0: command tx timeout [ 68.299498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.313406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.647962][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 68.648076][ T29] audit: type=1400 audit(1736914660.319:155): avc: denied { bind } for pid=5927 comm="syz.4.7" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.708322][ T5929] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 68.840682][ T5864] IPVS: starting estimator thread 0... [ 69.006267][ T5931] IPVS: using max 24 ests per chain, 57600 per kthread [ 69.191095][ T47] usb 3-1: USB disconnect, device number 2 [ 69.191128][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.205257][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 69.545241][ T29] audit: type=1400 audit(1736914661.149:156): avc: denied { create } for pid=5939 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.925618][ T5942] usb usb9: usbfs: process 5942 (syz.3.9) did not claim interface 0 before use [ 70.180224][ T29] audit: type=1107 audit(1736914661.209:157): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xàiH þa®›°Û—üL¿×å)Påþ˜EuøÚmœD¶Ú©rQ¼p‘ »3‘P…Q6á4mLáa'®;1„$ý§5ñ´F,L¿`W\}†<ÈÖSíMC¦U@AïþÁÏÉšÚ í…®EC¬YwBàÆ8ž|Ï›XÈ@¹Ëí#ÙzbwW…Oˆü[ó&ÂÞ»6¦¸öòꇑýÿü‚¡³ïÑ!õ3c;Uî’ë‡ÔP€Ö' [ 70.208378][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.337462][ T29] audit: type=1400 audit(1736914661.589:158): avc: denied { append } for pid=5939 comm="syz.3.9" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.360247][ T29] audit: type=1400 audit(1736914661.629:159): avc: denied { read } for pid=5939 comm="syz.3.9" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 70.382847][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.391605][ T29] audit: type=1400 audit(1736914661.629:160): avc: denied { open } for pid=5939 comm="syz.3.9" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 70.415772][ T29] audit: type=1400 audit(1736914661.639:161): avc: denied { create } for pid=5939 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.767371][ T29] audit: type=1400 audit(1736914662.459:162): avc: denied { read write } for pid=5944 comm="syz.3.11" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.023794][ T29] audit: type=1400 audit(1736914662.459:163): avc: denied { open } for pid=5944 comm="syz.3.11" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.051572][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.058481][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.061531][ T29] audit: type=1400 audit(1736914662.469:164): avc: denied { ioctl } for pid=5944 comm="syz.3.11" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.089685][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.763111][ T5969] PKCS8: Unsupported PKCS#8 version [ 72.827118][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 73.347735][ T5978] warning: `syz.4.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.807730][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 73.807745][ T29] audit: type=1400 audit(1736914665.009:186): avc: denied { audit_control } for pid=5975 comm="syz.4.18" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.834830][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.890871][ T29] audit: type=1400 audit(1736914665.019:187): avc: denied { ioctl } for pid=5975 comm="syz.4.18" path="socket:[8205]" dev="sockfs" ino=8205 ioctlcmd=0x8b18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.916080][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.773071][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.963600][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.974193][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 76.372461][ T29] audit: type=1400 audit(1736914667.789:188): avc: denied { write } for pid=5987 comm="syz.0.21" name="dev_mcast" dev="proc" ino=4026533369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.431644][ T29] audit: type=1400 audit(1736914667.979:189): avc: denied { getopt } for pid=5987 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.588690][ T29] audit: type=1400 audit(1736914668.139:190): avc: denied { create } for pid=5989 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.629644][ T117] cfg80211: failed to load regulatory.db [ 76.877921][ T29] audit: type=1400 audit(1736914668.169:191): avc: denied { connect } for pid=5989 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.949078][ T29] audit: type=1400 audit(1736914668.619:192): avc: denied { create } for pid=5996 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.091355][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.098297][ T29] audit: type=1400 audit(1736914668.649:193): avc: denied { create } for pid=5996 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.177108][ T5998] bond0: (slave rose0): Enslaving as an active interface with an up link [ 77.319057][ T6004] usb usb9: usbfs: process 6004 (syz.0.24) did not claim interface 0 before use [ 77.535355][ T29] audit: type=1400 audit(1736914668.679:194): avc: denied { ioctl } for pid=5996 comm="syz.4.23" path="socket:[8249]" dev="sockfs" ino=8249 