last executing test programs: 7.687181202s ago: executing program 3 (id=38): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000004180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}) 7.481477887s ago: executing program 3 (id=41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99", 0x60, 0x840, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e23, @in=@broadcast}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.643088209s ago: executing program 3 (id=49): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6.017786495s ago: executing program 4 (id=54): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.433579845s ago: executing program 4 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], 0x69) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.433052361s ago: executing program 3 (id=58): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd50301001774004095000000000000006916360000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x7, 0x8, 0x2}]}, 0x10) 5.431603712s ago: executing program 0 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd2f, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0xd, 0x5, {[0x5, 0xa, 0x4ac8, 0x9, 0x8, 0x8, 0x5, 0x1]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.288839765s ago: executing program 0 (id=61): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080005"], 0x44}}, 0x0) 4.727321087s ago: executing program 0 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.372613866s ago: executing program 3 (id=65): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.833489254s ago: executing program 2 (id=67): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="02000000040000000700000003f4610000000000000000000000000000004bb8"], 0x50) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000000)={0x6, 0x7, 0x2, 0x6, 0x2, [0x9, 0x6, 0x401, 0xa85]}) sendmsg$AUDIT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) socket$inet(0x2, 0x2, 0x1) 3.410556955s ago: executing program 2 (id=69): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz0\x00') 3.245695453s ago: executing program 2 (id=70): write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000180)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.217229161s ago: executing program 1 (id=71): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r2, 0xffffffffffffffff, 0x0) 3.099067286s ago: executing program 2 (id=72): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0xca4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.994306185s ago: executing program 4 (id=73): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x0) r2 = dup3(r1, r0, 0x80000) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) 2.917568763s ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff76) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) 2.721244112s ago: executing program 2 (id=75): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7, 0x200005d, {0x400, 0x3ff}, 0x3, 0xb}) 2.219826392s ago: executing program 0 (id=76): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 2.109299718s ago: executing program 4 (id=77): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 1.958321384s ago: executing program 3 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r3, 0x57c85000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000180)=[{{0x4, 0x1}, {0x3}}, {{0x4, 0x1}, {0x2, 0x0, 0x1}}], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 1.858904344s ago: executing program 4 (id=79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xffffff49, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) 1.858469311s ago: executing program 1 (id=80): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.737553475s ago: executing program 1 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) lseek(r1, 0x808eb, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000380)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) tkill(0x0, 0x1d) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000006a0019012cbd7000fedbdf25020000000000000008000a000000000008000500", @ANYRES64=r0], 0xfe80}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 1.638538703s ago: executing program 2 (id=82): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) setrlimit(0xe, &(0x7f0000000240)={0x7ff, 0x7}) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) 1.553797268s ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000780)={r0, 0xffffffffffffffff, 0x329, 0x0, 0x0, 0x7, 0x7e, 0x20, 0x2, 0x5, 0x2, 0x8001, 'syz0\x00'}) 1.469661051s ago: executing program 1 (id=84): syz_usb_connect(0x5, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 958.502871ms ago: executing program 0 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800ef672fde7d436efa0000680000000000000000000000c68f49b9869d2b600a4a852d4a64e71d12211d157a4adce8c8b9f8f9b8edba53f0d892051643fb9da32f22d33dc4663a8ff177e10c1bcccce5a580708c38de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x10) 787.285987ms ago: executing program 4 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 0 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 50.897719][ T29] audit: type=1400 audit(1737735078.481:88): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.901307][ T5802] cgroup: Unknown subsys name 'net' [ 50.925701][ T29] audit: type=1400 audit(1737735078.481:89): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.949568][ T29] audit: type=1400 audit(1737735078.531:90): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.084938][ T5802] cgroup: Unknown subsys name 'cpuset' [ 51.092458][ T5802] cgroup: Unknown subsys name 'rlimit' [ 51.216637][ T29] audit: type=1400 audit(1737735078.801:91): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.240414][ T29] audit: type=1400 audit(1737735078.801:92): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.261963][ T29] audit: type=1400 audit(1737735078.801:93): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.282373][ T29] audit: type=1400 audit(1737735078.801:94): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.302776][ T29] audit: type=1400 audit(1737735078.801:95): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.327605][ T29] audit: type=1400 audit(1737735078.801:96): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.339248][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 51.350881][ T29] audit: type=1400 audit(1737735078.821:97): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.190329][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.052023][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.061354][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.070423][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.078123][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.086021][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.093874][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.098962][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.102193][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.110791][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.124100][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.124595][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.138273][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.139261][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.154542][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.157425][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.162741][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.170330][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.175666][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.184638][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.190139][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.197151][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.211581][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.222250][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.223732][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.229585][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.244121][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.255569][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.262929][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.290842][ T5819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.299288][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.561098][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 54.577312][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 54.660733][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 54.679625][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.686809][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.694693][ T5822] bridge_slave_0: entered allmulticast mode [ 54.701165][ T5822] bridge_slave_0: entered promiscuous mode [ 54.710805][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.718579][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.725963][ T5822] bridge_slave_1: entered allmulticast mode [ 54.732878][ T5822] bridge_slave_1: entered promiscuous mode [ 54.742926][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 54.794604][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 54.823629][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.830777][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.838264][ T5813] bridge_slave_0: entered allmulticast mode [ 54.844804][ T5813] bridge_slave_0: entered promiscuous mode [ 54.853552][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.864186][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.911959][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.919256][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.926570][ T5813] bridge_slave_1: entered allmulticast mode [ 54.933185][ T5813] bridge_slave_1: entered promiscuous mode [ 54.964392][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.971529][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.979159][ T5812] bridge_slave_0: entered allmulticast mode [ 54.985873][ T5812] bridge_slave_0: entered promiscuous mode [ 55.014958][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.022097][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.029274][ T5812] bridge_slave_1: entered allmulticast mode [ 55.036248][ T5812] bridge_slave_1: entered promiscuous mode [ 55.049867][ T5822] team0: Port device team_slave_0 added [ 55.069101][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.076416][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.083842][ T5814] bridge_slave_0: entered allmulticast mode [ 55.090209][ T5814] bridge_slave_0: entered promiscuous mode [ 55.097619][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.104746][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.111862][ T5814] bridge_slave_1: entered allmulticast mode [ 55.118631][ T5814] bridge_slave_1: entered promiscuous mode [ 55.130966][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.142139][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.152983][ T5822] team0: Port device team_slave_1 added [ 55.198426][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.211562][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.222794][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.238075][ T5813] team0: Port device team_slave_0 added [ 55.246143][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.253280][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.260407][ T5821] bridge_slave_0: entered allmulticast mode [ 55.267197][ T5821] bridge_slave_0: entered promiscuous mode [ 55.287434][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.297161][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.304463][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.330574][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.342951][ T5813] team0: Port device team_slave_1 added [ 55.348799][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.356286][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.363498][ T5821] bridge_slave_1: entered allmulticast mode [ 55.369895][ T5821] bridge_slave_1: entered promiscuous mode [ 55.378697][ T5814] team0: Port device team_slave_0 added [ 55.389063][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.396149][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.422147][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.443969][ T5814] team0: Port device team_slave_1 added [ 55.481150][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.492082][ T5812] team0: Port device team_slave_0 added [ 55.499825][ T5812] team0: Port device team_slave_1 added [ 55.507974][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.515375][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.541451][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.554682][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.561659][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.587668][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.599429][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.606559][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.633830][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.646059][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.679602][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.686647][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.713074][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.742086][ T5822] hsr_slave_0: entered promiscuous mode [ 55.748393][ T5822] hsr_slave_1: entered promiscuous mode [ 55.761196][ T5821] team0: Port device team_slave_0 added [ 55.767492][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.774746][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.800848][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.812924][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.819876][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.845852][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.868003][ T5821] team0: Port device team_slave_1 added [ 55.915226][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.922190][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.948948][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.962087][ T5813] hsr_slave_0: entered promiscuous mode [ 55.968800][ T5813] hsr_slave_1: entered promiscuous mode [ 55.975380][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.983236][ T5813] Cannot create hsr debugfs directory [ 56.007508][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.014655][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.040836][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.063344][ T5812] hsr_slave_0: entered promiscuous mode [ 56.069297][ T5812] hsr_slave_1: entered promiscuous mode [ 56.075249][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.082955][ T5812] Cannot create hsr debugfs directory [ 56.091025][ T5814] hsr_slave_0: entered promiscuous mode [ 56.097234][ T5814] hsr_slave_1: entered promiscuous mode [ 56.104324][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.111878][ T5814] Cannot create hsr debugfs directory [ 56.205194][ T5821] hsr_slave_0: entered promiscuous mode [ 56.211240][ T5821] hsr_slave_1: entered promiscuous mode [ 56.217485][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.225403][ T5821] Cannot create hsr debugfs directory [ 56.253528][ T5819] Bluetooth: hci0: command tx timeout [ 56.323127][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.333676][ T5819] Bluetooth: hci2: command tx timeout [ 56.342761][ T5819] Bluetooth: hci3: command tx timeout [ 56.348457][ T5819] Bluetooth: hci4: command tx timeout [ 56.354179][ T5816] Bluetooth: hci1: command tx timeout [ 56.369514][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.378983][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.397290][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.464488][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.478778][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.486826][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.495737][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.508748][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.519705][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.535147][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.545575][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.591082][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.601995][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.622590][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.646823][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.697052][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.706902][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.729277][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.740035][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.777784][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.823369][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.844637][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.862362][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.871993][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.879288][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.888945][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.896080][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.921080][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.941297][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.957873][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.964956][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.978850][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.994758][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.002127][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.021618][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.028757][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.039471][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.046554][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.059545][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.103529][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 