last executing test programs: 10.871454527s ago: executing program 1 (id=335): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000740)) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x5, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c007fc6adba35326a89fd0712eea8e98875f31b824cb979da00001d27701c94bb1648d50d641e19b3d1e84c65de0fbe604975a82e099e495492dbc5d866434d083db8e4c7302d692c18d9167a6d76224f9b996ca4c622bbe97c378ff96f2966f8ba180b72fe3146b99471579772075548df8f2f3da89f4651ee6658a85606eb7b45f9746af02f202732cd936192610318099e1eba2ca64122aebaf31c08487a24fee253f29a4a11107c08fb6b2a1cd53690faabd8935b96a27083159e4d3351ec811259e8d332c169d15216517584251edf360ac7c4fb7f7abaa5e91a00000000000000", @ANYRES16=r11, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=0x0], 0x1c}}, 0x0) 10.232123941s ago: executing program 0 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) 9.097741803s ago: executing program 2 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x2, 0x3, 0x25, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7800, 0x80, 0x2, 0x6}}) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r2, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) dup2(r3, r1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={0x0, @l2={0x1f, 0x8, @none, 0xfff0, 0x2}, @ethernet={0x306, @local}, @l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0xfffa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x10000, 0x9}) 8.712665029s ago: executing program 0 (id=341): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r0 = io_uring_setup(0x1503, &(0x7f0000000200)={0x0, 0x6078, 0x80, 0x1, 0x32f}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x20, 0x4, 0xbfdff7fd, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) r5 = fcntl$getown(r4, 0x9) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/122, 0x7a}], 0x5, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='mr_alloc\x00', r6, 0x0, 0x5}, 0x18) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 8.635639137s ago: executing program 2 (id=344): socket$l2tp(0x2, 0x2, 0x73) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000001380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x10, "c2d52f", "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"}}, 0x110) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000001280)=@ethtool_drvinfo={0x3, "f6cc49532dce291a08b111500f2ba47b16e01648921465ade660df320bd44305", "64becc012402000e05b7be53a3e0022b823c53fa8b0552730f598abecfa68c19", "e2e92757bbb233cf2acaa7740a8ffb0582ef8d3b508c602389b578f85f5c0ae9", "c000f7e51b3bdc1a03968d549e6f177c53422153e2cff92a497d41173b5029d0", "858d83c3191d671f4b5f6f10e27186dad790ca75d6d6770bff88d34fff6740b1", "1f49d6f3cda22adaec994b12", 0x4, 0x8, 0x14000000, 0x5, 0x2}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x1, 0x9, 0x3}, 0x18) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0x7, 0x3}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r3, 0x5501) 7.953641996s ago: executing program 1 (id=345): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket(0x400000000010, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, &(0x7f000001b240)=""/102400, 0x19000) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x60) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) 7.548951894s ago: executing program 0 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x2, 0x3, 0x25, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7800, 0x80, 0x2, 0x6}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000004c0)=r2) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r4, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={0x0, @l2={0x1f, 0x8, @none, 0xfff0, 0x2}, @ethernet={0x306, @local}, @l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0xfffa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x10000, 0x9}) 7.203276424s ago: executing program 3 (id=349): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0) pipe(&(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r8, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x9f, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r9 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 6.847368807s ago: executing program 1 (id=350): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000003c0)) landlock_create_ruleset(&(0x7f00000000c0)={0x6099, 0x2}, 0x18, 0x0) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) socket$rds(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffe}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0xde, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r10, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b040000000000000000020000005c000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316330b00010068656c703e7200000900010073797a30000000000900020073797a3200001000148e06a5eba1e9c50000001100200000000000000000004000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x9, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x10, 0x5, 0xfffffffc, 0xfffffffd, 0x0, 0xcca7, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) 6.634380973s ago: executing program 0 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) 6.135746947s ago: executing program 2 (id=352): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000003c0)) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffe}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) r5 = syz_io_uring_setup(0xde, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000dc0008804c0000800400098024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e210000000700000000000000000000000000000001d20600003c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e230a01010100000000000000005000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a0000ee0ef749d259ddff0000000000000000000000000003000000060005000400000024000300b08073e8d44e7ff0bfca0f771dbe44bb885c69e269c8e9d835b114293a4ddc6e14000200776732"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b040000000000000000020000005c000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316330b00010068656c703e7200000900010073797a30000000000900020073797a3200001000148e06a5eba1e9c50000001100200000000000000000004000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x9, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x10, 0x5, 0xfffffffc, 0xfffffffd, 0x0, 0xcca7, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r12, 0x5501) 6.029148022s ago: executing program 1 (id=353): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r0 = io_uring_setup(0x1503, &(0x7f0000000200)={0x0, 0x6078, 0x80, 0x1, 0x32f}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x20, 0x4, 0xbfdff7fd, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086603, &(0x7f0000000040)) r4 = fcntl$getown(r3, 0x9) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/122, 0x7a}], 0x5, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 5.378843786s ago: executing program 4 (id=354): sched_setscheduler(0x0, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460fc6040d002000000000000002003e00"], 0x38) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 5.29329944s ago: executing program 1 (id=355): socket(0x1e, 0x4, 0xffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) exit(0x8) getdents(0xffffffffffffffff, 0x0, 0x3b) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) r3 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x14, 0x8, 0x6, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 5.082733491s ago: executing program 4 (id=356): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x6099, 0x2}, 0x18, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffe}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) r5 = syz_io_uring_setup(0xde, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r11, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b040000000000000000020000005c000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316330b00010068656c703e7200000900010073797a30000000000900020073797a3200001000148e06a5eba1e9c50000001100200000000000000000004000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x9, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x10, 0x5, 0xfffffffc, 0xfffffffd, 0x0, 0xcca7, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r12, 0x5501) 5.035069455s ago: executing program 2 (id=357): socket$l2tp(0x2, 0x2, 0x73) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000001380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x10, "c2d52f", "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"}}, 0x110) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000001280)=@ethtool_drvinfo={0x3, "f6cc49532dce291a08b111500f2ba47b16e01648921465ade660df320bd44305", "64becc012402000e05b7be53a3e0022b823c53fa8b0552730f598abecfa68c19", "e2e92757bbb233cf2acaa7740a8ffb0582ef8d3b508c602389b578f85f5c0ae9", "c000f7e51b3bdc1a03968d549e6f177c53422153e2cff92a497d41173b5029d0", "858d83c3191d671f4b5f6f10e27186dad790ca75d6d6770bff88d34fff6740b1", "1f49d6f3cda22adaec994b12", 0x4, 0x8, 0x14000000, 0x5, 0x2}}) 4.946378357s ago: executing program 3 (id=358): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r0 = io_uring_setup(0x1503, &(0x7f0000000200)={0x0, 0x6078, 0x80, 0x1, 0x32f}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x20, 0x4, 0xbfdff7fd, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) r5 = fcntl$getown(r4, 0x9) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/122, 0x7a}], 0x5, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='mr_alloc\x00', r6, 0x0, 0x5}, 0x18) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 4.005072806s ago: executing program 2 (id=359): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100", @ANYRES32, @ANYBLOB="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"], 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.516760777s ago: executing program 4 (id=360): socket$l2tp(0x2, 0x2, 0x73) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000001380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x10, "c2d52f", "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"}}, 0x110) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) 3.471267402s ago: executing program 2 (id=361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$video(0x0, 0xc000, 0x0) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x267) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) 3.271141092s ago: executing program 3 (id=362): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket(0x400000000010, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, &(0x7f000001b240)=""/102400, 0x19000) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x60) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) 3.214694699s ago: executing program 0 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x835, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff], [0x3ff]}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000140)={r12, 0x0, 0x7c, 0x9, 0x2, [], [0x8, 0x19, 0x7, 0x7ff], [0x1, 0x4, 0xffffffff, 0x3], [0x2, 0x5, 0x0, 0x2]}) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r13 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r13, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.665007088s ago: executing program 3 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) close(0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x835, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff], [0x3ff]}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000140)={r11, 0x0, 0x7c, 0x9, 0x2, [], [0x8, 0x19, 0x7, 0x7ff], [0x1, 0x4, 0xffffffff, 0x3], [0x2, 0x5, 0x0, 0x2]}) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.447988353s ago: executing program 4 (id=365): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r0 = io_uring_setup(0x1503, &(0x7f0000000200)={0x0, 0x6078, 0x80, 0x1, 0x32f}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x20, 0x4, 0xbfdff7fd, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086603, &(0x7f0000000040)) r4 = fcntl$getown(r3, 0x9) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/122, 0x7a}], 0x5, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 1.627164215s ago: executing program 4 (id=366): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r0 = io_uring_setup(0x1503, &(0x7f0000000200)={0x0, 0x6078, 0x80, 0x1, 0x32f}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x20, 0x4, 0xbfdff7fd, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086603, &(0x7f0000000040)) r4 = fcntl$getown(r3, 0x9) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/122, 0x7a}], 0x5, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 1.550758377s ago: executing program 3 (id=367): sched_setscheduler(0x0, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460fc6040d002000000000000002003e00"], 0x38) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.523391713s ago: executing program 0 (id=368): r0 = io_uring_setup(0x549d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) 188.673663ms ago: executing program 3 (id=369): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80e02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000f06010200000000000000000a000009000001000700000006000b0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x200006e64, 0x80040) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000000380)=""/88) 164.165989ms ago: executing program 1 (id=370): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020301090212000100000000090438000023522100"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x4000000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000440)={@private2}, &(0x7f0000000480)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x8, 0x40, 0x40, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x1, 0x1, 0x8}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) pread64(r7, 0x0, 0xea, 0x0) 0s ago: executing program 4 (id=371): ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 53.753103][ T30] audit: type=1400 audit(1760485955.903:62): avc: denied { mounton } for pid=5794 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.776711][ T30] audit: type=1400 audit(1760485955.923:63): avc: denied { mount } for pid=5794 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.779635][ T5794] cgroup: Unknown subsys name 'net' [ 53.805504][ T30] audit: type=1400 audit(1760485955.953:64): avc: denied { unmount } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.943596][ T5794] cgroup: Unknown subsys name 'cpuset' [ 53.951576][ T5794] cgroup: Unknown subsys name 'rlimit' [ 54.065686][ T30] audit: type=1400 audit(1760485956.213:65): avc: denied { setattr } for pid=5794 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.098036][ T30] audit: type=1400 audit(1760485956.213:66): avc: denied { create } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.136790][ T30] audit: type=1400 audit(1760485956.213:67): avc: denied { write } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.146212][ T5797] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 54.157749][ T30] audit: type=1400 audit(1760485956.213:68): avc: denied { read } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.186144][ T30] audit: type=1400 audit(1760485956.223:69): avc: denied { mounton } for pid=5794 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 54.210970][ T30] audit: type=1400 audit(1760485956.223:70): avc: denied { mount } for pid=5794 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 54.235093][ T30] audit: type=1400 audit(1760485956.263:71): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.161536][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.455731][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.469443][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.475264][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.488545][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.488840][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.496496][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.503788][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.511178][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.518408][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.524691][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.538518][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.547725][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.547863][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.562995][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.572494][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.580620][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.581188][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.588726][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.609835][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.617601][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.626964][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.634958][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.642736][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.649958][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.658032][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.049244][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 58.131513][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 58.169279][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 58.216653][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 58.246145][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 58.332358][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.339955][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.347630][ T5816] bridge_slave_0: entered allmulticast mode [ 58.354530][ T5816] bridge_slave_0: entered promiscuous mode [ 58.371912][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.378997][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.386262][ T5808] bridge_slave_0: entered allmulticast mode [ 58.393002][ T5808] bridge_slave_0: entered promiscuous mode [ 58.400341][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.407457][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.414544][ T5808] bridge_slave_1: entered allmulticast mode [ 58.421282][ T5808] bridge_slave_1: entered promiscuous mode [ 58.435176][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.442413][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.449493][ T5816] bridge_slave_1: entered allmulticast mode [ 58.456253][ T5816] bridge_slave_1: entered promiscuous mode [ 58.507954][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.549307][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.565743][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.575831][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.582988][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.590070][ T5805] bridge_slave_0: entered allmulticast mode [ 58.597011][ T5805] bridge_slave_0: entered promiscuous mode [ 58.611620][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.618698][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.625876][ T5810] bridge_slave_0: entered allmulticast mode [ 58.632510][ T5810] bridge_slave_0: entered promiscuous mode [ 58.648083][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.657756][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.665510][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.672742][ T5805] bridge_slave_1: entered allmulticast mode [ 58.679408][ T5805] bridge_slave_1: entered promiscuous mode [ 58.686285][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.693877][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.701105][ T5811] bridge_slave_0: entered allmulticast mode [ 58.707715][ T5811] bridge_slave_0: entered promiscuous mode [ 58.714872][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.722079][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.729252][ T5810] bridge_slave_1: entered allmulticast mode [ 58.735980][ T5810] bridge_slave_1: entered promiscuous mode [ 58.743486][ T5808] team0: Port device team_slave_0 added [ 58.780841][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.787983][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.795139][ T5811] bridge_slave_1: entered allmulticast mode [ 58.801934][ T5811] bridge_slave_1: entered promiscuous mode [ 58.809410][ T5808] team0: Port device team_slave_1 added [ 58.824627][ T5816] team0: Port device team_slave_0 added [ 58.832269][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.864224][ T5816] team0: Port device team_slave_1 added [ 58.878125][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.889061][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.913976][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.921167][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.947214][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.967509][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.978328][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.998847][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.005836][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.031713][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.058278][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.068466][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.075452][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.102149][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.118850][ T5810] team0: Port device team_slave_0 added [ 59.139449][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.146513][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.172869][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.191421][ T5810] team0: Port device team_slave_1 added [ 59.198228][ T5805] team0: Port device team_slave_0 added [ 59.213007][ T5811] team0: Port device team_slave_0 added [ 59.244015][ T5805] team0: Port device team_slave_1 added [ 59.258236][ T5811] team0: Port device team_slave_1 added [ 59.286322][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.293565][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.319676][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.341689][ T5808] hsr_slave_0: entered promiscuous mode [ 59.347700][ T5808] hsr_slave_1: entered promiscuous mode [ 59.357560][ T5816] hsr_slave_0: entered promiscuous mode [ 59.363858][ T5816] hsr_slave_1: entered promiscuous mode [ 59.369690][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 59.375490][ T5816] Cannot create hsr debugfs directory [ 59.400427][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.407592][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.434051][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.457757][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.464763][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.491020][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.506594][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.513849][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.540140][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.552122][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.559048][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.584971][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.605411][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.612452][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.638381][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.641808][ T52] Bluetooth: hci0: command tx timeout [ 59.649093][ T5817] Bluetooth: hci1: command tx timeout [ 59.701586][ T5817] Bluetooth: hci3: command tx timeout [ 59.702167][ T52] Bluetooth: hci4: command tx timeout [ 59.707333][ T5825] Bluetooth: hci2: command tx timeout [ 59.735826][ T5810] hsr_slave_0: entered promiscuous mode [ 59.742082][ T5810] hsr_slave_1: entered promiscuous mode [ 59.747932][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 59.754477][ T5810] Cannot create hsr