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.755224][ T29] audit: type=1400 audit(1736914668.679:195): avc: denied { create } for pid=5996 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.981814][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 78.981839][ T29] audit: type=1400 audit(1736914670.649:204): avc: denied { write } for pid=6001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.034549][ T29] audit: type=1400 audit(1736914670.689:205): avc: denied { add_name } for pid=6001 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.098867][ T29] audit: type=1400 audit(1736914670.689:206): avc: denied { create } for pid=6001 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.143800][ T29] audit: type=1400 audit(1736914670.689:207): avc: denied { write } for pid=6001 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.349046][ T29] audit: type=1400 audit(1736914670.689:208): avc: denied { append } for pid=6001 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.373438][ T29] audit: type=1400 audit(1736914670.859:209): avc: denied { remove_name } for pid=6031 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.396943][ T29] audit: type=1400 audit(1736914670.859:210): avc: denied { unlink } for pid=6031 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.424267][ T29] audit: type=1400 audit(1736914670.929:211): avc: denied { mounton } for pid=6017 comm="syz.0.27" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 79.448437][ T29] audit: type=1400 audit(1736914670.939:212): avc: denied { mount } for pid=6017 comm="syz.0.27" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.168638][ T29] audit: type=1400 audit(1736914671.839:213): avc: denied { sys_module } for pid=6034 comm="syz.1.29" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.434135][ T9] usb 4-1: string descriptor 0 read error: -32 [ 80.440558][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.458460][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.537275][ T9] usb 4-1: can't set config #1, error -32 [ 80.538800][ T6044] overlayfs: missing 'lowerdir' [ 80.794354][ T6050] usb usb9: usbfs: process 6050 (syz.4.31) did not claim interface 0 before use [ 80.856063][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.875071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.915353][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.125089][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.131219][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.245679][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 82.548239][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.559091][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.572046][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.585230][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.765846][ T47] usb 2-1: config 0 descriptor?? [ 83.342544][ T47] hub 2-1:0.0: bad descriptor, ignoring hub [ 83.348899][ T47] hub 2-1:0.0: probe with driver hub failed with error -5 [ 83.357776][ T47] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 83.520083][ T6083] overlayfs: missing 'lowerdir' [ 83.630974][ T6089] Cannot find add_set index 0 as target [ 83.885209][ T47] usb 2-1: USB disconnect, device number 2 [ 83.885282][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.900873][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.909084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.075520][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 84.085023][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.112689][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.125501][ T2143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.134967][ T5865] usb 4-1: USB disconnect, device number 2 [ 84.178082][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.251151][ T9] usb 3-1: config 0 descriptor?? [ 84.267924][ T6103] usb usb9: usbfs: process 6103 (syz.3.37) did not claim interface 0 before use [ 84.281786][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 84.425411][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 84.564515][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 84.649837][ T9] usb 3-1: USB disconnect, device number 3 [ 84.855237][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 84.855280][ T29] audit: type=1400 audit(1736914676.449:215): avc: denied { audit_write } for pid=6104 comm="syz.3.39" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.043471][ T29] audit: type=1107 audit(1736914676.449:216): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xàiH þa®›°Û—üL¿×å)Påþ˜EuøÚmœD¶Ú©rQ¼p‘ »3‘P…Q6á4mLáa'®;1„$ý§5ñ´F,L¿`W\}†<ÈÖSíMC¦U@AïþÁÏÉšÚ í…®EC¬YwBàÆ8ž|Ï›XÈ@¹Ëí#ÙzbwW…Oˆü[ó&ÂÞ»6¦¸öòꇑýÿü‚¡³ïÑ!