last executing test programs: 21.133659322s ago: executing program 0 (id=106): socket$nl_route(0x10, 0x3, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)={[{}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000003c0)={&(0x7f0000000380), 0xf}) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) 17.986376959s ago: executing program 0 (id=112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf251f0000000a0001007770616e340000000a0001007770616e31000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001700)='team_slave_1\x00', 0x10) connect$caif(r3, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000012000300686173683a6e65742c706f7274000000140007800800124000210000080008"], 0x60}}, 0x0) 17.746016606s ago: executing program 0 (id=114): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xc3ff, &(0x7f00000024c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x4982}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x20}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x10000, 0x48124}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 17.429621376s ago: executing program 0 (id=116): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000440)='./bus\x00', 0x80, 0x9) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getegid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) 16.892207108s ago: executing program 0 (id=119): r0 = epoll_create1(0x0) (async) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xc0, 0x8f, 0xfc, 0x8, 0x1fe1, 0x5456, 0xf74b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x48, 0x58, 0xc, [{{0x9, 0x4, 0x14, 0x80, 0x0, 0xea, 0x19, 0x89, 0x2f}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 16.508248655s ago: executing program 0 (id=121): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x24000058) 15.860942308s ago: executing program 32 (id=121): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x24000058) 13.518079637s ago: executing program 3 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 13.415649848s ago: executing program 2 (id=130): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) unshare(0x6020400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'lo\x00', {0x3}, 0x10}) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x40, 0x8, 0x7, 0x5, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x64, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x8, 0x98, 0x0, 0xd, [0x5]}, @timestamp={0x44, 0x10, 0xfb, 0x0, 0x9, [0x4, 0x4, 0x8001]}, @timestamp={0x44, 0x2c, 0x6a, 0x0, 0x6, [0x6, 0x7ff, 0xfffffffd, 0x7, 0x5, 0x0, 0xbc56, 0x2, 0x2, 0x9]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'erspan0\x00', r8, 0x8000, 0x8000, 0xfff, 0xd5, {{0x9, 0x4, 0x3, 0x24, 0x24, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0xf, 0xfd, [@dev={0xac, 0x14, 0x14, 0x24}, @multicast1, @loopback]}]}}}}}) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x8) mlockall(0x3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) 11.789894338s ago: executing program 3 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601036c00000a0000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000012000300686173683a6e65742c706f7274000000140007800800124000210000080008"], 0x60}}, 0x0) 11.393797266s ago: executing program 3 (id=134): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r5, &(0x7f0000000300)={&(0x7f00000002c0)={0x1d, r4, 0x4, {0x2, 0xf0, 0x3}, 0x1}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2404c040}, 0x4000080) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000680)=@newtaction={0xd8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc4, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x2, 0x7, 0x400}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xd8}}, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40048c4, 0x0, 0x0) fchdir(r7) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80010000120010002bbd7000fcdbdf251f3606294e224e23010000000300000088e500000500000000000000d80e000008000000b8f09f02", @ANYRES32=r4, @ANYBLOB="0001000004000000040000000400000098000100ca6f12c584bc73af54fde661fd5e04bd03bd260001588c39da017ca56f6718c0a5fb661c058645bad3fa26e5b35bb1282482786c88f4806965e4b20c91cbc1bbdadfa24616b72438bb2e334b96369ac267945eaaea89570f49f898a9c16caeb8dff715a7e21b7ef890e19e5dc7cccc37cc826f3ee446a2e21651c39c12863bf2607aff92f611658f5f90e063e6f8683fbff891e68f00010002eadb5fd305579e035b813d83ab5d2402c7ec71f8754297af13cb9993d282d5ce19000000ecb277ef1730de6316fbd9487459ada6481eeb5d3a550c2ba5fca9a14c252beea693867e0ba29cbd04cf901fac7897d79a8d2c66d87b622b7f1d5213e2587b46de636aaccdd4a20c63cf73d98a6e14bbc5bcb710428dc3d014acd69ee95c1b9e9c6c9ba7090f000b000100067a449839614300"], 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x4, 0x800}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x100000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x1c) getpeername(r10, 0x0, 0x0) 11.228148072s ago: executing program 2 (id=135): syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1011) chdir(0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000"], 0x78}}, 0x4000000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)=""/91, 0x5b}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000c80)=""/147, 0x93}, {0x0}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/61, 0x3d}, {&(0x7f0000000f80)=""/219, 0xdb}], 0x7}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2160, 0x0) 11.180675989s ago: executing program 2 (id=136): syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000001c0)=0x8) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, 0x0) connect$pppl2tp(r5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x210, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x17c, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x7b8, 0x8, 0x5, 0x5}}]}, {0x135, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) 8.926054261s ago: executing program 4 (id=139): pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$msr(r0, &(0x7f00000000c0)=""/40, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x3, 0x0, 0x400000, 0x82, 0x0, 0xfffffff9, {0x4, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.536000085s ago: executing program 3 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wg1\x00', 0x400}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r5, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000001c0)={0xfffffffd, 0x2, {0x1, 0x3, 0x8, 0x0, 0x8}, 0x3}) tkill(r4, 0x7) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00'], 0x48) r7 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x4f) 7.886922704s ago: executing program 4 (id=141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(r3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030300f30346532342c74696d656f75743d30783030"]) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) sendfile(r7, r7, 0x0, 0xffffffff) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r9 = fsmount(r8, 0x1, 0x0) fchmodat(r9, &(0x7f0000000000)='.\x00', 0xe0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x800}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xcd, &(0x7f00000001c0)=""/205, 0x41100, 0x6b, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x171}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r7, r9, r10], &(0x7f00000004c0)=[{0x4, 0x3, 0xe, 0x9}], 0x10, 0xc0}, 0x94) 6.08057854s ago: executing program 4 (id=142): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(r3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030300f30346532342c74696d656f75743d30783030"]) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) sendfile(r7, r7, 0x0, 0xffffffff) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r9 = fsmount(r8, 0x1, 0x0) fchmodat(r9, &(0x7f0000000000)='.\x00', 0xe0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x800}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf1c, 0x0, 0x0, 0x0, 0xbe}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xcd, &(0x7f00000001c0)=""/205, 0x41100, 0x6b, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x171}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r7, r9, r10], &(0x7f00000004c0)=[{0x4, 0x3, 0xe, 0x9}], 0x10, 0xc0}, 0x94) 5.979047746s ago: executing program 1 (id=143): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x8007, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x22, 0x2, 0x3, &(0x7f0000000240)) 5.856142298s ago: executing program 1 (id=144): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000440)='./bus\x00', 0x80, 0x9) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getegid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) 4.953176357s ago: executing program 1 (id=145): syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1011) chdir(0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000"], 0x78}}, 0x4000000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)=""/91, 0x5b}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000c80)=""/147, 0x93}, {0x0}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/61, 0x3d}, {&(0x7f0000000f80)=""/219, 0xdb}], 0x7}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2160, 0x0) 4.848123055s ago: executing program 1 (id=146): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/25, 0x19}, {&(0x7f0000006200)=""/231, 0xe7}, {&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000000940)=""/40, 0x28}, {&(0x7f0000000980)=""/43, 0x2b}], 0xa, &(0x7f0000000a80)=""/85, 0x55}, 0x4}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b80)=""/19, 0x13}, {&(0x7f0000000bc0)=""/197, 0xc5}, {&(0x7f0000000cc0)=""/237, 0xed}, {&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/237, 0xed}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/124, 0x7c}], 0x8, &(0x7f0000001000)=""/100, 0x64}, 0x42}, {{&(0x7f0000001080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001100)=""/206, 0xce}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/127, 0x7f}, {&(0x7f0000001340)=""/199, 0xc7}, {&(0x7f0000000640)=""/210, 0xd2}], 0x5}, 0x9}, {{&(0x7f0000001640)=@tipc, 0x80, &(0x7f0000001d40)=[{&(0x7f00000016c0)=""/239, 0xef}, {&(0x7f00000017c0)=""/146, 0x92}, {&(0x7f00000014c0)=""/52, 0x34}, {&(0x7f0000001880)=""/13, 0xd}, {&(0x7f0000006140)=""/134, 0x86}, {&(0x7f0000001980)=""/5, 0x5}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/247, 0xf7}], 0xa, &(0x7f0000004e00)=""/52, 0x34}, 0x8}, {{&(0x7f0000004e40)=@nl, 0x80, 0x0}, 0x2}], 0x5, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000001b7080000000001", @ANYRES32=r3, @ANYBLOB], 0x0, 0xa, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) r4 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001500), 0x200, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000600)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r6, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) brk(0x20001000) 4.411051106s ago: executing program 2 (id=147): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x1b59, 0x3, @empty, 0xd}}, 0x24) (fail_nth: 1) 4.395518256s ago: executing program 3 (id=148): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0x3, 0xb0, 0xd, 0x7, 0xff, 0x473d}) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48197e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca5e6374bca411fb700ddb9c812b8db0b701aad63770d6b52062fb50bb28c44357993b0e2e1fab829a226be82da63728eb747c58d3651d3f273e"], 0xdd12}], 0x1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x484000, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x0, 0x8, 0x8ec, 0x7, 0x9, 0x2, 0x3}, 0x0) 4.394511397s ago: executing program 4 (id=149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e810000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfeff}) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r8, 0x104, 0x4b264316b88a3841, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xa7c02) 3.096103037s ago: executing program 2 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wg1\x00', 0x400}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r5, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000001c0)={0xfffffffd, 0x2, {0x1, 0x3, 0x8, 0x0, 0x8}, 0x3}) tkill(r4, 0x7) r6 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)}}], 0x1, 0x4044800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00'], 0x48) r8 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x4f) 2.98984965s ago: executing program 4 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) syz_open_procfs(0x0, 0x0) connect$pppl2tp(r7, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$l2tp(r1, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 2.129891653s ago: executing program 3 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(r3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030300f30346532342c74696d656f75743d30783030"]) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) sendfile(r7, r7, 0x0, 0xffffffff) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r9 = fsmount(r8, 0x1, 0x0) fchmodat(r9, &(0x7f0000000000)='.