debugfs directory [ 59.799200][ T5805] hsr_slave_0: entered promiscuous mode [ 59.805315][ T5805] hsr_slave_1: entered promiscuous mode [ 59.811349][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 59.817061][ T5805] Cannot create hsr debugfs directory [ 59.838624][ T5811] hsr_slave_0: entered promiscuous mode [ 59.844941][ T5811] hsr_slave_1: entered promiscuous mode [ 59.850776][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 59.856515][ T5811] Cannot create hsr debugfs directory [ 60.142081][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.155147][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.168916][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.178440][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.222185][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.236475][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.246680][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.267905][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.336553][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.345986][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.356089][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.366560][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.439571][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.476373][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.489686][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.500280][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.509920][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.524344][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.547670][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.554795][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.577663][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.584733][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.632242][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.654533][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.681815][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.704595][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.717588][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.732151][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.738981][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.775613][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.782762][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.795201][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 60.795215][ T30] audit: type=1400 audit(1760485962.943:86): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.796271][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.829374][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.884149][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.913440][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.920548][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.963848][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.970990][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.016048][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.046210][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.085843][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.106470][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.113574][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.143937][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.151045][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.163716][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.193500][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.216542][ T5808] veth0_vlan: entered promiscuous mode [ 61.234554][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.247380][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.287840][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.295054][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.355164][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.362263][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.377651][ T5808] veth1_vlan: entered promiscuous mode [ 61.482446][ T5816] veth0_vlan: entered promiscuous mode [ 61.510807][ T5816] veth1_vlan: entered promiscuous mode [ 61.519698][ T5808] veth0_macvtap: entered promiscuous mode [ 61.533062][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.548448][ T5808] veth1_macvtap: entered promiscuous mode [ 61.567180][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.595783][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.619790][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.631710][ T2932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.640815][ T2932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.658846][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.681251][ T991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.690405][ T991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.705771][ T5825] Bluetooth: hci0: command tx timeout [ 61.705843][ T5817] Bluetooth: hci1: command tx timeout [ 61.789585][ T5817] Bluetooth: hci3: command tx timeout [ 61.789721][ T5825] Bluetooth: hci4: command tx timeout [ 61.795023][ T52] Bluetooth: hci2: command tx timeout [ 61.814002][ T5816] veth0_macvtap: entered promiscuous mode [ 61.836337][ T5816] veth1_macvtap: entered promiscuous mode [ 61.886560][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.913207][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.927695][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.954170][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.962844][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.972662][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.991902][ T5805] veth0_vlan: entered promiscuous mode [ 62.008966][ T30] audit: type=1400 audit(1760485964.153:87): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.3zebrF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.032442][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.057066][ T5805] veth1_vlan: entered promiscuous mode [ 62.062687][ T30] audit: type=1400 audit(1760485964.153:88): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.098843][ T30] audit: type=1400 audit(1760485964.153:89): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.3zebrF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.108778][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.124965][ T30] audit: type=1400 audit(1760485964.153:90): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.203406][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.218857][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.228545][ T30] audit: type=1400 audit(1760485964.153:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.3zebrF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.259130][ T30] audit: type=1400 audit(1760485964.153:92): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.3zebrF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.264311][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.288091][ T30] audit: type=1400 audit(1760485964.153:93): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.319868][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.328976][ T30] audit: type=1400 audit(1760485964.193:94): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.356432][ T5805] veth0_macvtap: entered promiscuous mode [ 62.362462][ T30] audit: type=1400 audit(1760485964.193:95): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=6935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.381362][ T5810] veth0_vlan: entered promiscuous mode [ 62.406653][ T5805] veth1_macvtap: entered promiscuous mode [ 62.456504][ T5811] veth0_vlan: entered promiscuous mode [ 62.469321][ T5810] veth1_vlan: entered promiscuous mode [ 62.512566][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.555756][ T5811] veth1_vlan: entered promiscuous mode [ 62.573366][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.643671][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.680988][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.724357][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 62.812524][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.823815][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.836248][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.844884][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.851538][ T5810] veth0_macvtap: entered promiscuous mode [ 62.863207][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.885148][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.897150][ T5810] veth1_macvtap: entered promiscuous mode [ 62.912240][ T5811] veth0_macvtap: entered promiscuous mode [ 62.929944][ T5811] veth1_macvtap: entered promiscuous mode [ 62.989026][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.008002][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.020799][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.063699][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.109536][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.151702][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.176604][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.187126][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.275707][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.276109][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.290540][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.350754][ T5931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.724168][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.732920][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.741773][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.760658][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.770372][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.781923][ T5825] Bluetooth: hci1: command tx timeout [ 63.781940][ T5817] Bluetooth: hci0: command tx timeout [ 63.861062][ T5817] Bluetooth: hci3: command tx timeout [ 63.861103][ T5825] Bluetooth: hci2: command tx timeout [ 63.873324][ T5825] Bluetooth: hci4: command tx timeout [ 63.971855][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.994630][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.140198][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.150021][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.189214][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.215051][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.404208][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.425463][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.899319][ T5950] input: syz1 as /devices/virtual/input/input5 [ 65.031206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.862660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.906559][ T5817] Bluetooth: hci1: command tx timeout [ 65.912130][ T5825] Bluetooth: hci0: command tx timeout [ 65.941391][ T5817] Bluetooth: hci3: command tx timeout [ 65.942711][ T52] Bluetooth: hci4: command tx timeout [ 65.946857][ T5825] Bluetooth: hci2: command tx timeout [ 66.021559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 66.322544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.343207][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 66.343218][ T30] audit: type=1400 audit(1760485968.493:165): avc: denied { read write } for pid=5958 comm="syz.3.9" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.421496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.447884][ T5968] input: syz1 as /devices/virtual/input/input6 [ 66.502133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.561143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.635195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.661910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.737632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.768198][ T30] audit: type=1400 audit(1760485968.493:166): avc: denied { open } for pid=5958 