57.103546][ T29] audit: type=1400 audit(1737735084.691:111): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.150396][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.162405][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.183832][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.190901][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.219491][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.226610][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.276589][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.310046][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.335332][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.342408][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.367674][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.387816][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.394964][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.481316][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.494627][ T5822] veth0_vlan: entered promiscuous mode [ 57.509979][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.531619][ T5822] veth1_vlan: entered promiscuous mode [ 57.605142][ T5813] veth0_vlan: entered promiscuous mode [ 57.634211][ T5822] veth0_macvtap: entered promiscuous mode [ 57.658363][ T5813] veth1_vlan: entered promiscuous mode [ 57.680673][ T5822] veth1_macvtap: entered promiscuous mode [ 57.710830][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.727290][ T5813] veth0_macvtap: entered promiscuous mode [ 57.742249][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.761404][ T5813] veth1_macvtap: entered promiscuous mode [ 57.790302][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.811158][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.826734][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.836448][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.846064][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.869091][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.880063][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.893371][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.909781][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.920400][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.931276][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.941567][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.950676][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.959568][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.969095][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.990231][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.019756][ T5814] veth0_vlan: entered promiscuous mode [ 58.058145][ T5814] veth1_vlan: entered promiscuous mode [ 58.073632][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.082965][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.143072][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.151520][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.160502][ T5812] veth0_vlan: entered promiscuous mode [ 58.170896][ T5821] veth0_vlan: entered promiscuous mode [ 58.187100][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.195622][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.198017][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.204270][ T5814] veth0_macvtap: entered promiscuous mode [ 58.218951][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.228267][ T5812] veth1_vlan: entered promiscuous mode [ 58.237641][ T5821] veth1_vlan: entered promiscuous mode [ 58.245944][ T5814] veth1_macvtap: entered promiscuous mode [ 58.256677][ T29] audit: type=1400 audit(1737735085.841:112): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Hxr1JK/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 58.271532][ T5821] veth0_macvtap: entered promiscuous mode [ 58.302576][ T29] audit: type=1400 audit(1737735085.841:113): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.317767][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.336005][ T5819] Bluetooth: hci0: command tx timeout [ 58.341473][ T29] audit: type=1400 audit(1737735085.841:114): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Hxr1JK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.367191][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.367211][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.367227][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.368069][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.377787][ T29] audit: type=1400 audit(1737735085.841:115): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.432748][ T5819] Bluetooth: hci4: command tx timeout [ 58.438187][ T5819] Bluetooth: hci1: command tx timeout [ 58.442013][ T5812] veth0_macvtap: entered promiscuous mode [ 58.444004][ T5819] Bluetooth: hci2: command tx timeout [ 58.450265][ T5816] Bluetooth: hci3: command tx timeout [ 58.455445][ T29] audit: type=1400 audit(1737735085.841:116): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Hxr1JK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.468530][ T5821] veth1_macvtap: entered promiscuous mode [ 58.500199][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.503873][ T29] audit: type=1400 audit(1737735085.871:117): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Hxr1JK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.517338][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.554891][ T29] audit: type=1400 audit(1737735085.881:118): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.565113][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.574818][ T29] audit: type=1400 audit(1737735085.881:119): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.574852][ T29] audit: type=1400 audit(1737735085.881:120): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="gadgetfs" ino=7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.630964][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.641744][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.652341][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.667812][ T5812] veth1_macvtap: entered promiscuous mode [ 58.680980][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.720096][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.731268][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.741982][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.752475][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.763168][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.774883][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.784564][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.793650][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.808093][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.817696][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.847322][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.872911][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.895092][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.916643][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.926817][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.938438][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.950138][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.995133][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.038789][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.068436][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.094591][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.120957][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.132189][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.155610][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.166258][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.177625][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.192188][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.202507][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.211812][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.222337][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.236538][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.247323][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.257780][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.270124][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.280185][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.280722][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.294799][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.308958][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.319493][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.330364][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.348921][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.352253][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.367581][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.370209][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.383903][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.394273][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.453642][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 59.464388][ T5893] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 59.474378][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.506200][ T5893] usb 2-1: config 0 descriptor?? [ 59.508423][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.538260][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.567015][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.586125][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.643578][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.658821][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.665627][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.680834][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.822378][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.850569][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.975947][ T5924] overlayfs: missing 'lowerdir' [ 60.307426][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.413760][ T53] Bluetooth: hci0: command tx timeout [ 60.492788][ T53] Bluetooth: hci3: command tx timeout [ 60.498928][ T5816] Bluetooth: hci2: command tx timeout [ 60.505522][ T5819] Bluetooth: hci1: command tx timeout [ 60.511144][ T5819] Bluetooth: hci4: command tx timeout [ 60.785640][ T5940] Bluetooth: MGMT ver 1.23 [ 61.260843][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 61.308536][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 61.349630][ T5893] asix 2-1:0.0: probe with driver asix failed with error -71 [ 61.357811][ T5916] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.382888][ T5893] usb 2-1: USB disconnect, device number 2 [ 61.668033][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.709750][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.752307][ T5916] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.804880][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.876742][ T5916] usb 5-1: SerialNumber: syz [ 62.272670][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 62.272688][ T29] audit: type=1400 audit(1737735089.771:191): avc: denied { read } for pid=5971 comm="syz.3.31" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.306263][ T29] audit: type=1400 audit(1737735089.771:192): avc: denied { open } for pid=5971 comm="syz.3.31" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.503058][ T5819] Bluetooth: hci0: command tx timeout [ 62.530393][ T5916] usb 5-1: 0:2 : does not exist [ 62.779166][ T5819] Bluetooth: hci3: command tx timeout [ 62.784668][ T5129] Bluetooth: hci4: command tx timeout [ 62.790589][ T5816] Bluetooth: hci2: command tx timeout [ 62.796114][ T5819] Bluetooth: hci1: command tx timeout [ 62.812753][ T53] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 62.820512][ T5976] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.832364][ T29] audit: type=1400 audit(1737735090.401:193): avc: denied { create } for pid=5974 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.862036][ T5916] usb 5-1: unit 255 not found! [ 63.085022][ T29] audit: type=1400 audit(1737735090.501:194): avc: denied { getopt } for pid=5974 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.122842][ T5916] usb 5-1: USB disconnect, device number 2 [ 63.692844][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 63.818835][ T29] audit: type=1400 audit(1737735091.351:195): avc: denied { create } for pid=5974 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.846177][ T29] audit: type=1400 audit(1737735091.351:196): avc: denied { name_bind } for pid=5974 comm="syz.1.32" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.902131][ T29] audit: type=1400 audit(1737735091.351:197): avc: denied { node_bind } for pid=5974 comm="syz.1.32" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.075459][ T29] audit: type=1400 audit(1737735091.651:198): avc: denied { setopt } for pid=5996 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.303768][ T29] audit: type=1400 audit(1737735091.881:199): avc: denied { relabelfrom } for pid=6004 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.414616][ T29] audit: type=1400 audit(1737735091.911:200): avc: denied { relabelto } for pid=6004 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.592801][ T5829] Bluetooth: hci0: command 0x1407 tx timeout [ 64.817570][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.308157][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 67.516709][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 67.516724][ T29] audit: type=1400 audit(1737735095.101:228): avc: denied { create } for pid=6066 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.603777][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'. [ 67.641925][ T29] audit: type=1400 audit(1737735095.151:229): avc: denied { mounton } for pid=6051 comm="syz.4.56" path="/9/file0" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.743465][ T29] audit: type=1400 audit(1737735095.251:230): avc: denied { create } for pid=6077 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.884801][ T29] audit: type=1400 audit(1737735095.261:231): avc: denied { connect } for pid=6077 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.977991][ T29] audit: type=1400 audit(1737735095.261:232): avc: denied { write } for pid=6077 comm="syz.2.66" laddr=fe80::643f:9cff:fef3:dcc1 lport=1 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.274350][ T29] audit: type=1400 audit(1737735095.551:233): avc: denied { nlmsg_read } for pid=6080 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 68.316724][ T6086] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure [ 68.348371][ T29] audit: type=1400 audit(1737735095.881:234): avc: denied { write } for pid=6084 comm="syz.2.69" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.457152][ T29] audit: type=1400 audit(1737735096.041:235): avc: denied { append } for pid=6087 comm="syz.2.70" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.553536][ T6091] input: syz1 as /devices/virtual/input/input6 [ 68.599772][ T29] audit: type=1400 audit(1737735096.181:236): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2732 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.703304][ T29] audit: type=1400 audit(1737735096.211:237): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2732 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.230653][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 71.149102][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.159701][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.166290][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.352905][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 71.383224][ T5911] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 71.411922][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.454747][ T5911] usb 2-1: config 0 has no interface number 0 [ 71.511429][ T5911] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 71.542118][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.578644][ T5911] usb 2-1: Product: syz [ 71.661857][ T5911] usb 2-1: Manufacturer: syz [ 71.666916][ T5911] usb 2-1: SerialNumber: syz [ 71.681583][ T5911] usb 2-1: config 0 descriptor?? [ 71.705753][ T5911] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 71.712152][ T5911] usb 2-1: No valid video chain found. [ 71.922662][ T5911] ------------[ cut here ]------------ [ 71.922667][ C0] BUG: workqueue leaked atomic, lock or RCU: udevd[5190] [ 71.922667][ C0] preempt=0x00000101 lock=1->0 RCU=1->1 workfn=usb_giveback_urb_bh [ 71.928134][ T5911] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 71.928200][ T5911] WARNING: CPU: 1 PID: 5911 at kernel/locking/mutex.c:564 __mutex_lock+0x3a3/0xb10 [ 71.943363][ C0] INFO: lockdep is turned off. [ 71.943375][ C0] CPU: 0 UID: 0 PID: 5190 Comm: udevd Not tainted 6.13.0-syzkaller-05474-g113691ce9f32 #0 [ 71.943396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.943405][ C0] Call Trace: [ 71.943409][ C0] [ 71.943414][ C0] dump_stack_lvl+0x16c/0x1f0 [ 71.943440][ C0] process_one_work+0x11e6/0x1ba0 [ 71.943460][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 71.943477][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 71.943494][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 71.943509][ C0] ? __pfx_process_one_work+0x10/0x10 [ 71.943526][ C0] ? rcu_is_watching+0x12/0xc0 [ 71.943544][ C0] ? assign_work+0x1a0/0x250 [ 71.943562][ C0] bh_worker+0x5a4/0x8a0 [ 71.943582][ C0] ? __pfx_bh_worker+0x10/0x10 [ 71.943602][ C0] workqueue_softirq_action+0x12c/0x190 [ 71.943619][ C0] tasklet_hi_action+0x17/0x70 [ 71.943641][ C0] handle_softirqs+0x213/0x8f0 [ 71.943663][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 71.943685][ C0] __irq_exit_rcu+0x109/0x170 [ 71.943704][ C0] irq_exit_rcu+0x9/0x30 [ 71.943723][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 71.943744][ C0] [ 71.943748][ C0] [ 