õ3c;Uî’ë‡ÔP€Ö' [ 85.165619][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.261499][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.270249][ T29] audit: type=1400 audit(1736914677.779:217): avc: denied { ioctl } for pid=6108 comm="syz.4.41" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.366053][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.374409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.568776][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.596137][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.604545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.089892][ T3668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.263202][ T29] audit: type=1400 audit(1736914679.929:218): avc: denied { write } for pid=6135 comm="syz.4.47" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.398033][ T9] IPVS: starting estimator thread 0... [ 88.422464][ T29] audit: type=1400 audit(1736914679.959:219): avc: denied { ioctl } for pid=6135 comm="syz.4.47" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.457650][ T6134] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 88.690730][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.699170][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.707618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.752436][ T29] audit: type=1400 audit(1736914680.119:220): avc: denied { write } for pid=6135 comm="syz.4.47" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.840068][ T29] audit: type=1400 audit(1736914680.119:221): avc: denied { ioctl } for pid=6135 comm="syz.4.47" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.865626][ T29] audit: type=1400 audit(1736914680.119:222): avc: denied { bind } for pid=6135 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.885155][ T29] audit: type=1400 audit(1736914680.119:223): avc: denied { name_bind } for pid=6135 comm="syz.4.47" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.906720][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.913081][ T29] audit: type=1400 audit(1736914680.119:224): avc: denied { node_bind } for pid=6135 comm="syz.4.47" saddr=::ffff:172.20.20.20 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 89.052928][ T6139] IPVS: using max 45 ests per chain, 108000 per kthread [ 89.212174][ T6146] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 89.428881][ T6151] usb usb9: usbfs: process 6151 (syz.4.49) did not claim interface 0 before use [ 90.331191][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 90.331204][ T29] audit: type=1107 audit(1736914681.749:233): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xàiH þa®›°Û—üL¿×å)Påþ˜EuøÚmœD¶Ú©rQ¼p‘ »3‘P…Q6á4mLáa'®;1„$ý§5ñ´F,L¿`W\}†<ÈÖSíMC¦U@AïþÁÏÉšÚ í…®EC¬YwBàÆ8ž|Ï›XÈ@¹Ëí#ÙzbwW…Oˆü[ó&ÂÞ»6¦¸öòꇑýÿü‚¡³ïÑ!õ3c;Uî’ë‡ÔP€Ö' [ 90.676423][ T29] audit: type=1400 audit(1736914682.009:234): avc: denied { name_bind } for pid=6153 comm="syz.4.50" src=20010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 90.725840][ T29] audit: type=1400 audit(1736914682.009:235): avc: denied { node_bind } for pid=6153 comm="syz.4.50" saddr=fe80::aa src=20010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 90.835537][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.853139][ T6164] usb usb9: usbfs: process 6164 (syz.0.53) did not claim interface 0 before use [ 91.095288][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 91.111745][ T5899] usb 3-1: config 0 has no interfaces? [ 91.288701][ T5899] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.313084][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.341855][ T5899] usb 3-1: Product: syz [ 91.372423][ T5899] usb 3-1: Manufacturer: syz [ 91.402554][ T5899] usb 3-1: SerialNumber: syz [ 91.808479][ T5899] usb 3-1: config 0 descriptor?? [ 91.854692][ T47] net_ratelimit: 13 callbacks suppressed [ 91.854711][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.895403][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.903546][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.913132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.913739][ T3446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.929817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.974168][ T29] audit: type=1107 audit(1736914683.429:236): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xàiH þa®›°Û—üL¿×å)Påþ˜EuøÚmœD¶Ú©rQ¼p‘ »3‘P…Q6á4mLáa'®;1„$ý§5ñ´F,L¿`W\}†<ÈÖSíMC¦U@AïþÁÏÉšÚ í…®EC¬YwBàÆ8ž|Ï›XÈ@¹Ëí#ÙzbwW…Oˆü[ó&ÂÞ»6¦¸öòꇑýÿü‚¡³ïÑ!õ3c;Uî’ë‡ÔP€Ö' [ 92.002416][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.829127][ T3436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.837657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.906397][ T5899] usb 3-1: USB disconnect, device number 4 [ 92.926262][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.934629][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.637223][ T29] audit: type=1400 audit(1736914685.309:237): avc: denied { connect } for pid=6184 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.664255][ T29] audit: type=1400 audit(1736914685.309:238): avc: denied { ioctl } for pid=6184 comm="syz.1.60" path="socket:[9538]" dev="sockfs" ino=9538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.688794][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.442221][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.550418][ T6192] Cannot find add_set index 0 as target [ 94.661972][ T6197] usb usb9: usbfs: process 6197 (syz.3.64) did not claim interface 0 before