comm="syz.3.9" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.922989][ T30] audit: type=1400 audit(1760485969.063:167): avc: denied { create } for pid=5969 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.093252][ T30] audit: type=1400 audit(1760485969.103:168): avc: denied { read } for pid=5970 comm="syz.1.12" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.118372][ T30] audit: type=1400 audit(1760485969.103:169): avc: denied { open } for pid=5970 comm="syz.1.12" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.218662][ T30] audit: type=1400 audit(1760485969.123:170): avc: denied { ioctl } for pid=5970 comm="syz.1.12" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.366410][ T30] audit: type=1400 audit(1760485969.123:171): avc: denied { set_context_mgr } for pid=5970 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.954166][ T30] audit: type=1400 audit(1760485969.263:172): avc: denied { create } for pid=5970 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.164664][ T30] audit: type=1400 audit(1760485969.413:173): avc: denied { create } for pid=5977 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.242056][ T30] audit: type=1400 audit(1760485969.433:174): avc: denied { map_read map_write } for pid=5977 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.331226][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.760791][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 68.783323][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.824733][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 68.843327][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.855924][ T9] usb 4-1: Product: syz [ 68.860490][ T9] usb 4-1: Manufacturer: syz [ 68.869279][ T9] usb 4-1: SerialNumber: syz [ 68.914583][ T9] usb 4-1: config 0 descriptor?? [ 69.169826][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 69.781890][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 69.942939][ T9] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 69.947814][ T5993] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17'. [ 70.168093][ T24] usb 4-1: USB disconnect, device number 2 [ 70.403931][ T6014] process 'syz.1.22' launched './file1' with NULL argv: empty string added [ 70.906865][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.915103][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.751063][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 71.751083][ T30] audit: type=1400 audit(1760485973.533:187): avc: denied { bind } for pid=6028 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.922360][ T6031] input: syz1 as /devices/virtual/input/input7 [ 71.969876][ T6034] block nbd4: Device being setup by another task [ 71.976618][ T30] audit: type=1400 audit(1760485973.533:188): avc: denied { connect } for pid=6028 comm="syz.3.28" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.976666][ T30] audit: type=1400 audit(1760485973.533:189): avc: denied { setopt } for pid=6028 comm="syz.3.28" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.976703][ T30] audit: type=1400 audit(1760485973.533:190): avc: denied { write } for pid=6028 comm="syz.3.28" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.976740][ T30] audit: type=1400 audit(1760485974.093:191): avc: denied { read } for pid=6026 comm="syz.4.27" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.976774][ T30] audit: type=1400 audit(1760485974.093:192): avc: denied { open } for pid=6026 comm="syz.4.27" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.230796][ T30] audit: type=1400 audit(1760485974.103:193): avc: denied { ioctl } for pid=6026 comm="syz.4.27" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.695503][ T30] audit: type=1400 audit(1760485974.843:194): avc: denied { read write } for pid=6039 comm="syz.1.31" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.721768][ T30] audit: type=1400 audit(1760485974.843:195): avc: denied { open } for pid=6039 comm="syz.1.31" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.775848][ T6026] block nbd4: shutting down sockets [ 73.257336][ T30] audit: type=1400 audit(1760485975.233:196): avc: denied { append } for pid=6039 comm="syz.1.31" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.104184][ T6058] block nbd1: Device being setup by another task [ 74.430224][ T6053] block nbd1: shutting down sockets [ 74.600433][ T5939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.744231][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 74.753086][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 74.760327][ T5825] Bluetooth: hci1: hardware error 0x00 [ 74.766697][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 74.899127][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.935253][ T5939] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 74.944474][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.984601][ T5939] usb 5-1: Product: syz [ 74.988810][ T5939] usb 5-1: Manufacturer: syz [ 74.995302][ T5939] usb 5-1: SerialNumber: syz [ 75.040560][ T6077] lo speed is unknown, defaulting to 1000 [ 75.047305][ T6077] lo speed is unknown, defaulting to 1000 [ 75.061183][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.074174][ T5939] usb 5-1: config 0 descriptor?? [ 75.092734][ T6068] block device autoloading is deprecated and will be removed. [ 75.173057][ T6068] capability: warning: `syz.2.37' uses 32-bit capabilities (legacy support in use) [ 75.191966][ T6077] lo speed is unknown, defaulting to 1000 [ 75.203572][ T5939] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 75.211660][ T6077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.236047][ T6077] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 75.272289][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 75.278973][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.305416][ T9] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 75.317451][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.322659][ T6077] lo speed is unknown, defaulting to 1000 [ 75.337301][ T9] usb 1-1: Product: syz [ 75.362821][ T9] usb 1-1: Manufacturer: syz [ 75.378129][ T9] usb 1-1: SerialNumber: syz [ 75.390286][ T9] usb 1-1: config 0 descriptor?? [ 75.397069][ T6077] lo speed is unknown, defaulting to 1000 [ 75.416920][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 75.432046][ T6077] lo speed is unknown, defaulting to 1000 [ 75.469697][ T6077] lo speed is unknown, defaulting to 1000 [ 75.477223][ T6087] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 75.486383][ T6077] lo speed is unknown, defaulting to 1000 [ 75.600965][ T6066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.39'. [ 75.674972][ T5939] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 75.682217][ T5939] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 75.738769][ T5939] usb 5-1: USB disconnect, device number 2 [ 75.938730][ T6097] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 76.055314][ T1205] cfg80211: failed to load regulatory.db [ 76.159236][ T6100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.41'. [ 76.232966][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 76.371490][ T9] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 76.981094][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 77.012743][ T1205] usb 1-1: USB disconnect, device number 2 [ 77.680643][ T6125] input: syz1 as /devices/virtual/input/input8 [ 78.580077][ T6133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.895120][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.895502][ T6139] batadv_slave_0: entered promiscuous mode [ 79.356081][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 79.356093][ T30] audit: type=1400 audit(1760485981.503:224): avc: denied { connect } for pid=6142 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.755392][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55'. [ 79.796139][ T30] audit: type=1400 audit(1760485981.943:225): avc: denied { create } for pid=6153 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.796470][ T6159] netlink: 56 bytes leftover after parsing attributes in process `syz.2.56'. [ 79.854544][ T30] audit: type=1400 audit(1760485981.943:226): avc: denied { write } for pid=6153 comm="syz.2.56" path="socket:[10273]" dev="sockfs" ino=10273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.990797][ T6145] input: syz0 as /devices/virtual/input/input9 [ 80.150966][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.426187][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 80.489845][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.567556][ T24] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 80.597603][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.605989][ T24] usb 1-1: Product: syz [ 80.638287][ T24] usb 1-1: Manufacturer: syz [ 80.671688][ T24] usb 1-1: SerialNumber: syz [ 80.706177][ T24] usb 1-1: config 0 descriptor?? [ 80.717730][ T6166] input: syz1 as /devices/virtual/input/input10 [ 80.737811][ T24] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 81.239456][ T6158] netlink: 44 bytes leftover after parsing attributes in process `syz.0.57'. [ 81.624503][ T24] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 81.711312][ T24] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 81.747604][ T24] usb 1-1: USB disconnect, device number 3 [ 82.842018][ T6190] ceph: No mds server is up or the cluster is laggy [ 82.851622][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 82.857953][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 83.109614][ T6203] netlink: 56 bytes leftover after parsing attributes in process `syz.1.70'. [ 83.236306][ T6206] tipc: Started in network mode [ 83.247447][ T6206] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.254542][ T30] audit: type=1400 audit(1760485985.373:227): avc: denied { ioctl } for pid=6196 comm="syz.4.69" path="socket:[9616]" dev="sockfs" ino=9616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.783516][ T6208] ceph: No mds server is up or the cluster is laggy [ 83.790664][ T1205] libceph: connect (1)[c::]:6789 error -101 [ 83.799885][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 83.961062][ T6206] tipc: Enabled bearer , priority 10 [ 83.976212][ T6206] tipc: Enabled bearer , priority 0 [ 85.267549][ T5939] tipc: Node number set to 2886997162 [ 86.061932][ T5939] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.254466][ T5939] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 86.271004][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.469417][ T5939] usb 3-1: config 0 descriptor?? [ 86.533529][ T30] audit: type=1400 audit(1760485988.613:228): avc: denied { read write } for pid=6240 comm="syz.0.80" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.073963][ T30] audit: type=1400 audit(1760485988.613:229): avc: denied { open } for pid=6240 comm="syz.0.80" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.109689][ T6247] nvme_fabrics: missing parameter 'transport=%s' [ 87.200440][ T6247] nvme_fabrics: missing parameter 'nqn=%s' [ 87.300255][ T30] audit: type=1400 audit(1760485988.623:230): avc: denied { append } for pid=6240 comm="syz.0.80" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.327356][ T6257] netlink: 56 bytes leftover after parsing attributes in process `syz.3.82'. [ 87.822485][ T6231] input: syz1 as /devices/virtual/input/input12 [ 88.002023][ T30] audit: type=1400 audit(1760485990.153:231): avc: denied { mounton } for pid=6229 comm="syz.2.77" path="/15/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.002081][ T6231] fuse: Unknown parameter '0x000000000000000d' [ 88.312168][ T5939] ath6kl: Failed to read usb control message: -32 [ 88.318671][ T5939] ath6kl: Unable to read the bmi data from the device: -32 [ 88.326033][ T5939] ath6kl: unable to read target info byte count: -32 [ 88.385705][ T5939] ath6kl: Failed to init ath6kl core: -32 [ 88.827600][ T6266] ceph: No mds server is up or the