\x00', 0xe0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x800}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xcd, &(0x7f00000001c0)=""/205, 0x41100, 0x6b, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x171}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r7, r9, r10], &(0x7f00000004c0)=[{0x4, 0x3, 0xe, 0x9}], 0x10, 0xc0}, 0x94) 1.704408801s ago: executing program 2 (id=153): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f000064a000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f000038e000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8926, 0x0) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x8, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x2, 0x4}}, 0x10) listen(r0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x9e0eadae347b960d) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x11e7, 0x1000, 0x0, 0x162}, &(0x7f0000000040)=0x0, &(0x7f0000000dc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) 1.636678425s ago: executing program 1 (id=154): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000440)='./bus\x00', 0x80, 0x9) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getegid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) 226.656345ms ago: executing program 1 (id=155): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x5, @loopback, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x8010743f, &(0x7f0000000180)) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="927c37c3ac105b265f94b615f09b26048699ca252d326e74d55720", 0x1b}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00010000000000fddadf25010100800c0001000300000000000000140003"], 0x114}], 0x1}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 0s ago: executing program 4 (id=156): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000700)={{}, "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"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040002000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200020000000800030004ac0f"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 59.065224][ T30] audit: type=1400 audit(1758004767.490:62): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.068835][ T5831] cgroup: Unknown subsys name 'net' [ 59.087970][ T30] audit: type=1400 audit(1758004767.490:63): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.115307][ T30] audit: type=1400 audit(1758004767.520:64): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.275500][ T5831] cgroup: Unknown subsys name 'cpuset' [ 59.282877][ T5831] cgroup: Unknown subsys name 'rlimit' [ 59.428629][ T30] audit: type=1400 audit(1758004767.850:65): avc: denied { setattr } for pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.452020][ T30] audit: type=1400 audit(1758004767.850:66): avc: denied { create } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.480009][ T30] audit: type=1400 audit(1758004767.850:67): avc: denied { write } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.500423][ T30] audit: type=1400 audit(1758004767.850:68): avc: denied { read } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.521461][ T30] audit: type=1400 audit(1758004767.880:69): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.546314][ T30] audit: type=1400 audit(1758004767.880:70): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.554413][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.569559][ T30] audit: type=1400 audit(1758004767.900:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.473256][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.654100][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.661987][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.669966][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.683821][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.697966][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.704181][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.713728][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.713901][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.728325][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.728446][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.743342][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.745713][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.751500][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.757542][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.765752][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.772312][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.778837][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.785466][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.793596][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.799659][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.806663][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.822618][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.822729][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.829871][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.854734][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.228517][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 63.260652][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 63.283045][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 63.456024][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.463237][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.470461][ T5845] bridge_slave_0: entered allmulticast mode [ 63.477374][ T5845] bridge_slave_0: entered promiscuous mode [ 63.509138][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.516350][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.524199][ T5845] bridge_slave_1: entered allmulticast mode [ 63.531334][ T5845] bridge_slave_1: entered promiscuous mode [ 63.547048][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.554142][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.561195][ T5841] bridge_slave_0: entered allmulticast mode [ 63.568070][ T5841] bridge_slave_0: entered promiscuous mode [ 63.577027][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.584533][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.591590][ T5843] bridge_slave_0: entered allmulticast mode [ 63.598952][ T5843] bridge_slave_0: entered promiscuous mode [ 63.609203][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.616727][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.623875][ T5843] bridge_slave_1: entered allmulticast mode [ 63.630435][ T5843] bridge_slave_1: entered promiscuous mode [ 63.652146][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.659248][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.666387][ T5841] bridge_slave_1: entered allmulticast mode [ 63.672985][ T5841] bridge_slave_1: entered promiscuous mode [ 63.679507][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 63.689847][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 63.708544][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.740175][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.767611][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.784501][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.808111][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.847467][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.859571][ T5845] team0: Port device team_slave_0 added [ 63.872262][ T5841] team0: Port device team_slave_0 added [ 63.886083][ T5845] team0: Port device team_slave_1 added [ 63.908559][ T5841] team0: Port device team_slave_1 added [ 63.930245][ T5843] team0: Port device team_slave_0 added [ 63.961677][ T5843] team0: Port device team_slave_1 added [ 63.983901][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.990833][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.017463][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.029415][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.036537][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.062438][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.074492][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.081415][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.107298][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.140332][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.148800][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.176666][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.199559][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.206689][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.213818][ T5852] bridge_slave_0: entered allmulticast mode [ 64.220383][ T5852] bridge_slave_0: entered promiscuous mode [ 64.227134][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.234280][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.241348][ T5854] bridge_slave_0: entered allmulticast mode [ 64.248635][ T5854] bridge_slave_0: entered promiscuous mode [ 64.263063][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.271496][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.297671][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.309560][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.316556][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.342609][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.353757][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.360843][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.368087][ T5852] bridge_slave_1: entered allmulticast mode [ 64.375251][ T5852] bridge_slave_1: entered promiscuous mode [ 64.381950][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.389243][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.396510][ T5854] bridge_slave_1: entered allmulticast mode [ 64.403096][ T5854] bridge_slave_1: entered promiscuous mode [ 64.457278][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.469187][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.496892][ T5845] hsr_slave_0: entered promiscuous mode [ 64.502897][ T5845] hsr_slave_1: entered promiscuous mode [ 64.527511][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.539107][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.596791][ T5841] hsr_slave_0: entered promiscuous mode [ 64.602739][ T5841] hsr_slave_1: entered promiscuous mode [ 64.608993][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 64.615179][ T5841] Cannot create hsr debugfs directory [ 64.629347][ T5843] hsr_slave_0: entered promiscuous mode [ 64.635324][ T5843] hsr_slave_1: entered promiscuous mode [ 64.641217][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 64.646958][ T5843] Cannot create hsr debugfs directory [ 64.653738][ T5854] team0: Port device team_slave_0 added [ 64.670889][ T5852] team0: Port device team_slave_0 added [ 64.678753][ T5852] team0: Port device team_slave_1 added [ 64.697876][ T5854] team0: Port device team_slave_1 added [ 64.753240][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.760178][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.786484][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.812930][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.820055][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.846171][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.860773][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.867746][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.894349][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.894933][ T5847] Bluetooth: hci0: command tx timeout [ 64.905346][ T51] Bluetooth: hci1: command tx timeout [ 64.910429][ T5847] Bluetooth: hci3: command tx timeout [ 64.915724][ T51] Bluetooth: hci4: command tx timeout [ 64.921218][ T5857] Bluetooth: hci2: command tx timeout [ 64.947820][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.954806][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.980796][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.069916][ T5852] hsr_slave_0: entered promiscuous mode [ 65.076038][ T5852] hsr_slave_1: entered promiscuous mode [ 65.081933][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 65.087698][ T5852] Cannot create hsr debugfs directory [ 65.128733][ T5854] hsr_slave_0: entered promiscuous mode [ 65.135340][ T5854] hsr_slave_1: entered promiscuous mode [ 65.141160][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 65.146981][ T5854] Cannot create hsr debugfs directory [ 65.314529][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.338843][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.362546][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.377794][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.438437][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.459194][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.476727][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.486688][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.529453][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.538833][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.549982][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.569932][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.637523][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.677003][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.693993][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.707624][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.734598][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.770419][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.781386][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.798598][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.807643][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.824646][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.831949][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.840633][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.860520][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.867570][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.901691][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.946656][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.966324][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.988293][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.016618][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.023714][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.042823][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.049889][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.079451][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.086540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.099616][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.106730][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.126099][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 66.126111][ T30] audit: type=1400 audit(1758004774.550:86): avc: denied { sys_module } for pid=5845 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.175860][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.236969][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.251896][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.271516][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.278607][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.302441][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.309572][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.337744][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.365825][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.375992][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.411339][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.455022][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.531342][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.538470][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.557142][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.564260][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.592702][ T5845] veth0_vlan: entered promiscuous mode [ 66.622380][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.659898][ T5845] veth1_vlan: entered promiscuous mode [ 66.672954][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.720271][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.802195][ T5841] veth0_vlan: entered promiscuous mode [ 66.821411][ T5843] veth0_vlan: entered promiscuous mode [ 66.830524][ T5845] veth0_macvtap: entered promiscuous mode [ 66.865865][ T5845] veth1_macvtap: entered promiscuous mode [ 66.874758][ T5841] veth1_vlan: entered promiscuous mode [ 66.889064][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.908130][ T5843] veth1_vlan: entered promiscuous mode [ 66.970710][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.980612][ T5857] Bluetooth: hci4: command tx timeout [ 66.981480][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.988756][ T5847] Bluetooth: hci1: command tx timeout [ 67.000600][ T5862] Bluetooth: hci2: command tx timeout [ 67.006797][ T5843] veth0_macvtap: entered promiscuous mode [ 67.007069][ T5850] Bluetooth: hci3: command tx timeout [ 67.012605][ T51] Bluetooth: hci0: command tx timeout [ 67.038949][ T5841] veth0_macvtap: entered promiscuous mode [ 67.047148][ T5843] veth1_macvtap: entered promiscuous mode [ 67.059148][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.069830][ T5841] veth1_macvtap: entered promiscuous mode [ 67.097107][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.121276][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.131040][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.142958][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.159589][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.172476][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.188504][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.198472][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.239374][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.274708][ T5854] veth0_vlan: entered promiscuous mode [ 67.285670][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.296288][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.318324][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.327173][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.346433][ T5854] veth1_vlan: entered promiscuous mode [ 67.367243][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.376585][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.401253][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.435830][ T5852] veth0_vlan: entered promiscuous mode [ 67.478895][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.487284][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.500755][ T5852] veth1_vlan: entered promiscuous mode [ 67.509680][ T5854] veth0_macvtap: entered promiscuous mode [ 67.521555][ T5854] veth1_macvtap: entered promiscuous mode [ 67.527343][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.548383][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.582361][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.594334][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.611704][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.630492][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.668025][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.672437][ T30] audit: type=1400 audit(1758004776.090:87): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.AkJeLv/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.678903][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.714319][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.728056][ T30] audit: type=1400 audit(1758004776.130:88): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.730047][ T5852] veth0_macvtap: entered promiscuous mode [ 67.750434][ T30] audit: type=1400 audit(1758004776.130:89): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.AkJeLv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.770521][ T5852] veth1_macvtap: entered promiscuous mode [ 67.789641][ T30] audit: type=1400 audit(1758004776.130:90): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.814130][ T30] audit: type=1400 audit(1758004776.140:91): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.AkJeLv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.832048][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.846935][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.867046][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.870677][ T30] audit: type=1400 audit(1758004776.150:92): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.AkJeLv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.889254][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.910361][ T30] audit: type=1400 audit(1758004776.150:93): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.915836][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.948519][ T30] audit: type=1400 audit(1758004776.190:94): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.974999][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.976577][ T30] audit: type=1400 audit(1758004776.190:95): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="gadgetfs" ino=7548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.035189][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.069132][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.086358][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.151882][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.254406][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.533578][ T5968] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 68.551969][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.570711][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.700651][ T5965] Bluetooth: MGMT ver 1.23 [ 68.705158][ T5965] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 68.722794][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.832780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.162737][ T51] Bluetooth: hci3: command tx timeout [ 69.168361][ T51] Bluetooth: hci1: command tx timeout [ 69.175509][ T51] Bluetooth: hci4: command tx timeout [ 69.180989][ T5850] Bluetooth: hci2: command tx timeout [ 69.187792][ T51] Bluetooth: hci0: command tx timeout [ 69.242336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.344764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.045994][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.075893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.268069][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.645954][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.703429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.778523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.974005][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.980394][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.085558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.103411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.130599][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.165089][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.214702][ T51] Bluetooth: hci0: command tx timeout [ 71.220110][ T5847] Bluetooth: hci2: command tx timeout [ 71.225522][ T5850] Bluetooth: hci4: command tx timeout [ 71.230882][ T5847] Bluetooth: hci1: command tx timeout [ 71.236670][ T5850] Bluetooth: hci3: command tx timeout [ 71.379199][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.393267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 71.419164][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.495628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.623377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.820457][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 71.820472][ T30] audit: type=1400 audit(1758004780.240:127): avc: denied { name_bind } for pid=5996 comm="syz.2.3" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.983381][ T6003] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 72.000396][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.135093][ T3576] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.151233][ T30] audit: type=1400 audit(1758004780.420:128): avc: denied { create } for pid=5996 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.273168][ T30] audit: type=1400 audit(1758004780.440:129): avc: denied { create } for pid=5996 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.292510][ T30] audit: type=1400 audit(1758004780.450:130): avc: denied { connect } for pid=5996 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.420977][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.607260][ T6017] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 72.691909][ T6019] UBIFS error (pid: 6019): cannot open "c:::", error -22 [ 72.697423][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'. [ 72.948720][ T30] audit: type=1400 audit(1758004781.300:131): avc: denied { ioctl } for pid=6011 comm="syz.0.10" path="socket:[8712]" dev="sockfs" ino=8712 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.041286][ T3576] Bluetooth: hci6: Frame reassembly failed (-84) [ 73.191307][ T3576] Bluetooth: hci6: Frame reassembly failed (-84) [ 74.172400][ T36] Bluetooth: hci7: Frame reassembly failed (-84) [ 74.184853][ T6036] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 74.247150][ T5862] Bluetooth: hci5: command 0x1003 tx timeout [ 74.248031][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 74.737127][ T30] audit: type=1400 audit(1758004783.080:132): avc: denied { read write } for pid=6038 comm="syz.2.15" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.823364][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 74.823793][ T5850] Bluetooth: hci6: command 0x1003 tx timeout [ 74.836122][ T30] audit: type=1400 audit(1758004783.080:133): avc: denied { open } for pid=6038 comm="syz.2.15" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.859552][ T30] audit: type=1400 audit(1758004783.090:134): avc: denied { read } for pid=6038 comm="syz.2.15" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.120112][ T30] audit: type=1400 audit(1758004783.090:135): avc: denied { open } for pid=6038 comm="syz.2.15" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.614804][ T30] audit: type=1400 audit(1758004783.990:136): avc: denied { write } for pid=6042 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.178399][ T51] Bluetooth: hci7: command 0x1003 tx timeout [ 76.178460][ T5847] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 77.103227][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 77.103243][ T30] audit: type=1400 audit(1758004784.670:142): avc: denied { setopt } for pid=6046 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.241331][ T6056] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 77.288435][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.442953][ T6057] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 77.482768][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 77.542909][ T6064] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 77.619873][ T5941] Bluetooth: hci7: Frame reassembly failed (-84) [ 77.666892][ T30] audit: type=1400 audit(1758004786.090:143): avc: denied { create } for pid=6046 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.666928][ T3576] Bluetooth: hci7: Frame reassembly failed (-84) [ 79.293286][ T5862] Bluetooth: hci5: command 0x1003 tx timeout [ 79.311468][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.533287][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 79.539984][ T5847] Bluetooth: hci6: command 0x1003 tx timeout [ 79.613344][ T51] Bluetooth: hci7: command 0x1003 tx timeout [ 79.616440][ T5850] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 79.684555][ T30] audit: type=1400 audit(1758004788.110:144): avc: denied { append } for pid=6078 comm="syz.3.26" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.394440][ T30] audit: type=1400 audit(1758004788.360:145): avc: denied { create } for pid=6078 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.467325][ T30] audit: type=1400 audit(1758004788.360:146): avc: denied { setopt } for pid=6078 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.500006][ T30] audit: type=1400 audit(1758004788.360:147): avc: denied { bind } for pid=6078 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.523310][ T30] audit: type=1400 audit(1758004788.360:148): avc: denied { name_bind } for pid=6078 comm="syz.3.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.730951][ T6090] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 80.807775][ T6091] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 80.815805][ T30] audit: type=1400 audit(1758004788.360:149): avc: denied { node_bind } for pid=6078 comm="syz.3.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 80.815846][ T30] audit: type=1400 audit(1758004788.360:150): avc: denied { getopt } for pid=6078 comm="syz.3.26" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.815883][ T30] audit: type=1400 audit(1758004788.360:151): avc: denied { connect } for pid=6078 comm="syz.3.26" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.886281][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 81.593517][ T43] cfg80211: failed to load regulatory.db [ 81.623059][ T6091] batman_adv: batadv0: Adding interface: team0 [ 81.650477][ T6091] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.931181][ T6091] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 82.507798][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 82.507813][ T30] audit: type=1400 audit(1758004790.930:162): avc: denied { ioctl } for pid=6107 comm="syz.2.30" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.798860][ T5973] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.885862][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 82.892320][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 83.153539][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 83.174843][ T5973] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 83.183001][ T5973] usb 3-1: config 0 has no interface number 0 [ 83.192159][ T5973] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.247112][ T6113] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 83.288642][ T5988] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.323678][ T5973] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.368286][ T5973] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 83.378042][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 83.391624][ T5973] usb 3-1: Product: syz [ 83.543433][ T5973] usb 3-1: SerialNumber: syz [ 84.504909][ T5973] usb 3-1: config 0 descriptor?? [ 84.701830][ T5973] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 84.713870][ T5973] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 84.820991][ T30] audit: type=1400 audit(1758004793.240:163): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=2787 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.891275][ T30] audit: type=1400 audit(1758004793.240:164): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2787 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.913315][ T51] Bluetooth: hci3: Malformed Event: 0x13 [ 84.948253][ T30] audit: type=1400 audit(1758004793.240:165): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2787 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.135123][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 85.226411][ T30] audit: type=1400 audit(1758004793.620:166): avc: denied { bind } for pid=6117 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.264884][ T6125] capability: warning: `syz.4.34' uses deprecated v2 capabilities in a way that may be insecure [ 85.301554][ T30] audit: type=1400 audit(1758004793.630:167): avc: denied { write } for pid=6117 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.303157][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 85.331565][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 85.331581][ T30] audit: type=1400 audit(1758004793.630:168): avc: denied { ioctl } for pid=6117 comm="syz.0.35" path="socket:[8135]" dev="sockfs" ino=8135 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.445682][ T30] audit: type=1400 audit(1758004793.840:169): avc: denied { watch watch_reads } for pid=6118 comm="syz.4.34" path="/4" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.517541][ T30] audit: type=1400 audit(1758004793.860:170): avc: denied { bind } for pid=6118 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.543529][ T30] audit: type=1400 audit(1758004793.860:171): avc: denied { setopt } for pid=6118 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.192496][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.195099][ T5922] usb 3-1: USB disconnect, device number 2 [ 86.199452][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 86.275001][ T5922] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 86.610095][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 86.628826][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 86.641613][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 86.654803][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 88.393188][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 88.393205][ T30] audit: type=1400 audit(1758004795.360:186): avc: denied { read write } for pid=6136 comm="syz.0.38" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.463787][ T30] audit: type=1400 audit(1758004795.360:187): avc: denied { open } for pid=6136 comm="syz.0.38" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.904515][ T5958] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.134713][ T6162] 9pnet_virtio: no channels available for device 127.0.0.1 [ 89.533360][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 89.711045][ T5958] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 89.719491][ T5958] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.757974][ T5958] usb 2-1: config 0 has no interface number 0 [ 89.804429][ T5958] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 89.958899][ T5958] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 89.992622][ T5958] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 90.013191][ T5958] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 90.481350][ T5958] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 90.491446][ T5958] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 90.505201][ T5958] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 90.529112][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.546407][ T5958] usb 2-1: config 0 descriptor?? [ 90.576826][ T6152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.592815][ T5958] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.902437][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.932290][ T5958] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 90.999441][ T6179] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 91.035514][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 91.210597][ T30] audit: type=1400 audit(1758004799.530:188): avc: denied { mount } for pid=6165 comm="syz.0.44" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.768688][ T5957] usb 2-1: USB disconnect, device number 2 [ 93.093719][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 94.047190][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 94.057132][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 97.093907][ T5973] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 97.313181][ T5973] usb 4-1: device descriptor read/64, error -71 [ 97.899417][ T6234] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 98.054663][ T30] audit: type=1400 audit(1758004806.470:189): avc: denied { read write } for pid=6241 comm="syz.1.61" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.113616][ T5973] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 98.216404][ T30] audit: type=1400 audit(1758004806.470:190): avc: denied { open } for pid=6241 comm="syz.1.61" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.242965][ T30] audit: type=1400 audit(1758004806.520:191): avc: denied { write } for pid=6241 comm="syz.1.61" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.272057][ T5973] usb 4-1: device descriptor read/64, error -71 [ 98.334317][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.383498][ T5973] usb usb4-port1: attempt power cycle [ 98.493170][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 98.499713][ T55] usb 2-1: config 1 has an invalid interface number: 185 but max is 0 [ 98.508568][ T55] usb 2-1: config 1 has no interface number 0 [ 98.718830][ T55] usb 2-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 98.727931][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.752890][ T55] usb 2-1: Product: syz [ 98.760065][ T55] usb 2-1: Manufacturer: syz [ 98.770118][ T55] usb 2-1: SerialNumber: syz [ 98.774864][ T5973] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 98.804065][ T5973] usb 4-1: device descriptor read/8, error -71 [ 99.080506][ T6242] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3895927331 (249339349184 ns) > initial count (19337907712 ns). Using initial count to start timer. [ 99.100598][ T30] audit: type=1400 audit(1758004807.490:192): avc: denied { getopt } for pid=6241 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.123397][ T5973] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 99.140367][ T6258] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 99.161120][ T30] audit: type=1400 audit(1758004807.490:193): avc: denied { ioctl } for pid=6241 comm="syz.1.61" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.205232][ T5973] usb 4-1: device descriptor read/8, error -71 [ 99.338963][ T55] usb-storage 2-1:1.185: USB Mass Storage device detected [ 99.346245][ T5973] usb usb4-port1: unable to enumerate USB device [ 99.358628][ T30] audit: type=1400 audit(1758004807.780:194): avc: denied { create } for pid=6262 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.409101][ T55] usb-storage 2-1:1.185: Quirks match for vid 05ac pid 120a: 10 [ 99.424353][ T30] audit: type=1400 audit(1758004807.850:195): avc: denied { setopt } for pid=6262 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.479678][ T30] audit: type=1400 audit(1758004807.870:196): avc: denied { ioctl } for pid=6259 comm="syz.0.65" path="socket:[10362]" dev="sockfs" ino=10362 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.600482][ T30] audit: type=1400 audit(1758004807.870:197): avc: denied { create } for pid=6259 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.633361][ T30] audit: type=1400 audit(1758004807.870:198): avc: denied { ioctl } for pid=6259 comm="syz.0.65" path="socket:[9633]" dev="sockfs" ino=9633 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.752538][ T55] apple-mfi-fastcharge 2-1: USB disconnect, device number 3 [ 100.738014][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c01bc00: rx timeout, send abort [ 100.753229][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c01bc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.043207][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c3ec000: rx timeout, send abort [ 102.051745][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c3ec000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.571758][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 103.571774][ T30] audit: type=1400 audit(1758004811.990:222): avc: denied { mount } for pid=6302 comm="syz.0.72" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.939202][ T30] audit: type=1400 audit(1758004813.360:223): avc: denied { sys_module } for pid=6330 comm="syz.4.79" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 105.488542][ T30] audit: type=1400 audit(1758004813.910:224): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.737473][ T6356] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 105.801419][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 106.205056][ T30] audit: type=1400 audit(1758004814.620:225): avc: denied { mount } for pid=6360 comm="syz.4.84" name="/" dev="autofs" ino=9720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 106.630659][ T30] audit: type=1400 audit(1758004815.050:226): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 106.809285][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058dd2800: rx timeout, send abort [ 106.818480][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058dd2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 107.033266][ T6368] random: crng reseeded on system resumption [ 107.052945][ T30] audit: type=1400 audit(1758004815.450:227): avc: denied { write } for pid=6367 comm="syz.1.86" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.169425][ T30] audit: type=1400 audit(1758004815.450:228): avc: denied { open } for pid=6367 comm="syz.1.86" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.234690][ T30] audit: type=1400 audit(1758004815.470:229): avc: denied { mounton } for pid=6364 comm="syz.4.85" path="/14/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.356034][ T30] audit: type=1400 audit(1758004815.530:230): avc: denied { remount } for pid=6364 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.445621][ T30] audit: type=1400 audit(1758004815.850:231): avc: denied { create } for pid=6373 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.785645][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 108.095207][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 108.101453][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058dd0400: rx timeout, send abort [ 108.101666][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058dd0400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.855141][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 108.855160][ T30] audit: type=1400 audit(1758004817.260:234): avc: denied { read } for pid=6390 comm="syz.3.91" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.077418][ T30] audit: type=1400 audit(1758004817.260:235): avc: denied { open } for pid=6390 comm="syz.3.91" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.102972][ T30] audit: type=1400 audit(1758004817.270:236): avc: denied { ioctl } for pid=6390 comm="syz.3.91" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.163183][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.238446][ T30] audit: type=1400 audit(1758004817.320:237): avc: denied { setopt } for pid=6390 comm="syz.3.91" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.261154][ T30] audit: type=1400 audit(1758004817.320:238): avc: denied { connect } for pid=6390 comm="syz.3.91" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.333250][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 109.340132][ T55] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 109.349601][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.391879][ T55] usb 1-1: config 0 has no interface number 0 [ 109.404481][ T55] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 109.417902][ T55] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 109.429618][ T55] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 109.443723][ T55] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 109.456302][ T55] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 109.466448][ T55] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 109.479961][ T55] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 109.489441][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.522905][ T55] usb 1-1: config 0 descriptor?? [ 109.535623][ T6395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.549322][ T55] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.572270][ T30] audit: type=1400 audit(1758004817.990:239): avc: denied { remount } for pid=6402 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 109.750476][ T55] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 109.863364][ T5973] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.663622][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 110.670178][ T5973] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 110.679605][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.705053][ T5973] usb 3-1: config 0 descriptor?? [ 110.728076][ T43] usb 1-1: USB disconnect, device number 2 [ 