use [ 94.916964][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 94.930132][ T9] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 95.027448][ T9] usb 2-1: config 0 has no interface number 0 [ 95.033681][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=e1.1f [ 95.042846][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.062354][ T9] usb 2-1: config 0 descriptor?? [ 95.261449][ T29] audit: type=1400 audit(1736914686.929:239): avc: denied { read } for pid=6202 comm="syz.3.67" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.305927][ T9] usb 2-1: string descriptor 0 read error: -71 [ 95.315770][ T9] snd-usb-caiaq 2-1:0.150: can't set alt interface. [ 95.322438][ T9] usb 2-1: unable to init card! (ret=-5) [ 95.329538][ T9] snd-usb-caiaq 2-1:0.150: probe with driver snd-usb-caiaq failed with error -5 [ 95.381685][ T29] audit: type=1400 audit(1736914686.929:240): avc: denied { open } for pid=6202 comm="syz.3.67" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.276047][ T29] audit: type=1400 audit(1736914687.299:241): avc: denied { write } for pid=6202 comm="syz.3.67" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.410149][ T9] usb 2-1: USB disconnect, device number 3 [ 97.007354][ T35] net_ratelimit: 25 callbacks suppressed [ 97.007372][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.021430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.669913][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.678681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.748343][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.757363][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.107583][ T6230] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 98.124698][ T6230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.133636][ T6230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.238243][ T6235] netlink: 'syz.4.73': attribute type 1 has an invalid length. [ 98.742863][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.752639][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.104412][ T29] audit: type=1400 audit(1736914690.529:242): avc: denied { setopt } for pid=6227 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.691480][ T6267] usb usb9: usbfs: process 6267 (syz.0.77) did not claim interface 0 before use [ 102.035159][ C1] net_ratelimit: 145 callbacks suppressed [ 102.035178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.050873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.135205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.143489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.205135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.213413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.271938][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.280769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.295147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.305233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.505509][ T29] audit: type=1107 audit(1736914693.939:243): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xàiH þa®›°Û—üL¿×å)Påþ˜EuøÚmœD¶Ú©rQ¼p‘ »3‘P…Q6á4mLáa'®;1„$ý§5ñ´F,L¿`W\}†<ÈÖSíMC¦U@AïþÁÏÉšÚ í…®EC¬YwBàÆ8ž|Ï›XÈ@¹Ëí#ÙzbwW…Oˆü[ó&ÂÞ»6¦¸öòꇑýÿü‚¡³ïÑ!õ3c;Uî’ë‡ÔP€Ö' [ 104.999040][ T29] audit: type=1107 audit(1736914696.489:244): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xàiH þa®›°Û—üL¿×å)Påþ˜EuøÚmœD¶Ú©rQ¼p‘ »3‘P…Q6á4mLáa'®;1„$ý§5ñ´F,L¿`W\}†<ÈÖSíMC¦U@AïþÁÏÉšÚ í…®EC¬YwBàÆ8ž|Ï›XÈ@¹Ëí#ÙzbwW…Oˆü[ó&ÂÞ»6¦¸öòꇑýÿü‚¡³ïÑ!õ3c;Uî’ë‡ÔP€Ö' [ 105.027182][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.423845][ T6293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.855480][ T29] audit: type=1400 audit(1736914697.519:245): avc: denied { write } for pid=6300 comm="syz.0.88" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.880871][ T6301] sctp: [Deprecated]: syz.0.88 (pid 6301) Use of int in maxseg socket option. [ 105.880871][ T6301] Use struct sctp_assoc_value instead [ 106.016127][ T29] audit: type=1400 audit(1736914697.519:246): avc: denied { connect } for pid=6300 comm="syz.0.88" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.038215][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.045213][ T29] audit: type=1400 audit(1736914697.519:247): avc: denied { name_connect } for pid=6300 comm="syz.0.88" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 106.143406][ T29] audit: type=1400 audit(1736914697.809:248): avc: denied { bind } for pid=6300 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.185512][ T29] audit: type=1400 audit(1736914697.849:249): avc: denied { accept } for pid=6300 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 106.431592][ T6309] sctp: [Deprecated]: syz.0.91 (pid 6309) Use of int in maxseg socket option. [ 106.431592][ T6309] Use struct sctp_assoc_value instead [ 106.494887][ T29] audit: type=1400 audit(1736914698.149:250): avc: denied { create } for pid=6310 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 106.557828][ T6311] netlink: 'syz.3.90': attribute type 10 has an invalid length. [ 106.577053][ T6311] batman_adv: batadv0: Adding interface: team0 [ 106.583278][ T6311] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.609945][ T6311] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 106.628060][ T6311] Zero length message leads to an empty skb [ 106.835130][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.226612][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 107.270669][ T5865] usb 5-1: config 0 has no interfaces? [ 107.325916][ T47] net_ratelimit: 1284 callbacks suppressed [ 107.325934][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.340443][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.348788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.357302][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.357303][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.366849][ T5865] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.392852][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.465185][ T5865] usb 5-1: Product: syz [ 107.483590][ T5865] usb 5-1: Manufacturer: syz [ 107.491122][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.758300][ T5865] usb 5-1: SerialNumber: syz [ 107.791075][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.799518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.848264][ T6322] x_tables: unsorted underflow at hook 3 [ 107.854505][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 107.866757][ T6322] syz.0.95: attempt to access beyond end of device [ 107.866757][ T6322] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 107.882261][ T5865] usb 5-1: config 0 descriptor?? [ 108.296363][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.433658][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.441936][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.494278][ T5899] usb 5-1: USB disconnect, device number 2 [ 108.595417][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 108.613579][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.629045][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.684634][ T6332] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 108.862888][ T5865] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 108.869343][ T9] IPVS: starting estimator thread 0... [ 108.898689][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.982090][ T5865] usb 4-1: config 0 descriptor?? [ 109.015608][ T6333] IPVS: using max 24 ests per chain, 57600 per kthread [ 109.765560][ T5899] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.007680][ T5865] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 110.126101][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 110.133007][ T5899] usb 2-1: config 0 has no interfaces? [ 110.140536][ T5899] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.150762][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.185163][ T5899] usb 2-1: Product: syz [ 110.189459][ T5899] usb 2-1: Manufacturer: syz [ 110.198566][ T5899] usb 2-1: SerialNumber: syz [ 110.205789][ T5865] playstation 0003:054C:05C4.0001: Failed to retrieve feature with reportID 18: -71 [ 110.217546][ T5865] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -71 [ 110.244837][ T5899] usb 2-1: config 0 descriptor?? [ 110.264592][ T5865] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 110.277649][ T5865] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 110.304524][ T5865] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -71 [ 110.336893][ T5865] usb 4-1: USB disconnect, device number 3 [ 110.349882][ T6347] Cannot find add_set index 0 as target [ 110.695074][ T6353] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 110.904105][ T117] usb 2-1: USB disconnect, device number 4 [ 111.155335][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.322502][ T5865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.334258][ T5865] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 111.663665][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.728774][ T5865] usb 1-1: config 0 descriptor?? [ 112.240727][ T6363] x_tables: unsorted underflow at hook 3 [ 112.247211][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'. [ 112.258018][ T6363] syz.2.107: attempt to access beyond end of device [ 112.258018][ T6363] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 112.785442][ T47] net_ratelimit: 1361 callbacks suppressed [ 112.785463][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.805157][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.814025][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.830155][ T5865] (null): keene_cmd_main failed (-110) [ 112.841469][ T5865] video4linux radio48: keene_cmd_main failed (-32) [ 112.848493][ T5865] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 112.886595][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.905324][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.011336][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.019873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.073325][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.091785][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.100327][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.105409][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.868422][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.228520][ T29] audit: type=1107 audit(1736914706.529:251): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xàiH þa®›°Û—üL¿×å)Påþ˜EuøÚmœD¶Ú©rQ¼p‘ »3‘P…Q6á4mLáa'®;1„$ý§5ñ´F,L¿`W\}†<ÈÖSíMC¦U@AïþÁÏÉšÚ í…®EC¬YwBàÆ8ž|Ï›XÈ@¹Ëí#ÙzbwW…Oˆü[ó&ÂÞ»6¦¸öòꇑýÿü‚¡³ïÑ!