cluster is laggy [ 88.836649][ T5939] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 88.846284][ T24] libceph: connect (1)[c::]:6789 error -101 [ 88.857816][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 88.868503][ T5939] usb 3-1: USB disconnect, device number 2 [ 89.591058][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.975623][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 90.127705][ T5880] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.140209][ T5880] usb 5-1: config 0 has no interface number 0 [ 90.233790][ T5880] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 90.244052][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.292740][ T5880] usb 5-1: Product: syz [ 90.555188][ T5880] usb 5-1: Manufacturer: syz [ 90.560466][ T5880] usb 5-1: SerialNumber: syz [ 90.582974][ T6292] tipc: Started in network mode [ 90.588079][ T6292] tipc: Node identity ac1414aa, cluster identity 4711 [ 90.598248][ T6292] tipc: Enabled bearer , priority 10 [ 90.607323][ T6292] tipc: Enabled bearer , priority 0 [ 91.115093][ T5880] usb 5-1: config 0 descriptor?? [ 91.136685][ T5880] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 91.191720][ T5880] pctv452e: pctv452e_power_ctrl: 1 [ 91.191720][ T5880] [ 91.199052][ T5880] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 91.199052][ T5880] [ 91.257142][ T5880] dvb-usb: bulk message failed: -22 (5/0) [ 91.302835][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.351845][ T5880] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 91.394464][ T30] audit: type=1400 audit(1760485993.543:232): avc: denied { create } for pid=6273 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.395770][ T6274] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.431029][ T5880] usb 5-1: media controller created [ 91.436551][ T5880] dvb-usb: bulk message failed: -22 (8/0) [ 91.456961][ T5880] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 91.482152][ T30] audit: type=1400 audit(1760485993.543:233): avc: denied { setopt } for pid=6273 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.757595][ T9] tipc: Node number set to 2886997162 [ 91.821348][ T30] audit: type=1400 audit(1760485993.543:234): avc: denied { bind } for pid=6273 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.826397][ T5880] dvb-usb: MAC address reading failed. [ 91.883501][ T6274] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 91.922358][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.971259][ T30] audit: type=1400 audit(1760485993.543:235): avc: denied { ioctl } for pid=6273 comm="syz.4.85" path="socket:[9841]" dev="sockfs" ino=9841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.047808][ T5880] DVB: Unable to find symbol stb0899_attach() [ 92.060105][ T5880] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 92.230988][ T5880] rc_core: IR keymap rc-tt-1500 not found [ 92.247771][ T5880] Registered IR keymap rc-empty [ 92.263822][ T5880] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 92.328838][ T6318] netlink: 56 bytes leftover after parsing attributes in process `syz.2.97'. [ 92.806747][ T5880] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input13 [ 92.828399][ T5880] dvb-usb: schedule remote query interval to 100 msecs. [ 92.836959][ T5880] pctv452e: pctv452e_power_ctrl: 0 [ 92.836959][ T5880] [ 92.857200][ T5880] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 92.942064][ T5886] dvb-usb: bulk message failed: -22 (4/0) [ 92.953003][ T5886] dvb-usb: error -22 while querying for an remote control event. [ 93.011061][ T5880] usb 5-1: USB disconnect, device number 3 [ 93.060196][ T30] audit: type=1400 audit(1760485995.193:236): avc: denied { create } for pid=6319 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.714518][ T6324] block nbd4: Device being setup by another task [ 94.022712][ T6333] input: syz1 as /devices/virtual/input/input14 [ 94.022955][ T6328] ceph: No mds server is up or the cluster is laggy [ 94.051218][ T9] libceph: connect (1)[c::]:6789 error -101 [ 94.060715][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 94.139763][ T6319] block nbd4: shutting down sockets [ 94.308314][ T5880] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 94.870956][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.970991][ T30] audit: type=1400 audit(1760485997.103:237): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.110767][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 95.268235][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.396379][ T24] usb 1-1: config 0 descriptor?? [ 95.460003][ T6356] binder: 6350:6356 ioctl c0306201 0 returned -14 [ 95.544052][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 96.356225][ T6339] input: syz1 as /devices/virtual/input/input15 [ 96.398528][ T6339] fuse: Unknown parameter 'fd0x000000000000000d' [ 96.604713][ T24] ath6kl: Failed to read usb control message: -71 [ 96.630791][ T24] ath6kl: Unable to read the bmi data from the device: -71 [ 96.649478][ T24] ath6kl: unable to read target info byte count: -71 [ 96.692355][ T24] ath6kl: Failed to init ath6kl core: -71 [ 96.698458][ T24] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 96.848151][ T24] usb 1-1: USB disconnect, device number 4 [ 97.676270][ T6381] tipc: Started in network mode [ 97.690852][ T6381] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.701568][ T6381] tipc: Enabled bearer , priority 10 [ 98.271262][ T6382] block nbd4: Device being setup by another task [ 98.298446][ T6377] block nbd4: shutting down sockets [ 98.831022][ T24] tipc: Node number set to 2886997162 [ 99.042482][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.048157][ T30] audit: type=1400 audit(1760486001.193:238): avc: denied { ioctl } for pid=6404 comm="syz.1.119" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.229729][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 99.283934][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.549056][ T5880] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 99.585259][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.593524][ T5880] usb 5-1: Product: syz [ 99.597704][ T5880] usb 5-1: Manufacturer: syz [ 99.602479][ T5880] usb 5-1: SerialNumber: syz [ 99.615302][ T6387] input: syz1 as /devices/virtual/input/input16 [ 99.615310][ T5880] usb 5-1: config 0 descriptor?? [ 99.632175][ T6400] block nbd3: shutting down sockets [ 99.669184][ T5880] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 99.914340][ T30] audit: type=1400 audit(1760486002.063:239): avc: denied { sqpoll } for pid=6416 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.979705][ T30] audit: type=1400 audit(1760486002.063:240): avc: denied { write } for pid=6416 comm="syz.2.122" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.125164][ T6421] block nbd3: Device being setup by another task [ 100.664513][ T5880] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 100.767850][ T30] audit: type=1400 audit(1760486002.183:241): avc: denied { override_creds } for pid=6416 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.818507][ T5880] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 101.530720][ T30] audit: type=1326 audit(1760486003.573:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6bd8eec9 code=0x0 [ 101.795112][ T30] audit: type=1400 audit(1760486003.773:243): avc: denied { sys_module } for pid=6392 comm="syz.4.114" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.871804][ T6415] block nbd3: shutting down sockets [ 102.113161][ T6393] netlink: 44 bytes leftover after parsing attributes in process `syz.4.114'. [ 102.169942][ T5880] usb 5-1: USB disconnect, device number 4 [ 102.232388][ T6428] input: syz0 as /devices/virtual/input/input17 [ 105.962419][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.989173][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 106.294030][ T5871] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 106.361059][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.394607][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.402608][ T6500] batadv_slave_0: entered promiscuous mode [ 106.577769][ T5871] usb 3-1: config 0 descriptor?? [ 106.598409][ T6493] siw: device registration error -23 [ 107.110987][ T5880] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.313978][ T6479] input: syz1 as /devices/virtual/input/input18 [ 107.412033][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.422193][ T5880] usb 4-1: config 250 has an invalid interface number: 19 but max is 0 [ 107.430609][ T5880] usb 4-1: config 250 has no interface number 0 [ 107.462077][ T5880] usb 4-1: config 250 interface 19 altsetting 3 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 107.542063][ T5880] usb 4-1: config 250 interface 19 altsetting 3 endpoint 0x88 has invalid maxpacket 53036, setting to 1024 [ 107.574247][ T5880] usb 4-1: config 250 interface 19 altsetting 3 bulk endpoint 0x88 has invalid maxpacket 1024 [ 107.634605][ T5880] usb 4-1: config 250 interface 19 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.662790][ T5871] ath6kl: Failed to read usb control message: -71 [ 107.900203][ T5871] ath6kl: Unable to read the bmi data from the device: -71 [ 107.930998][ T5880] usb 4-1: config 250 interface 19 has no altsetting 0 [ 107.941632][ T5871] ath6kl: unable to read target info byte count: -71 [ 107.960640][ T5880] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=c3.27 [ 107.970357][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.005225][ T5871] ath6kl: Failed to init ath6kl core: -71 [ 108.010957][ T5880] usb 4-1: Product: syz [ 108.010987][ T5880] usb 4-1: Manufacturer: syz [ 108.011002][ T5880] usb 4-1: SerialNumber: syz [ 108.029767][ T6506] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.070850][ T5871] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 108.107129][ T5871] usb 3-1: USB disconnect, device number 3 [ 108.135996][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.143914][ T6534] batadv_slave_0: entered promiscuous mode [ 108.157538][ T6534] binder: 6529:6534 ioctl c0306201 0 returned -14 [ 108.246969][ T6506] binfmt_misc: register: failed to install interpreter file ./file0 [ 108.297179][ T30] audit: type=1400 audit(1760486010.443:244): avc: denied { setopt } for pid=6505 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.684549][ T30] audit: type=1400 audit(1760486010.443:245): avc: denied { write } for pid=6505 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.741598][ T5880] usb 4-1: USB disconnect, device number 3 [ 109.197793][ T6555] debugfs: 'ttyS3' already exists in 'caif_serial' [ 109.734094][ T5880] Process accounting resumed [ 109.744202][ T30] audit: type=1400 audit(1760486011.893:246): avc: denied { write } for pid=6563 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.947143][ T6568] mkiss: ax0: crc mode is auto. [ 110.612439][ T6579] netlink: 56 bytes leftover after parsing attributes in process `syz.2.149'. [ 111.483514][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.530133][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 111.710483][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 111.817358][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 111.971430][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.985796][ T24] usb 5-1: config 0 descriptor?? [ 112.024514][ T30] audit: type=1400 audit(1760486014.173:247): avc: denied { execute } for pid=6605 comm="syz.1.154" name="file1" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.097028][ T30] audit: type=1400 audit(1760486014.193:248): avc: denied { execute_no_trans } for pid=6605 comm="syz.1.154" path="/31/file1" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.175461][ T6586] input: syz0 as /devices/virtual/input/input19 [ 112.562891][ T6602] input: syz0 as /devices/virtual/input/input20 [ 112.653649][ T6584] input: syz1 as /devices/virtual/input/input21 [ 113.790592][ T24] ath6kl: Failed to read usb control message: -32 [ 113.806854][ T24] ath6kl: Unable to read the bmi data from the device: -32 [ 113.895003][ T24] ath6kl: unable to read target info byte count: -32 [ 113.918925][ T24] ath6kl: Failed to init ath6kl core: -32 [ 113.932672][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 114.253086][ T6629] siw: device registration error -23 [ 114.282108][ T24] usb 5-1: USB disconnect, device number 5 [ 115.650618][ T30] audit: type=1326 audit(1760486017.523:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.3.156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3bc78eec9 code=0x0 [ 116.487001][ T6672] input: syz1 as /devices/virtual/input/input22 [ 118.147745][ T5825] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 118.156950][ T5825] Bluetooth: hci3: Injecting HCI hardware error event [ 118.165085][ T52] Bluetooth: hci3: hardware error 0x00 [ 118.610272][ T5871] Process accounting resumed [ 118.971810][ T6697] mkiss: ax0: crc mode is auto. [ 120.711414][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 121.106351][ T30] audit: type=1326 audit(1760486023.253:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc98898eec9 code=0x0 [ 121.927995][ T9] Process accounting resumed [ 122.808078][ T6751] input: syz1 as /devices/virtual/input/input23 [ 126.335265][ T30] audit: type=1326 audit(1760486028.453:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.4.