110.821725][ T30] audit: type=1400 audit(1758004819.240:240): avc: denied { read } for pid=6412 comm="syz.0.98" path="socket:[9937]" dev="sockfs" ino=9937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.004603][ T5973] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 111.067386][ T5973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.101657][ T5973] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 111.110736][ T5973] usb 3-1: media controller created [ 111.147347][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.263237][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.538475][ T30] audit: type=1400 audit(1758004819.850:241): avc: denied { mount } for pid=6402 comm="syz.2.96" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 111.879973][ T30] audit: type=1400 audit(1758004820.300:242): avc: denied { ioctl } for pid=6422 comm="syz.4.99" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10856 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.894950][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 111.968660][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 111.982403][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 112.005523][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 112.014959][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.089439][ T43] usb 1-1: Product: syz [ 112.093710][ T43] usb 1-1: Manufacturer: syz [ 112.098491][ T43] usb 1-1: SerialNumber: syz [ 112.115264][ T43] usb 1-1: config 0 descriptor?? [ 112.460690][ T43] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 112.479552][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 112.504890][ T43] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 112.523288][ T43] usb 1-1: USB disconnect, device number 3 [ 112.889236][ T30] audit: type=1400 audit(1758004821.310:243): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 112.910554][ T5973] az6027: usb out operation failed. (-71) [ 112.939376][ T5973] az6027: usb out operation failed. (-71) [ 112.993972][ T5973] stb0899_attach: Driver disabled by Kconfig [ 113.161533][ T5957] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.263087][ T5973] az6027: no front-end attached [ 113.263087][ T5973] [ 113.294997][ T5973] az6027: usb out operation failed. (-71) [ 113.308066][ T5973] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 113.322058][ T5973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 113.351128][ T5973] dvb-usb: schedule remote query interval to 400 msecs. [ 113.388331][ T5973] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 113.411750][ T5973] usb 3-1: USB disconnect, device number 3 [ 113.437948][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 113.439763][ T6432] Zero length message leads to an empty skb [ 113.473461][ T5957] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.492912][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.519744][ T5957] usb 5-1: config 0 descriptor?? [ 113.625276][ T5973] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 113.750424][ T5957] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 113.771095][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.816230][ T5957] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 113.842161][ T5957] usb 5-1: media controller created [ 113.947979][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.491093][ T5922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.498673][ T5973] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.663329][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 114.670409][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 114.679381][ T5973] usb 3-1: config 1 has an invalid interface number: 185 but max is 0 [ 114.692036][ T5973] usb 3-1: config 1 has no interface number 0 [ 114.700974][ T5973] usb 3-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 114.710950][ T5922] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 114.721092][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.729193][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.745006][ T5973] usb 3-1: Product: syz [ 114.752563][ T5922] usb 1-1: config 0 descriptor?? [ 114.759611][ T5973] usb 3-1: Manufacturer: syz [ 114.777686][ T5973] usb 3-1: SerialNumber: syz [ 114.977284][ T5922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.987786][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.998049][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 115.011050][ T5922] usb 1-1: media controller created [ 115.023022][ T6438] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3895927331 (249339349184 ns) > initial count (19337907712 ns). Using initial count to start timer. [ 115.041456][ T6438] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 115.043483][ T5958] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.072244][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.136559][ T5973] usb-storage 3-1:1.185: USB Mass Storage device detected [ 115.149267][ T5973] usb-storage 3-1:1.185: Quirks match for vid 05ac pid 120a: 10 [ 115.274277][ T5973] apple-mfi-fastcharge 3-1: USB disconnect, device number 4 [ 115.343172][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 115.357751][ T5958] usb 4-1: config 1 has an invalid interface number: 185 but max is 0 [ 115.366485][ T5958] usb 4-1: config 1 has no interface number 0 [ 115.376225][ T5958] usb 4-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 115.385431][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.393537][ T5958] usb 4-1: Product: syz [ 115.397765][ T5958] usb 4-1: Manufacturer: syz [ 115.402359][ T5958] usb 4-1: SerialNumber: syz [ 115.886360][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805ab85000: rx timeout, send abort [ 115.895486][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805ab85000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 115.902466][ T5957] az6027: usb out operation failed. (-71) [ 115.916345][ T5957] az6027: usb out operation failed. (-71) [ 115.922132][ T5957] stb0899_attach: Driver disabled by Kconfig [ 115.928229][ T5957] az6027: no front-end attached [ 115.928229][ T5957] [ 115.935664][ T5957] az6027: usb out operation failed. (-71) [ 115.946337][ T5957] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 115.955254][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 115.977675][ T5957] dvb-usb: schedule remote query interval to 400 msecs. [ 116.013451][ T5957] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 116.050218][ T6453] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3895927331 (249339349184 ns) > initial count (19337907712 ns). Using initial count to start timer. [ 116.067854][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.074239][ T5957] usb 5-1: USB disconnect, device number 2 [ 116.220897][ T6463] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 116.859609][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 116.859641][ T30] audit: type=1400 audit(1758004825.280:245): avc: denied { read } for pid=6458 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.998608][ T5922] az6027: usb out operation failed. (-71) [ 117.009022][ T5922] az6027: usb out operation failed. (-71) [ 117.014785][ T5922] stb0899_attach: Driver disabled by Kconfig [ 117.021447][ T5922] az6027: no front-end attached [ 117.021447][ T5922] [ 117.042878][ T5922] az6027: usb out operation failed. (-71) [ 117.048820][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 117.053200][ T5957] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 117.087242][ T5958] usb-storage 4-1:1.185: USB Mass Storage device detected [ 117.101911][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 117.111740][ T5958] usb-storage 4-1:1.185: Quirks match for vid 05ac pid 120a: 10 [ 117.136140][ T30] audit: type=1400 audit(1758004825.550:246): avc: denied { setopt } for pid=6467 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.158965][ T30] audit: type=1400 audit(1758004825.550:247): avc: denied { connect } for pid=6467 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.176078][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805ab84000: rx timeout, send abort [ 117.192021][ T5922] dvb-usb: schedule remote query interval to 400 msecs. [ 117.199105][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805ab84000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.265327][ T5922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 117.346670][ T30] audit: type=1400 audit(1758004825.650:248): avc: denied { append } for pid=6473 comm="syz.4.113" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.365501][ T5922] usb 1-1: USB disconnect, device number 4 [ 117.369603][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.399587][ T5958] apple-mfi-fastcharge 4-1: USB disconnect, device number 6 [ 117.474290][ T30] audit: type=1400 audit(1758004825.700:249): avc: denied { ioctl } for pid=6473 comm="syz.4.113" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.510538][ T6478] macvlan0: entered promiscuous mode [ 117.534686][ T6478] netlink: 'syz.0.114': attribute type 2 has an invalid length. [ 117.601569][ T5922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 118.413391][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.454974][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.926676][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 118.938667][ T5895] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.964788][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.000383][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.065952][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.121412][ T5895] usb 4-1: config 0 descriptor?? [ 119.261198][ T30] audit: type=1400 audit(1758004827.670:250): avc: denied { create } for pid=6498 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.306340][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.372790][ T5895] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 119.656481][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.666650][ T30] audit: type=1400 audit(1758004827.750:251): avc: denied { write } for pid=6498 comm="syz.2.123" path="socket:[10223]" dev="sockfs" ino=10223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.690880][ T5895] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 119.700798][ T5895] usb 4-1: media controller created [ 119.723534][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.503607][ T30] audit: type=1400 audit(1758004828.930:252): avc: denied { sqpoll } for pid=6506 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.618284][ T30] audit: type=1400 audit(1758004829.040:253): avc: denied { search } for pid=5513 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.731600][ T30] audit: type=1400 audit(1758004829.040:254): avc: denied { search } for pid=5513 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.753099][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.765584][ T12] bridge_slave_1: left allmulticast mode [ 120.773811][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.791843][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.801206][ T12] bridge_slave_1: left promiscuous mode [ 120.807981][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.816189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.829981][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.838868][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.904576][ T12] bridge_slave_0: left allmulticast mode [ 120.910339][ T12] bridge_slave_0: left promiscuous mode [ 120.919189][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.164921][ T5922] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.321063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.329803][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 121.341959][ T5922] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 121.351386][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.360823][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.376387][ T12] bond0 (unregistering): Released all slaves [ 121.382442][ T5922] usb 5-1: config 0 has no interface number 0 [ 121.388763][ T5922] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 121.404861][ T5922] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 121.512156][ T5895] az6027: usb out operation failed. (-71) [ 121.526221][ T5895] az6027: usb out operation failed. (-71) [ 121.532820][ T5922] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 121.546679][ T5895] stb0899_attach: Driver disabled by Kconfig [ 121.552660][ T5895] az6027: no front-end attached [ 121.552660][ T5895] [ 121.577555][ T5922] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 121.587734][ T5922] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 121.597722][ T5895] az6027: usb out operation failed. (-71) [ 121.604737][ T5895] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 121.612111][ T5922] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 121.626773][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 121.655987][ T5922] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 121.672853][ T5895] dvb-usb: schedule remote query interval to 400 msecs. [ 121.687954][ T5895] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 121.702540][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.719287][ T5895] usb 4-1: USB disconnect, device number 7 [ 121.739121][ T5922] usb 5-1: config 0 descriptor?? [ 121.760254][ T6518] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 121.781801][ T5922] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.280054][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804ae68400: rx timeout, send abort [ 122.293203][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804ae68400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.300627][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 122.895034][ T5847] Bluetooth: hci0: command tx timeout [ 123.269608][ T6543] 8021q: VLANs not supported on lo [ 123.311879][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.340830][ T5922] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 123.350981][ T5895] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 123.573945][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 123.573958][ T30] audit: type=1400 audit(1758004831.790:272): avc: denied { execute } for pid=6564 comm="syz.4.132" name="file1" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.580064][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804ae69800: rx timeout, send abort [ 123.602155][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804ae69800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 123.635217][ T5922] usb 5-1: USB disconnect, device number 3 [ 123.651031][ T30] audit: type=1400 audit(1758004831.790:273): avc: denied { execute_no_trans } for pid=6564 comm="syz.4.132" path="/27/file1" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.256728][ T30] audit: type=1400 audit(1758004832.680:274): avc: denied { mount } for pid=6571 comm="syz.3.134" name="/" dev="ramfs" ino=12366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 124.411365][ T12] hsr_slave_0: left promiscuous mode [ 124.526050][ T12] hsr_slave_1: left promiscuous mode [ 124.551693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.585911][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.628438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.643151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.693218][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.737383][ T6589] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 124.759333][ T3576] Bluetooth: hci5: Frame reassembly failed (-84) [ 124.843227][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 124.974340][ T5922] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 124.977254][ T5850] Bluetooth: hci0: command tx timeout [ 125.007339][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.009003][ T12] veth1_macvtap: left promiscuous mode [ 125.022699][ T12] veth0_macvtap: left promiscuous mode [ 125.028589][ T12] veth1_vlan: left promiscuous mode [ 125.035171][ T12] veth0_vlan: left promiscuous mode [ 125.160344][ T5922] usb 2-1: config 0 descriptor?? [ 125.415810][ T5922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 125.441189][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.469445][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578f9800: rx timeout, send abort [ 125.871627][ T6598] libceph: resolve '. [ 125.871627][ T6598] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 125.871627][ T6598] ' (ret=-3): failed [ 125.911977][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 125.977671][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578f9800: abort rx timeout. Force session deactivation [ 126.017832][ T5922] usb 2-1: media controller created [ 126.132992][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.776898][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.813384][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.814662][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 126.944421][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.063262][ T5847] Bluetooth: hci0: command tx timeout [ 128.720179][ T5922] az6027: usb out operation failed. (-110) [ 128.726553][ T5922] az6027: usb out operation failed. (-32) [ 128.732250][ T5922] stb0899_attach: Driver disabled by Kconfig [ 128.786129][ T5922] az6027: no front-end attached [ 128.786129][ T5922] [ 128.813227][ T5922] az6027: usb out operation failed. (-32) [ 128.845384][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.918554][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 128.944956][ T5922] dvb-usb: schedule remote query interval to 400 msecs. [ 128.951931][ T5922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 128.994353][ T5922] usb 2-1: USB disconnect, device number 4 [ 129.074996][ T5922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 129.158186][ T5847] Bluetooth: hci0: command tx timeout [ 130.734045][ T6654] tmpfs: Unknown parameter 'usrquota' [ 130.744528][ T6656] FAULT_INJECTION: forcing a failure. [ 130.744528][ T6656] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.779436][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(full) [ 130.779458][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.779467][ T6656] Call Trace: [ 130.779473][ T6656] [ 130.779479][ T6656] dump_stack_lvl+0x16c/0x1f0 [ 130.779504][ T6656] should_fail_ex+0x512/0x640 [ 130.779521][ T6656] _copy_from_user+0x2e/0xd0 [ 130.779538][ T6656] move_addr_to_kernel+0x65/0x170 [ 130.779549][ T6656] __sys_bind+0x11b/0x260 [ 130.779560][ T6656] ? __pfx___sys_bind+0x10/0x10 [ 130.779569][ T6656] ? __fget_files+0x20e/0x3c0 [ 130.779586][ T6656] ? __pfx_ksys_write+0x10/0x10 [ 130.779601][ T6656] __x64_sys_bind+0x72/0xb0 [ 130.779610][ T6656] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.779623][ T6656] do_syscall_64+0xcd/0x4e0 [ 130.779639][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.779650][ T6656] RIP: 0033:0x7f34ac78eba9 [ 130.779659][ T6656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.779669][ T6656] RSP: 002b:00007f34ad55d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 130.779680][ T6656] RAX: ffffffffffffffda RBX: 00007f34ac9d5fa0 RCX: 00007f34ac78eba9 [ 130.779686][ T6656] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 130.779693][ T6656] RBP: 00007f34ad55d090 R08: 0000000000000000 R09: 0000000000000000 [ 130.779699][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.779705][ T6656] R13: 00007f34ac9d6038 R14: 00007f34ac9d5fa0 R15: 00007ffedcb40048 [ 130.779718][ T6656] [ 130.941071][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.215593][ T30] audit: type=1400 audit(1758004839.540:275): avc: denied { create } for pid=6653 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.710550][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880572e9c00: rx timeout, send abort [ 131.719529][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880572e9c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 131.872482][ T6511] chnl_net:caif_netlink_parms(): no params data found [ 131.904978][ T30] audit: type=1400 audit(1758004839.540:276): avc: denied { create } for pid=6653 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.946763][ T30] audit: type=1400 audit(1758004839.540:277): avc: denied { getopt } for pid=6653 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.974099][ T30] audit: type=1400 audit(1758004839.550:278): avc: denied { append } for pid=6653 comm="syz.4.149" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.997568][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.341772][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.348213][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.364436][ T6682] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 132.417770][ T30] audit: type=1400 audit(1758004840.800:279): avc: denied { bind } for pid=6675 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.448820][ T5941] Bluetooth: hci5: Frame reassembly failed (-84) [ 132.549003][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.586945][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.612835][ T6511] bridge_slave_0: entered allmulticast mode [ 132.642187][ T6511] bridge_slave_0: entered promiscuous mode [ 132.697221][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.717243][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.743799][ T6511] bridge_slave_1: entered allmulticast mode [ 132.776402][ T6511] bridge_slave_1: entered promiscuous mode [ 133.002843][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880572ea000: rx timeout, send abort [ 133.009631][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.011782][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880572ea000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 133.341377][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.970819][ T6511] team0: Port device team_slave_0 added [ 134.431157][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 134.437869][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.324416][ T6511] team0: Port device team_slave_1 added [ 135.368646][ T6713] tipc: Can't bind to reserved service type 2 [ 135.376332][ T30] audit: type=1400 audit(1758004843.790:280): avc: denied { bind } for pid=6689 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.065046][ T30] audit: type=1400 audit(1758004843.820:281): avc: denied { name_bind } for pid=6711 comm="syz.1.155" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 136.444878][ T6703] Falling back ldisc for ttyprintk. [ 142.522854][ C0] sched: DL replenish lagged too much [ 193.885550][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.453071][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 243.460030][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6712/1:b..l [ 243.468212][ C0] rcu: (detected by 0, t=10502 jiffies, g=12357, q=625315 ncpus=2) [ 243.476181][ C0] task:syz.2.153 state:R running task stack:27672 pid:6712 tgid:6712 ppid:6693 task_flags:0x40044c flags:0x00004004 [ 243.490252][ C0] Call Trace: [ 243.493524][ C0] [ 243.496443][ C0] __schedule+0x1190/0x5de0 [ 243.500929][ C0] ? __pfx___schedule+0x10/0x10 [ 243.505763][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 243.510786][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 243.516157][ C0] preempt_schedule_common+0x44/0xc0 [ 243.521440][ C0] preempt_schedule_thunk+0x16/0x30 [ 243.526640][ C0] _raw_spin_unlock+0x3e/0x50 [ 243.531311][ C0] unmap_page_range+0xf77/0x42c0 [ 243.536264][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 243.541634][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 243.546574][ C0] ? uprobe_munmap+0x20/0x5c0 [ 243.551260][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 243.557138][ C0] unmap_vmas+0x218/0x470 [ 243.561460][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 243.566307][ C0] exit_mmap+0x1b9/0xb90 [ 243.570551][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 243.575316][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.580080][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 243.585460][ C0] __mmput+0x12a/0x410 [ 243.589528][ C0] mmput+0x62/0x70 [ 243.593252][ C0] do_exit+0x7c7/0x2bf0 [ 243.597419][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.602183][ C0] ? __pfx_do_exit+0x10/0x10 [ 243.606764][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 243.611757][ C0] ? find_held_lock+0x2b/0x80 [ 243.616414][ C0] do_group_exit+0xd3/0x2a0 [ 243.620918][ C0] get_signal+0x2673/0x26d0 [ 243.625415][ C0] ? __hrtimer_setup+0x176/0x280 [ 243.630345][ C0] ? hrtimer_nanosleep+0x187/0x380 [ 243.635455][ C0] ? __pfx_get_signal+0x10/0x10 [ 243.640304][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 243.645501][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 243.651047][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 243.657199][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 243.663340][ C0] exit_to_user_mode_loop+0x84/0x110 [ 243.668622][ C0] do_syscall_64+0x41c/0x4e0 [ 243.673213][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.679102][ C0] RIP: 0033:0x7f34ac7c1465 [ 243.683508][ C0] RSP: 002b:00007f34aa1aff80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 243.691910][ C0] RAX: 0000000000000000 RBX: 00007f34ac9d6360 RCX: 00007f34ac7c1465 [ 243.699871][ C0] RDX: 00007f34aa1affc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.707831][ C0] RBP: 00007f34ac811e19 R08: 0000000000000000 R09: 0000000000000000 [ 243.715776][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 243.723741][ C0] R13: 00007f34ac9d63f8 R14: 00007f34ac9d6360 R15: 00007ffedcb40048 [ 243.731726][ C0] [ 243.734736][ C0] rcu: rcu_preempt kthread starved for 6897 jiffies! g12357 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 243.745837][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 243.755793][ C0] rcu: RCU grace-period kthread stack dump: [ 243.761679][ C0] task:rcu_preempt state:R running task stack:26744 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 243.775127][ C0] Call Trace: [ 243.778397][ C0] [ 243.781316][ C0] __schedule+0x1190/0x5de0 [ 243.785813][ C0] ? __pfx___schedule+0x10/0x10 [ 243.790665][ C0] ? find_held_lock+0x2b/0x80 [ 243.795337][ C0] ? schedule+0x2d7/0x3a0 [ 243.799666][ C0] schedule+0xe7/0x3a0 [ 243.803730][ C0] schedule_timeout+0x123/0x290 [ 243.808568][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 243.813915][ C0] ? __pfx_process_timeout+0x10/0x10 [ 243.819201][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.825001][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 243.830460][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 243.835218][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 243.840494][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.845689][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 243.850620][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 243.855465][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.861261][ C0] rcu_gp_kthread+0x270/0x380 [ 243.865916][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.871106][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.875864][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.881060][ C0] ? __kthread_parkme+0x19e/0x250 [ 243.886088][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.891275][ C0] kthread+0x3c2/0x780 [ 243.895339][ C0] ? __pfx_kthread+0x10/0x10 [ 243.899924][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.904682][ C0] ? __pfx_kthread+0x10/0x10 [ 243.909262][ C0] ret_from_fork+0x56a/0x730 [ 243.913828][ C0] ? __pfx_kthread+0x10/0x10 [ 243.918409][ C0] ret_from_fork_asm+0x1a/0x30 [ 243.923180][ C0] [ 243.926188][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 243.932492][ C0] Sending NMI from CPU 0 to CPUs 1: [ 243.937686][ C1] NMI backtrace for cpu 1 [ 243.937697][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 243.937712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.937719][ C1] RIP: 0010:__lock_acquire+0x12/0x1ce0 [ 243.937739][ C1] Code: 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 55 53 65 4c 8b 2d 86 2c 3f 12 <48> 83 ec 70 8b 1d b8 f0 13 0f 44 89 04 24 48 8b ac 24 a8 00 00 00 [ 243.937751][ C1] RSP: 0018:ffffc90000a07ee0 EFLAGS: 00000006 [ 243.937763][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c15a0 RCX: 0000000000000002 [ 243.937771][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e5c15a0 [ 243.937779][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 243.937787][ C1] R10: 0000000000000003 R11: 00000000000867d4 R12: 0000000000000000 [ 243.937794][ C1] R13: ffff88801e2ea440 R14: 0000000000000000 R15: 0000000000000000 [ 243.937802][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 243.937815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.937824][ C1] CR2: 00007f68659fe768 CR3: 000000003515f000 CR4: 00000000003526f0 [ 243.937832][ C1] Call Trace: [ 243.937836][ C1] [ 243.937842][ C1] lock_acquire+0x179/0x350 [ 243.937853][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 243.937868][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 243.937883][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.937900][ C1] unwind_next_frame+0xd1/0x20a0 [ 243.937914][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 243.937927][ C1] ? synproxy_send_client_synack_ipv6+0x1af/0x7e0 [ 243.937946][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.937963][ C1] arch_stack_walk+0x94/0x100 [ 243.937979][ C1] ? synproxy_send_client_synack_ipv6+0x1af/0x7e0 [ 243.937997][ C1] stack_trace_save+0x8e/0xc0 [ 243.938021][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 243.938038][ C1] ? stack_trace_save+0x8e/0xc0 [ 243.938054][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 243.938070][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 243.938086][ C1] kasan_save_stack+0x33/0x60 [ 243.938099][ C1] ? kasan_save_stack+0x33/0x60 [ 243.938111][ C1] ? kasan_save_track+0x14/0x30 [ 243.938122][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 243.938135][ C1] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 243.938148][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 243.938165][ C1] ? __alloc_skb+0x166/0x380 [ 243.938178][ C1] ? synproxy_send_client_synack_ipv6+0x1af/0x7e0 [ 243.938205][ C1] kasan_save_track+0x14/0x30 [ 243.938217][ C1] __kasan_slab_alloc+0x89/0x90 [ 243.938230][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 243.938243][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 243.938261][ C1] kmalloc_reserve+0x18b/0x2c0 [ 243.938278][ C1] __alloc_skb+0x166/0x380 [ 243.938291][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 243.938306][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 243.938319][ C1] synproxy_send_client_synack_ipv6+0x1af/0x7e0 [ 243.938336][ C1] ? find_held_lock+0x2b/0x80 [ 243.938350][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 243.938367][ C1] ? nft_redir_dump+0x1a0/0x210 [ 243.938384][ C1] nft_synproxy_do_eval+0x93b/0xd80 [ 243.938404][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 243.938426][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 243.938444][ C1] nft_do_chain+0x2e9/0x1920 [ 243.938463][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 243.938479][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.938501][ C1] ? nf_conntrack_in+0x8b0/0x1930 [ 243.938521][ C1] nft_do_chain_inet+0x18a/0x340 [ 243.938539][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 243.938556][ C1] ? __nf_ct_change_timeout+0x180/0x200 [ 243.938575][ C1] ? lock_acquire+0x179/0x350 [ 243.938587][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 243.938604][ C1] nf_hook_slow+0xbb/0x200 [ 243.938619][ C1] nf_hook.constprop.0+0x422/0x750 [ 243.938635][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 243.938650][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 243.938665][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 243.938683][ C1] ip6_input+0xe0/0x2f0 [ 243.938697][ C1] ipv6_rcv+0x264/0x650 [ 243.938711][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 243.938725][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 243.938739][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 243.938753][ C1] ? lock_acquire+0x179/0x350 [ 243.938766][ C1] ? process_backlog+0x3f0/0x15e0 [ 243.938778][ C1] __netif_receive_skb+0x1d/0x160 [ 243.938791][ C1] process_backlog+0x442/0x15e0 [ 243.938806][ C1] __napi_poll.constprop.0+0xba/0x550 [ 243.938819][ C1] ? rcu_is_watching+0x12/0xc0 [ 243.938834][ C1] net_rx_action+0xa9f/0xfe0 [ 243.938850][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 243.938864][ C1] ? sched_balance_domains+0x283/0xee0 [ 243.938886][ C1] handle_softirqs+0x219/0x8e0 [ 243.938902][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 243.938919][ C1] __irq_exit_rcu+0x109/0x170 [ 243.938934][ C1] irq_exit_rcu+0x9/0x30 [ 243.938948][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 243.938963][ C1] [ 243.938967][ C1] [ 243.938971][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.938985][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 243.939000][ C1] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 243.939015][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 243.939025][ C1] RAX: 0000000000f346eb RBX: 0000000000000001 RCX: ffffffff8b94bb49 [ 243.939033][ C1] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 243.939041][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 243.939049][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 243.939057][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab7290 R15: 0000000000000000 [ 243.939068][ C1] ? ct_kernel_exit+0x139/0x190 [ 243.939085][ C1] default_idle+0x13/0x20 [ 243.939101][ C1] default_idle_call+0x6d/0xb0 [ 243.939117][ C1] do_idle+0x391/0x510 [ 243.939132][ C1] ? __pfx_do_idle+0x10/0x10 [ 243.939146][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 243.939160][ C1] ? do_idle+0x8/0x510 [ 243.939174][ C1] cpu_startup_entry+0x4f/0x60 [ 243.939189][ C1] start_secondary+0x21d/0x2b0 [ 243.939207][ C1] ? __pfx_start_secondary+0x10/0x10 [ 243.939226][ C1] common_startup_64+0x13e/0x148 [ 243.939243][ C1] [ 244.570547][ T1297] ieee802154 phy1 wpan1: encryption failed: -22