õ3c;Uî’ë‡ÔP€Ö' [ 115.473050][ T9] usb 1-1: USB disconnect, device number 2 [ 116.560575][ T6409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.948340][ T6413] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 118.263025][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 118.276076][ T6420] x_tables: unsorted underflow at hook 3 [ 118.307868][ T6416] syz.2.121: attempt to access beyond end of device [ 118.307868][ T6416] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 118.346066][ T29] audit: type=1400 audit(1736914710.009:252): avc: denied { create } for pid=6424 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.468330][ T6427] net_ratelimit: 27 callbacks suppressed [ 118.468350][ T6427] openvswitch: netlink: Flow key attr not present in new flow. [ 118.608908][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.617803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.689732][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.702532][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.711142][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.286836][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.599634][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.605447][ T3436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.616044][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.755704][ T6433] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 123.925593][ C1] net_ratelimit: 8 callbacks suppressed [ 123.925615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.775431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.179090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.675948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.825019][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 225.832030][ C1] rcu: 0-...!: (1 ticks this GP) idle=97d4/1/0x4000000000000000 softirq=14691/14691 fqs=2 [ 225.842772][ C1] rcu: (detected by 1, t=10503 jiffies, g=9041, q=464 ncpus=2) [ 225.850434][ C1] Sending NMI from CPU 1 to CPUs 0: [ 225.850474][ C0] NMI backtrace for cpu 0 [ 225.850496][ C0] CPU: 0 UID: 0 PID: 6439 Comm: syz.4.128 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 225.850519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 225.850532][ C0] RIP: 0010:hlock_class+0x56/0x130 [ 225.850573][ C0] Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 3c e5 96 e8 d2 f5 86 00 48 0f a3 1d 8a 59 6f 15 <73> 13 48 69 c3 c8 00 00 00 5b 48 05 e0 40 e5 96 c3 cc cc cc cc 48 [ 225.850590][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00000047 [ 225.850606][ C0] RAX: 0000000000000001 RBX: 0000000000000070 RCX: ffffffff8175e32e [ 225.850618][ C0] RDX: fffffbfff2dca79a RSI: 0000000000000008 RDI: ffffffff96e53cc8 [ 225.850631][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dca799 [ 225.850643][ C0] R10: ffffffff96e53ccf R11: 0000000000000004 R12: 0000000000000002 [ 225.850655][ C0] R13: ffff8880237c8000 R14: 0000000000000070 R15: ffff8880237c8b80 [ 225.850668][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 225.850687][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.850700][ C0] CR2: 000000110c349118 CR3: 000000002a1c0000 CR4: 00000000003526f0 [ 225.850713][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.850724][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.850736][ C0] Call Trace: [ 225.850742][ C0] [ 225.850751][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 225.850779][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 225.850798][ C0] ? nmi_handle+0x1ac/0x5d0 [ 225.850820][ C0] ? hlock_class+0x56/0x130 [ 225.850846][ C0] ? default_do_nmi+0x6a/0x160 [ 225.850866][ C0] ? exc_nmi+0x170/0x1e0 [ 225.850884][ C0] ? end_repeat_nmi+0xf/0x53 [ 225.850914][ C0] ? hlock_class+0x4e/0x130 [ 225.850941][ C0] ? hlock_class+0x56/0x130 [ 225.850967][ C0] ? hlock_class+0x56/0x130 [ 225.850993][ C0] ? hlock_class+0x56/0x130 [ 225.851019][ C0] [ 225.851024][ C0] [ 225.851030][ C0] __lock_acquire+0x410/0x3c40 [ 225.851055][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 225.851076][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 225.851098][ C0] ? advance_sched+0x6d2/0xc60 [ 225.851120][ C0] lock_acquire.part.0+0x11b/0x380 [ 225.851141][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 225.851168][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 225.851190][ C0] ? rcu_is_watching+0x12/0xc0 [ 225.851216][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 225.851249][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 225.851275][ C0] ? lock_acquire+0x2f/0xb0 [ 225.851294][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 225.851321][ C0] ? __pfx_advance_sched+0x10/0x10 [ 