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff781b8eec9 code=0x0 [ 128.296304][ T6812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.304314][ T6812] batadv_slave_0: entered promiscuous mode [ 128.344387][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'. [ 128.612051][ T6814] input: syz0 as /devices/virtual/input/input24 [ 128.662345][ T30] audit: type=1400 audit(1760486030.813:252): avc: denied { ioctl } for pid=6804 comm="syz.4.194" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 128.702783][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.192'. [ 128.912141][ T6800] input: syz0 as /devices/virtual/input/input25 [ 129.028765][ T6823] tipc: Enabling of bearer rejected, already enabled [ 129.043460][ T6823] tipc: Enabled bearer , priority 0 [ 131.463360][ T6855] input: syz1 as /devices/virtual/input/input26 [ 131.519714][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 132.431534][ T6848] nvme_fabrics: missing parameter 'transport=%s' [ 132.437884][ T6848] nvme_fabrics: missing parameter 'nqn=%s' [ 133.230926][ T30] audit: type=1326 audit(1760486035.143:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.3.204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3bc78eec9 code=0x0 [ 133.381514][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.387825][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.468247][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'. [ 134.613034][ T5940] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.893755][ T6893] input: syz1 as /devices/virtual/input/input27 [ 135.046265][ T6895] input: syz1 as /devices/virtual/input/input28 [ 135.332171][ T5940] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 135.440559][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.512074][ T5940] usb 3-1: config 0 descriptor?? [ 135.639331][ T6897] debugfs: 'ttyS3' already exists in 'caif_serial' [ 136.513574][ T6885] input: syz1 as /devices/virtual/input/input29 [ 137.712004][ T5940] ath6kl: Failed to read usb control message: -71 [ 137.725767][ T5940] ath6kl: Unable to read the bmi data from the device: -71 [ 137.746973][ T5940] ath6kl: unable to read target info byte count: -71 [ 137.795201][ T5940] ath6kl: Failed to init ath6kl core: -71 [ 137.831681][ T6942] block nbd0: Device being setup by another task [ 137.841318][ T5940] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 138.274216][ T5940] usb 3-1: USB disconnect, device number 4 [ 138.403786][ T6935] block nbd0: shutting down sockets [ 139.605948][ T30] audit: type=1326 audit(1760486041.753:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.1.219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f985698eec9 code=0x0 [ 140.112211][ T6961] input: syz1 as /devices/virtual/input/input30 [ 140.830995][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.013034][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 141.028811][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.079142][ T9] usb 4-1: config 0 descriptor?? [ 141.401283][ T6978] block nbd0: shutting down sockets [ 142.034507][ T6971] input: syz1 as /devices/virtual/input/input31 [ 142.137440][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 142.157395][ T6993] input: syz0 as /devices/virtual/input/input32 [ 142.258477][ T9] ath6kl: Failed to read usb control message: -32 [ 142.265079][ T9] ath6kl: Unable to read the bmi data from the device: -32 [ 142.312768][ T9] ath6kl: unable to read target info byte count: -32 [ 142.340553][ T9] ath6kl: Failed to init ath6kl core: -32 [ 142.370773][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 142.402654][ T9] usb 4-1: USB disconnect, device number 4 [ 143.544058][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.854963][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 144.237611][ T42] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 144.288741][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.300418][ T42] usb 2-1: config 0 descriptor?? [ 144.875100][ T7030] input: syz1 as /devices/virtual/input/input33 [ 145.222562][ T7008] input: syz1 as /devices/virtual/input/input34 [ 146.064980][ T30] audit: type=1326 audit(1760486048.213:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff781b8eec9 code=0x0 [ 146.573720][ T42] ath6kl: Failed to read usb control message: -32 [ 146.614970][ T42] ath6kl: Unable to read the bmi data from the device: -32 [ 146.880938][ T42] ath6kl: unable to read target info byte count: -32 [ 146.979983][ T42] ath6kl: Failed to init ath6kl core: -32 [ 147.049507][ T42] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 147.092858][ T42] usb 2-1: USB disconnect, device number 2 [ 147.780485][ T30] audit: type=1326 audit(1760486049.923:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6bd8eec9 code=0x0 [ 148.913981][ T7077] block nbd0: Device being setup by another task [ 149.674475][ T7081] input: syz1 as /devices/virtual/input/input35 [ 150.002618][ T7073] block nbd0: shutting down sockets [ 150.106045][ T7078] block nbd4: shutting down sockets [ 150.934934][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 150.946134][ T7100] tipc: Started in network mode [ 150.954738][ T7100] tipc: Node identity ac1414aa, cluster identity 4711 [ 150.969374][ T7100] tipc: Enabled bearer , priority 10 [ 150.988901][ T7100] tipc: Enabled bearer , priority 0 [ 152.093737][ T5940] tipc: Node number set to 2886997162 [ 155.298755][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.470949][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 155.478482][ T7159] block nbd1: shutting down sockets [ 155.497981][ T5886] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 155.519782][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.570141][ T5886] usb 1-1: config 0 descriptor?? [ 155.586200][ T5886] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 155.618402][ T5886] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 155.918857][ T5886] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 155.947194][ T5886] usb 1-1: USB disconnect, device number 5 [ 156.141281][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.301059][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.308640][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 156.323756][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.339809][ T9] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 156.350291][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.364391][ T9] usb 3-1: Product: syz [ 156.368642][ T9] usb 3-1: Manufacturer: syz [ 156.376945][ T9] usb 3-1: SerialNumber: syz [ 156.393673][ T9] usb 3-1: config 0 descriptor?? [ 156.405165][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 156.461038][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 156.474680][ T5880] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 156.504265][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.584096][ T5880] usb 2-1: config 0 descriptor?? [ 156.617716][ T5880] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 156.632826][ T5880] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 157.213124][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 157.316803][ T5880] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 157.338457][ T9] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 157.479383][ T5880] usb 2-1: USB disconnect, device number 3 [ 157.857787][ T7169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.261'. [ 157.897961][ T7213] tipc: Started in network mode [ 157.902991][ T7213] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.910937][ T7213] tipc: Enabled bearer , priority 10 [ 157.920078][ T7213] tipc: Enabled bearer , priority 0 [ 158.094087][ T42] usb 3-1: USB disconnect, device number 5 [ 159.025333][ T9] tipc: Node number set to 2886997162 [ 160.554878][ T7237] block nbd1: shutting down sockets [ 160.881201][ T5940] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.231146][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 161.407703][ T5940] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 161.572568][ T5940] usb 4-1: config 0 has no interface number 0 [ 161.610004][ T5940] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 161.626806][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.669283][ T5940] usb 4-1: Product: syz [ 161.687057][ T5940] usb 4-1: Manufacturer: syz [ 161.706866][ T5940] usb 4-1: SerialNumber: syz [ 161.726717][ T7268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'. [ 161.763132][ T5940] usb 4-1: config 0 descriptor?? [ 161.779654][ T5940] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 161.796974][ T7266] input: syz0 as /devices/virtual/input/input36 [ 161.803600][ T5940] pctv452e: pctv452e_power_ctrl: 1 [ 161.803600][ T5940] [ 161.812361][ T5940] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 161.812361][ T5940] [ 161.823174][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 161.830995][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.843989][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.873796][ T5940] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 161.903514][ T5940] usb 4-1: media controller created [ 161.920800][ T5940] dvb-usb: bulk message failed: -22 (8/0) [ 161.976146][ T5940] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 162.035993][ T7249] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 162.046214][ T5940] dvb-usb: MAC address reading failed. [ 162.052364][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 162.081369][ T9] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 162.089641][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.170641][ T9] usb 1-1: config 0 has no interface number 0 [ 162.195032][ T5940] DVB: Unable to find symbol stb0899_attach() [ 162.195574][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 162.208869][ T5940] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 162.233918][ T7280] tipc: Enabling of bearer rejected, already enabled [ 162.253652][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.270729][ T9] usb 1-1: Product: syz [ 162.280754][ T9] usb 1-1: Manufacturer: syz [ 162.288370][ T9] usb 1-1: SerialNumber: syz [ 162.301641][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.312112][ T9] usb 1-1: config 0 descriptor?? [ 162.425720][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 162.452428][ T5880] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 162.468637][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 162.468637][ T9] [ 162.484631][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.500453][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 162.500453][ T9] [ 162.514286][ T5880] usb 2-1: config 0 descriptor?? [ 162.551176][ T5940] rc_core: IR keymap rc-tt-1500 not found [ 162.581176][ T5940] Registered IR keymap rc-empty [ 162.588986][ T5940] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 162.601604][ T5940] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input37 [ 162.618069][ T5940] dvb-usb: schedule remote query interval to 100 msecs. [ 162.637607][ T5940] pctv452e: pctv452e_power_ctrl: 0 [ 162.637607][ T5940] [ 162.648028][ T7263] Zero length message leads to an empty skb [ 162.660192][ T5940] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 162.669850][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 162.694235][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.695725][ T5940] usb 4-1: USB disconnect, device number 5 [ 162.746440][ T7263] pctv452e: I2C error -22; AA 03 00 00 EA -> 00 00 00 00 00 00 00 [ 162.775132][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 162.776107][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 162.800726][ T24] dvb-usb: error -22 while querying for an remote control event. [ 163.041114][ T9] usb 1-1: media controller created [ 163.053807][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 163.059564][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 163.111671][ T9] dvb-usb: MAC address reading failed. [ 163.138810][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.215224][ T7272] input: syz1 as /devices/virtual/input/input38 [ 163.221905][ T9] DVB: Unable to find symbol stb0899_attach() [ 163.228007][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 163.320932][ T9] rc_core: IR keymap rc-tt-1500 not found [ 163.335386][ T9] Registered IR keymap rc-empty [ 163.381185][ T9] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 163.444562][ T5940] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 163.496796][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input39 [ 163.563092][ T5880] ath6kl: Failed to read usb control message: -32 [ 163.569813][ T5880] ath6kl: Unable to read the bmi data from the device: -32 [ 163.595198][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 163.609594][ T5880] ath6kl: unable to read target info byte count: -32 [ 163.620948][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 163.620948][ T9] [ 163.645809][ T5880] ath6kl: Failed to init ath6kl core: -32 [ 163.672059][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 163.685786][ T5880] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 163.735538][ T5886] dvb-usb: bulk message failed: -22 (4/0) [ 163.751864][ T5886] dvb-usb: error -22 while querying for an remote control event. [ 163.779878][ T9] usb 1-1: USB disconnect, device number 6 [ 163.794490][ T5880] usb 2-1: USB disconnect, device number 4 [ 163.815931][ T5940] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.031382][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 164.212650][ T5940] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 164.282935][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 164.490162][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.561981][ T5940] usb 4-1: config 0 descriptor?? [ 164.696514][ T5940] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 164.825671][ T7318] siw: device registration error -23 [ 164.978000][ T5940] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 164.991283][ T5940] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 165.212937][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 165.836561][ T5886] usb 4-1: USB disconnect, device number 6 [ 165.917400][ T7341] tipc: Enabling of bearer rejected, already enabled [ 166.043064][ T7341] tipc: Enabling of bearer rejected, already enabled [ 166.256775][ T7347] nvme_fabrics: missing parameter 'transport=%s' [ 166.264567][ T7347] nvme_fabrics: missing parameter 'nqn=%s' [ 167.565315][ T7359] input: syz1 as /devices/virtual/input/input40 [ 168.248840][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 168.590962][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.311044][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 169.426522][ T5886] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 169.454036][ T5886] usb 5-1: config 0 has no interface number 0 [ 169.477728][ T5886] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 169.509985][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.522221][ T5886] usb 5-1: Product: syz [ 169.526404][ T5886] usb 5-1: Manufacturer: syz [ 169.532160][ T5886] usb 5-1: SerialNumber: syz [ 169.551733][ T5886] usb 5-1: config 0 descriptor?? [ 169.670734][ T5886] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 169.981308][ T5886] pctv452e: pctv452e_power_ctrl: 1 [ 169.981308][ T5886] [ 169.991793][ T5886] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 169.991793][ T5886] [ 170.002824][ T5886] dvb-usb: bulk message failed: -22 (5/0) [ 170.064346][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.095536][ T5886] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 170.104426][ T5886] usb 5-1: media controller created [ 170.109641][ T5886] dvb-usb: bulk message failed: -22 (8/0) [ 170.116048][ T5886] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 170.183384][ T5886] dvb-usb: MAC address reading failed. [ 170.597775][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.646223][ T7384] nvme_fabrics: missing parameter 'transport=%s' [ 170.653230][ T7384] nvme_fabrics: missing parameter 'nqn=%s' [ 170.935382][ T7400] tipc: Enabling of bearer rejected, already enabled [ 170.945128][ T7400] tipc: Enabling of bearer rejected, already enabled [ 172.196858][ T5886] DVB: Unable to find symbol stb0899_attach() [ 172.203344][ T5886] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 173.002864][ T5886] rc_core: IR keymap rc-tt-1500 not found [ 173.024497][ T5886] Registered IR keymap rc-empty [ 173.176792][ T5886] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 173.299531][ T7414] input: syz1 as /devices/virtual/input/input42 [ 173.403172][ T5886] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input41 [ 173.415788][ T5886] dvb-usb: schedule remote query interval to 100 msecs. [ 173.422882][ T5886] pctv452e: pctv452e_power_ctrl: 0 [ 173.422882][ T5886] [ 173.430438][ T5886] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 173.527870][ T5886] usb 5-1: USB disconnect, device number 6 [ 173.549414][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 173.560803][ T9] dvb-usb: error -22 while querying for an remote control event. [ 173.618498][ T5886] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 174.003435][ T5886] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.230256][ T7426] block nbd1: shutting down sockets [ 174.353121][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.368053][ T5886] usb 5-1: config 250 has an invalid interface number: 19 but max is 0 [ 174.631362][ T5886] usb 5-1: config 250 has no interface number 0 [ 174.746817][ T5886] usb 5-1: config 250 interface 19 altsetting 3 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 174.780663][ T7435] nvme_fabrics: missing parameter 'transport=%s' [ 174.787096][ T5886] usb 5-1: config 250 interface 19 altsetting 3 endpoint 0x88 has invalid maxpacket 53036, setting to 1024 [ 174.787157][ T7435] nvme_fabrics: missing parameter 'nqn=%s' [ 174.829024][ T5886] usb 5-1: config 250 interface 19 altsetting 3 bulk endpoint 0x88 has invalid maxpacket 1024 [ 174.874009][ T5886] usb 5-1: config 250 interface 19 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.960934][ T5886] usb 5-1: config 250 interface 19 has no altsetting 0 [ 175.012736][ T5886] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=c3.27 [ 175.058711][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.080931][ T5886] usb 5-1: Product: syz [ 175.089420][ T5886] usb 5-1: Manufacturer: syz [ 175.100918][ T5886] usb 5-1: SerialNumber: syz [ 175.116074][ T7420] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.759261][ T7420] binfmt_misc: register: failed to install interpreter file ./file0 [ 175.809350][ T30] audit: type=1400 audit(1760486077.953:257): avc: denied { bind } for pid=7416 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.868723][ T30] audit: type=1400 audit(1760486077.953:258): avc: denied { name_bind } for pid=7416 comm="syz.4.309" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 176.000983][ T30] audit: type=1400 audit(1760486077.953:259): avc: denied { node_bind } for pid=7416 comm="syz.4.309" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 176.037769][ T7454] nvme_fabrics: missing parameter 'transport=%s' [ 176.046429][ T7454] nvme_fabrics: missing parameter 'nqn=%s' [ 176.175640][ T5886] usb 5-1: USB disconnect, device number 7 [ 176.942615][ T7467] netlink: 56 bytes leftover after parsing attributes in process `syz.3.320'. [ 177.851955][ T7478] input: syz1 as /devices/virtual/input/input43 [ 179.015302][ T7480] block nbd3: Device being setup by another task [ 179.043720][ T7480] block nbd3: shutting down sockets [ 179.364724][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 180.542660][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 180.548735][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 180.555109][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 180.652063][ T30] audit: type=1326 audit(1760486082.803:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3bc78eec9 code=0x0 [ 180.726368][ T7489] input: syz1 as /devices/virtual/input/input44 [ 181.144042][ T7507] siw: device registration error -23 [ 181.772365][ T5886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 182.044934][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 182.054256][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.085428][ T5886] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 182.096331][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.106258][ T5886] usb 4-1: Product: syz [ 182.110449][ T5886] usb 4-1: Manufacturer: syz [ 182.118106][ T5886] usb 4-1: SerialNumber: syz [ 182.137436][ T5886] usb 4-1: config 0 descriptor?? [ 182.448696][ T5886] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 183.020661][ T7521] siw: device registration error -23 [ 183.106947][ T7510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.332'. [ 183.170959][ T5880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.183821][ T5886] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 183.263808][ T5886] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 183.352122][ T5886] usb 4-1: USB disconnect, device number 7 [ 183.369401][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 183.411143][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.432689][ T5880] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 183.442113][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.452829][ T5880] usb 2-1: Product: syz [ 183.456993][ T5880] usb 2-1: Manufacturer: syz [ 183.480292][ T5880] usb 2-1: SerialNumber: syz [ 183.496122][ T5880] usb 2-1: config 0 descriptor?? [ 183.505623][ T5880] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 183.906931][ T5886] Process accounting resumed [ 184.077522][ T7539] mkiss: ax0: crc mode is auto. [ 184.224865][ T7526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.335'. [ 184.236268][ T5880] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 184.261282][ T5880] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 184.611448][ T42] usb 2-1: USB disconnect, device number 5 [ 186.421312][ T5886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.602410][ T7580] tipc: Enabling of bearer rejected, already enabled [ 186.661604][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 186.668711][ T5886] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 186.689710][ T5886] usb 