225.851340][ C0] _raw_spin_lock_irq+0x36/0x50 [ 225.851361][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 225.851387][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 225.851415][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 225.851441][ C0] ? read_tsc+0x9/0x20 [ 225.851469][ C0] hrtimer_interrupt+0x392/0x8e0 [ 225.851500][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 225.851524][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 225.851549][ C0] [ 225.851554][ C0] [ 225.851561][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.851589][ C0] RIP: 0010:write_comp_data+0x11/0x90 [ 225.851612][ C0] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 0f bb 69 7e <65> 8b 05 10 bb 69 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 225.851630][ C0] RSP: 0018:ffffc9000c397558 EFLAGS: 00000246 [ 225.851644][ C0] RAX: 0000000000000001 RBX: ffffea0001d95380 RCX: ffffffff820869fa [ 225.851657][ C0] RDX: ffff8880237c8000 RSI: 0000000000000000 RDI: 0000000000000005 [ 225.851669][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 225.851680][ C0] R10: 0000000000000001 R11: 0000000000000003 R12: 0000000080000001 [ 225.851692][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffffc9000c397aa8 [ 225.851707][ C0] ? page_ext_get+0x4a/0x310 [ 225.851731][ C0] page_ext_get+0x4a/0x310 [ 225.851752][ C0] ? page_ext_get+0x34/0x310 [ 225.851773][ C0] page_table_check_clear.part.0+0x32/0x540 [ 225.851798][ C0] __page_table_check_pte_clear+0x328/0x580 [ 225.851822][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 225.851847][ C0] ? const_folio_flags+0x5b/0x100 [ 225.851866][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 225.851894][ C0] unmap_page_range+0x22f6/0x3d10 [ 225.851921][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 225.851940][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 225.851968][ C0] ? uprobe_munmap+0x20/0x5c0 [ 225.851992][ C0] unmap_single_vma+0x194/0x2b0 [ 225.852012][ C0] unmap_vmas+0x22f/0x490 [ 225.852032][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 225.852052][ C0] ? __pfx_lock_release+0x10/0x10 [ 225.852074][ C0] ? lock_acquire+0x2f/0xb0 [ 225.852093][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 225.852121][ C0] exit_mmap+0x1c6/0xb20 [ 225.852141][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 225.852163][ C0] ? __pfx_mark_lock+0x10/0x10 [ 225.852191][ C0] __mmput+0x12a/0x4c0 [ 225.852214][ C0] mmput+0x62/0x70 [ 225.852234][ C0] do_exit+0x9ba/0x2d70 [ 225.852267][ C0] ? get_signal+0x8f7/0x26c0 [ 225.852291][ C0] ? __pfx_do_exit+0x10/0x10 [ 225.852317][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 225.852342][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.852369][ C0] do_group_exit+0xd3/0x2a0 [ 225.852397][ C0] get_signal+0x24ed/0x26c0 [ 225.852424][ C0] ? __pfx_get_signal+0x10/0x10 [ 225.852448][ C0] ? __pfx_do_futex+0x10/0x10 [ 225.852468][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 225.852496][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 225.852526][ C0] ? rcu_is_watching+0x12/0xc0 [ 225.852554][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 225.852580][ C0] do_syscall_64+0xda/0x250 [ 225.852607][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.852633][ C0] RIP: 0033:0x7fb8e2385d29 [ 225.852651][ C0] Code: Unable to access opcode bytes at 0x7fb8e2385cff. [ 225.852659][ C0] RSP: 002b:00007fb8e31b80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.852676][ C0] RAX: fffffffffffffe00 RBX: 00007fb8e2576088 RCX: 00007fb8e2385d29 [ 225.852689][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8e2576088 [ 225.852701][ C0] RBP: 00007fb8e2576080 R08: 0000000000000000 R09: 0000000000000000 [ 225.852712][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8e257608c [ 225.852724][ C0] R13: 0000000000000000 R14: 00007fffeb8cb5b0 R15: 00007fffeb8cb698 [ 225.852742][ C0] [ 225.853463][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g9041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 226.510376][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 226.520347][ C1] rcu: RCU grace-period kthread stack dump: [ 226.526232][ C1] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 226.538102][ C1] Call Trace: [ 226.541402][ C1] [ 226.544341][ C1] __schedule+0xe58/0x5ad0 [ 226.548773][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 226.553997][ C1] ? __pfx___schedule+0x10/0x10 [ 226.558859][ C1] ? schedule+0x298/0x350 [ 226.563284][ C1] ? __pfx_lock_release+0x10/0x10 [ 226.568323][ C1] ? lock_acquire+0x2f/0xb0 [ 226.572835][ C1] ? schedule+0x1fd/0x350 [ 226.577198][ C1] schedule+0xe7/0x350 [ 226.581279][ C1] schedule_timeout+0x124/0x280 [ 226.586144][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 226.591528][ C1] ? __pfx_process_timeout+0x10/0x10 [ 226.596836][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 226.602652][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 226.608152][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 226.612945][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 226.618244][ C1] ? rcu_gp_init+0xc82/0x1630 [ 226.622938][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 226.628166][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 226.633986][ C1] rcu_gp_kthread+0x271/0x380 [ 226.638690][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 226.643909][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.649148][ C1] ? __kthread_parkme+0x148/0x220 [ 226.654205][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 226.659417][ C1] kthread+0x2c1/0x3a0 [ 226.663500][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.668708][ C1] ? __pfx_kthread+0x10/0x10 [ 226.673310][ C1] ret_from_fork+0x45/0x80 [ 226.677733][ C1] ? __pfx_kthread+0x10/0x10 [ 226.682339][ C1] ret_from_fork_asm+0x1a/0x30 [ 226.687131][ C1] [ 226.690150][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 226.696580][ C1] CPU: 1 UID: 0 PID: 3478 Comm: kworker/u8:8 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 226.707439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.717850][ C1] Workqueue: events_unbound toggle_allocation_gate [ 226.724388][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 226.731091][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 226.750716][ C1] RSP: 0018:ffffc9000ca27998 EFLAGS: 00000293 [ 226.756792][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e191c [ 226.764853][ C1] RDX: ffff888032e30000 RSI: ffffffff818e18f6 RDI: 0000000000000005 [ 226.772829][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 226.780799][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 226.788778][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 226.796775][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 226.805709][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.812304][ C1] CR2: 000000110c372ac0 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 226.820282][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.828255][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.836232][ C1] Call Trace: [ 226.839511][ C1] [ 226.842359][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 226.848705][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 226.853929][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 226.859417][ C1] ? timekeeping_advance+0x72e/0xa90 [ 226.864708][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 226.870359][ C1] ? __asan_memcpy+0x3c/0x60 [ 226.874969][ C1] ? rcu_is_watching+0x12/0xc0 [ 226.879756][ C1] ? update_process_times+0x178/0x2d0 [ 226.885138][ C1] ? __pfx_update_process_times+0x10/0x10 [ 226.890867][ C1] ? update_wall_time+0x1c/0x40 [ 226.895738][ C1] ? tick_nohz_handler+0x376/0x530 [ 226.900871][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 226.906345][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 226.911734][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 226.917466][ C1] ? read_tsc+0x9/0x20 [ 226.921553][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 226.926689][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 226.932853][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 226.938672][ C1] [ 226.941606][ C1] [ 226.944558][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.950756][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 226.956842][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 226.962923][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 226.969011][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 226.975111][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 226.980179][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 226.985217][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 226.990362][ C1] text_poke_bp_batch+0x22b/0x760 [ 226.995406][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 227.000963][ C1] ? __jump_label_patch+0x1db/0x400 [ 227.006200][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 227.012470][ C1] text_poke_finish+0x30/0x40 [ 227.017166][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 227.023162][ C1] jump_label_update+0x1d7/0x400 [ 227.028127][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 227.034125][ C1] static_key_enable+0x1a/0x20 [ 227.038906][ C1] toggle_allocation_gate+0xfc/0x260 [ 227.044291][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 227.050196][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 227.055413][ C1] ? process_one_work+0x921/0x1ba0 [ 227.060537][ C1] ? lock_acquire+0x2f/0xb0 [ 227.065049][ C1] ? process_one_work+0x921/0x1ba0 [ 227.070192][ C1] process_one_work+0x9c5/0x1ba0 [ 227.075149][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 227.080539][ C1] ? __pfx_process_one_work+0x10/0x10 [ 227.085926][ C1] ? rcu_is_watching+0x12/0xc0 [ 227.090719][ C1] ? assign_work+0x1a0/0x250 [ 227.095319][ C1] worker_thread+0x6c8/0xf00 [ 227.099930][ C1] ? __pfx_worker_thread+0x10/0x10 [ 227.105056][ C1] kthread+0x2c1/0x3a0 [ 227.109155][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.114370][ C1] ? __pfx_kthread+0x10/0x10 [ 227.118973][ C1] ret_from_fork+0x45/0x80 [ 227.123400][ C1] ? __pfx_kthread+0x10/0x10 [ 227.128009][ C1] ret_from_fork_asm+0x1a/0x30 [ 227.132802][ C1]