5-1: config 0 has no interface number 0 [ 186.697938][ T5886] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 186.707435][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.716841][ T5886] usb 5-1: Product: syz [ 186.731161][ T5886] usb 5-1: Manufacturer: syz [ 186.744254][ T5886] usb 5-1: SerialNumber: syz [ 186.757715][ T7560] input: syz1 as /devices/virtual/input/input45 [ 186.784602][ T5886] usb 5-1: config 0 descriptor?? [ 186.885531][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 186.910459][ T30] audit: type=1400 audit(1760486089.053:261): avc: denied { read } for pid=7579 comm="syz.1.350" path="socket:[15056]" dev="sockfs" ino=15056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.942377][ T5886] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 186.958139][ T5886] pctv452e: pctv452e_power_ctrl: 1 [ 186.958139][ T5886] [ 187.046685][ T5886] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 187.046685][ T5886] [ 187.069676][ T5886] dvb-usb: bulk message failed: -22 (5/0) [ 187.087492][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.115209][ T7574] pctv452e: I2C error -22; AA 01 00 00 EA -> 00 00 00 00 00 00 00 [ 187.128068][ T7581] input: syz0 as /devices/virtual/input/input46 [ 187.136550][ T5886] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 187.187351][ T5886] usb 5-1: media controller created [ 187.241667][ T5886] dvb-usb: bulk message failed: -22 (8/0) [ 187.269976][ T5886] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 187.343978][ T5886] dvb-usb: MAC address reading failed. [ 187.496853][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.745741][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'. [ 188.015332][ T7595] input: syz0 as /devices/virtual/input/input47 [ 188.206164][ T5886] DVB: Unable to find symbol stb0899_attach() [ 188.212319][ T5886] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 188.451123][ T5886] rc_core: IR keymap rc-tt-1500 not found [ 188.572108][ T5886] Registered IR keymap rc-empty [ 189.128879][ T5886] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 189.363452][ T5886] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input48 [ 189.393513][ T5886] dvb-usb: schedule remote query interval to 100 msecs. [ 189.405120][ T5886] pctv452e: pctv452e_power_ctrl: 0 [ 189.405120][ T5886] [ 189.415434][ T5886] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 189.427693][ T5886] usb 5-1: USB disconnect, device number 8 [ 189.522002][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'. [ 189.664022][ T5886] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 189.682349][ T7616] input: syz0 as /devices/virtual/input/input49 [ 190.247848][ T7630] netlink: 56 bytes leftover after parsing attributes in process `syz.2.361'. [ 191.300914][ T7637] block nbd3: Device being setup by another task [ 191.681657][ T7635] block nbd3: shutting down sockets [ 191.721372][ T7632] block nbd0: shutting down sockets [ 193.141141][ T30] audit: type=1326 audit(1760486095.043:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc98898eec9 code=0x0 [ 193.210943][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 193.842582][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.848896][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.380821][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 298.387814][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P60/1:b..l [ 298.395743][ C1] rcu: (detected by 1, t=10502 jiffies, g=16517, q=895 ncpus=2) [ 298.403426][ C1] task:kworker/u8:4 state:R running task stack:24424 pid:60 tgid:60 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 298.417220][ C1] Workqueue: iou_exit io_ring_exit_work [ 298.422747][ C1] Call Trace: [ 298.425997][ C1] [ 298.428901][ C1] __schedule+0x1190/0x5de0 [ 298.433384][ C1] ? __pfx___schedule+0x10/0x10 [ 298.438207][ C1] ? mark_held_locks+0x49/0x80 [ 298.442943][ C1] preempt_schedule_irq+0x51/0x90 [ 298.447936][ C1] irqentry_exit+0x36/0x90 [ 298.452331][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.458296][ C1] RIP: 0010:__orc_find+0x4/0xf0 [ 298.463130][ C1] Code: 90 90 90 90 90 90 48 8b 07 e9 98 dc fc 09 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 <41> 55 49 89 cd 89 d1 41 54 4c 8d 64 8f fc 55 53 48 83 ec 08 85 d2 [ 298.482713][ C1] RSP: 0018:ffffc9000211f310 EFLAGS: 00000202 [ 298.488751][ C1] RAX: ffffffff915180d6 RBX: 0000000000000001 RCX: ffffffff8498c116 [ 298.496706][ C1] RDX: 0000000000000001 RSI: ffffffff915180d6 RDI: ffffffff90bab584 [ 298.504741][ C1] RBP: ffffc9000211f3e0 R08: ffffffff915180dc R09: 0000000000000000 [ 298.512700][ C1] R10: 0000000000000000 R11: 00000000000398c1 R12: ffffc9000211f3e8 [ 298.520649][ C1] R13: ffffc9000211f398 R14: ffffc9000211f3cd R15: ffffffff8498c116 [ 298.528587][ C1] ? io_ring_exit_work+0x386/0x10f0 [ 298.533769][ C1] ? io_ring_exit_work+0x386/0x10f0 [ 298.538937][ C1] ? io_ring_exit_work+0x386/0x10f0 [ 298.544100][ C1] unwind_next_frame+0x2ec/0x20a0 [ 298.549103][ C1] ? io_ring_exit_work+0x387/0x10f0 [ 298.554269][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.560391][ C1] arch_stack_walk+0x94/0x100 [ 298.565040][ C1] ? io_ring_exit_work+0x387/0x10f0 [ 298.570206][ C1] stack_trace_save+0x8e/0xc0 [ 298.574860][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 298.580207][ C1] kasan_save_stack+0x33/0x60 [ 298.584856][ C1] ? kasan_save_stack+0x33/0x60 [ 298.589683][ C1] ? kasan_save_track+0x14/0x30 [ 298.594514][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 298.599525][ C1] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 298.605127][ C1] ? kmem_alloc_batch+0x49/0x170 [ 298.610039][ C1] ? debug_objects_fill_pool+0x23f/0x520 [ 298.615644][ C1] ? debug_object_activate+0x10b/0x4c0 [ 298.621073][ C1] ? __call_rcu_common.constprop.0+0x35/0xa10 [ 298.627111][ C1] ? kmem_cache_free+0x171/0x6c0 [ 298.632020][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 298.637368][ C1] ? io_ring_exit_work+0x387/0x10f0 [ 298.642549][ C1] kasan_save_track+0x14/0x30 [ 298.647216][ C1] __kasan_slab_alloc+0x89/0x90 [ 298.652041][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 298.657468][ C1] ? kmem_alloc_batch+0x49/0x170 [ 298.662379][ C1] ? kmem_alloc_batch+0x49/0x170 [ 298.667288][ C1] kmem_alloc_batch+0x49/0x170 [ 298.672048][ C1] debug_objects_fill_pool+0x23f/0x520 [ 298.677481][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 298.682409][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 298.688366][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 298.694502][ C1] debug_object_activate+0x10b/0x4c0 [ 298.699764][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 298.705548][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 298.711694][ C1] __call_rcu_common.constprop.0+0x35/0xa10 [ 298.717572][ C1] kmem_cache_free+0x171/0x6c0 [ 298.722307][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 298.727660][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 298.733011][ C1] __io_req_caches_free+0x19e/0x5c0 [ 298.738189][ C1] io_ring_exit_work+0x387/0x10f0 [ 298.743186][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 298.748188][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 298.753615][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 298.758524][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.764302][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 298.769916][ C1] ? rcu_is_watching+0x12/0xc0 [ 298.774659][ C1] process_one_work+0x9cf/0x1b70 [ 298.779575][ C1] ? __pfx_process_one_work+0x10/0x10 [ 298.784936][ C1] ? assign_work+0x1a0/0x250 [ 298.789507][ C1] worker_thread+0x6c8/0xf10 [ 298.794079][ C1] ? __pfx_worker_thread+0x10/0x10 [ 298.799161][ C1] kthread+0x3c5/0x780 [ 298.803201][ C1] ? __pfx_kthread+0x10/0x10 [ 298.807772][ C1] ? rcu_is_watching+0x12/0xc0 [ 298.812505][ C1] ? __pfx_kthread+0x10/0x10 [ 298.817067][ C1] ret_from_fork+0x675/0x7d0 [ 298.821632][ C1] ? __pfx_kthread+0x10/0x10 [ 298.826191][ C1] ret_from_fork_asm+0x1a/0x30 [ 298.830928][ C1] [ 298.833917][ C1] rcu: rcu_preempt kthread starved for 9930 jiffies! g16517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 298.844987][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 298.854921][ C1] rcu: RCU grace-period kthread stack dump: [ 298.860773][ C1] task:rcu_preempt state:R running task stack:28232 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 298.874214][ C1] Call Trace: [ 298.877465][ C1] [ 298.880369][ C1] __schedule+0x1190/0x5de0 [ 298.884863][ C1] ? __pfx___schedule+0x10/0x10 [ 298.889700][ C1] ? find_held_lock+0x2b/0x80 [ 298.894357][ C1] ? schedule+0x2d7/0x3a0 [ 298.898663][ C1] schedule+0xe7/0x3a0 [ 298.902706][ C1] schedule_timeout+0x123/0x290 [ 298.907525][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 298.912872][ C1] ? __pfx_process_timeout+0x10/0x10 [ 298.918126][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.923901][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 298.929330][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 298.934067][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 298.939325][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.944492][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 298.949398][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 298.954220][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 298.959995][ C1] rcu_gp_kthread+0x26d/0x380 [ 298.964642][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 298.969810][ C1] ? rcu_is_watching+0x12/0xc0 [ 298.974540][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.979707][ C1] ? __kthread_parkme+0x19e/0x250 [ 298.984702][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 298.989891][ C1] kthread+0x3c5/0x780 [ 298.993933][ C1] ? __pfx_kthread+0x10/0x10 [ 298.998494][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.003229][ C1] ? __pfx_kthread+0x10/0x10 [ 299.007791][ C1] ret_from_fork+0x675/0x7d0 [ 299.012350][ C1] ? __pfx_kthread+0x10/0x10 [ 299.016927][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.021665][ C1] [ 299.024656][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 299.030943][ C1] Sending NMI from CPU 1 to CPUs 0: [ 299.036135][ C0] NMI backtrace for cpu 0 [ 299.036146][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 299.036161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.036169][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 299.036186][ C0] Code: f7 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 05 24 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 299.036198][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 299.036209][ C0] RAX: 0000000001096cfd RBX: 0000000000000000 RCX: ffffffff8b6622a9 [ 299.036218][ C0] RDX: 0000000000000000 RSI: ffffffff8db0330f RDI: ffffffff8bf1e2c0 [ 299.036226][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 299.036235][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 299.036243][ C0] R13: ffffffff8e097a00 R14: ffffffff90832dd0 R15: 0000000000000000 [ 299.036251][ C0] FS: 0000000000000000(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 299.036264][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.036273][ C0] CR2: 00007f9fe1026941 CR3: 00000000315d4000 CR4: 00000000003526f0 [ 299.036281][ C0] Call Trace: [ 299.036286][ C0] [ 299.036290][ C0] default_idle+0x13/0x20 [ 299.036306][ C0] default_idle_call+0x6c/0xb0 [ 299.036337][ C0] do_idle+0x38d/0x500 [ 299.036350][ C0] ? __pfx_do_idle+0x10/0x10 [ 299.036361][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 299.036381][ C0] cpu_startup_entry+0x4f/0x60 [ 299.036393][ C0] rest_init+0x16b/0x2b0 [ 299.036410][ C0] ? acpi_subsystem_init+0x133/0x180 [ 299.036424][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 299.036440][ C0] start_kernel+0x3f6/0x4e0 [ 299.036454][ C0] x86_64_start_reservations+0x18/0x30 [ 299.036468][ C0] x86_64_start_kernel+0x130/0x190 [ 299.036482][ C0] common_startup_64+0x13e/0x148 [ 299.036505][ C0]