71.943753][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.943775][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 71.943796][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 6d 3e f6 48 89 df e8 3e ed 3e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 c3 2f f6 65 8b 05 96 82 ab 74 85 c0 74 16 5b [ 71.943809][ C0] RSP: 0018:ffffc90003b3f908 EFLAGS: 00000246 [ 71.943822][ C0] RAX: 0000000000000006 RBX: ffff88807d891e40 RCX: 1ffffffff20c4191 [ 71.943832][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd840 RDI: ffffffff8bd2ec20 [ 71.943841][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000001 [ 71.943850][ C0] R10: ffffffff90624fd7 R11: 0000000000000006 R12: ffff88802735e180 [ 71.943859][ C0] R13: ffff88807d891e40 R14: ffff88802735e550 R15: ffff888024be8dc0 [ 71.943875][ C0] sock_def_readable+0x15f/0x610 [ 71.943898][ C0] netlink_unicast+0x6f1/0x7f0 [ 71.943921][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 71.943944][ C0] netlink_sendmsg+0x8b8/0xd70 [ 71.943966][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.943990][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 71.944008][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 71.944027][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.944046][ C0] ? kasan_save_stack+0x33/0x60 [ 71.944068][ C0] ? __kasan_record_aux_stack+0xba/0xd0 [ 71.944086][ C0] ? __call_rcu_common.constprop.0+0x9a/0x870 [ 71.944107][ C0] ? kmem_cache_free+0x31d/0x4c0 [ 71.944129][ C0] ? __fput+0x68d/0xb70 [ 71.944144][ C0] ? __fput_sync+0xa1/0xc0 [ 71.944157][ C0] ? __x64_sys_close+0x86/0x100 [ 71.944174][ C0] ? do_syscall_64+0xcd/0x250 [ 71.944195][ C0] ___sys_sendmsg+0x135/0x1e0 [ 71.944209][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.944231][ C0] ? __call_rcu_common.constprop.0+0x3ea/0x870 [ 71.944252][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.944273][ C0] __sys_sendmsg+0x16e/0x220 [ 71.944287][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.944307][ C0] do_syscall_64+0xcd/0x250 [ 71.944328][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.944347][ C0] RIP: 0033:0x7f4313724a4b [ 71.944359][ C0] Code: ff 89 ef 48 89 04 24 e8 22 56 f9 ff 48 8b 04 24 48 83 c4 20 5d c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6d 48 8b 15 ae c3 0c 00 f7 d8 64 89 02 48 83 [ 71.944372][ C0] RSP: 002b:00007ffd792cae28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.944385][ C0] RAX: ffffffffffffffda RBX: 000055a450bd2d90 RCX: 00007f4313724a4b [ 71.944395][ C0] RDX: 0000000000000000 RSI: 00007ffd792cae38 RDI: 0000000000000004 [ 71.944404][ C0] RBP: 000055a450c00200 R08: 0000000000000001 R09: fa1e497890b7bd95 [ 71.944413][ C0] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 71.944422][ C0] R13: 0000000000000090 R14: 0000000000000000 R15: 0000000000000000 [ 71.944435][ C0] [ 72.358619][ T5911] Modules linked in: [ 72.362545][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:6 Not tainted 6.13.0-syzkaller-05474-g113691ce9f32 #0 [ 72.373006][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.383115][ T5911] Workqueue: usb_hub_wq hub_event [ 72.388193][ T5911] RIP: 0010:__mutex_lock+0x3a3/0xb10 [ 72.393569][ T5911] Code: d0 7c 08 84 d2 0f 85 59 07 00 00 8b 0d d6 5b 0b 05 85 c9 75 19 90 48 c7 c6 80 c2 6c 8b 48 c7 c7 00 c2 6c 8b e8 2e 0b 23 f6 90 <0f> 0b 90 90 90 e9 b8 fd ff ff 4c 8d b5 60 ff ff ff 48 89 df 4c 89 [ 72.415211][ T5911] RSP: 0018:ffffc90004d26e40 EFLAGS: 00010282 [ 72.421798][ T5911] RAX: 0000000000000000 RBX: ffff8880626fd518 RCX: ffffc9001b2ec000 [ 72.430107][ T5911] RDX: 0000000000100000 RSI: ffffffff817a3406 RDI: 0000000000000001 [ 72.438464][ T5911] RBP: ffffc90004d26f80 R08: 0000000000000001 R09: 0000000000000000 [ 72.446485][ T5911] R10: 0000000000000000 R11: 284e4f5f4e524157 R12: dffffc0000000000 [ 72.454530][ T5911] R13: 0000000000000002 R14: 0000000000000000 R15: ffffc90004d26ec0 [ 72.462550][ T5911] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 72.471552][ T5911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.478174][ T5911] CR2: 000000110c3631dd CR3: 000000000df80000 CR4: 00000000003526f0 [ 72.486213][ T5911] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.494281][ T5911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.502291][ T5911] Call Trace: [ 72.505631][ T5911] [ 72.508590][ T5911] ? __warn+0xea/0x3c0 [ 72.512741][ T5911] ? __mutex_lock+0x3a3/0xb10 [ 72.517465][ T5911] ? report_bug+0x3c0/0x580 [ 72.522279][ T5911] ? handle_bug+0x54/0xa0 [ 72.526910][ T5911] ? exc_invalid_op+0x17/0x50 [ 72.531624][ T5911] ? asm_exc_invalid_op+0x1a/0x20 [ 72.536706][ T5911] ? __warn_printk+0x1a6/0x350 [ 72.541472][ T5911] ? __mutex_lock+0x3a3/0xb10 [ 72.546199][ T5911] ? __pfx_vsnprintf+0x10/0x10 [ 72.550980][ T5911] ? uvc_alloc_new_entity+0x145/0x630 [ 72.556378][ T5911] ? uvc_status_unregister+0x21/0xe0 [ 72.561665][ T5911] ? __pfx___mutex_lock+0x10/0x10 [ 72.566750][ T5911] ? __dev_printk+0xf5/0x270 [ 72.571330][ T5911] ? __pfx__dev_info+0x10/0x10 [ 72.576134][ T5911] ? uvc_status_unregister+0x21/0xe0 [ 72.581420][ T5911] uvc_status_unregister+0x21/0xe0 [ 72.586541][ T5911] uvc_unregister_video+0x126/0x250 [ 72.591739][ T5911] uvc_probe+0x2c08/0x4960 [ 72.596181][ T5911] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.601990][ T5911] usb_probe_interface+0x300/0x9c0 [ 72.607131][ T5911] ? __pfx_usb_probe_interface+0x10/0x10 [ 72.612781][ T5911] really_probe+0x23e/0xa90 [ 72.617301][ T5911] __driver_probe_device+0x1de/0x440 [ 72.622886][ T5911] driver_probe_device+0x4c/0x1b0 [ 72.628254][ T5911] __device_attach_driver+0x1df/0x310 [ 72.633693][ T5911] ? __pfx___device_attach_driver+0x10/0x10 [ 72.639623][ T5911] bus_for_each_drv+0x157/0x1e0 [ 72.644493][ T5911] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.649859][ T5911] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.655072][ T5911] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.660878][ T5911] __device_attach+0x1e8/0x4b0 [ 72.665663][ T5911] ? __pfx___device_attach+0x10/0x10 [ 72.670963][ T5911] ? do_raw_spin_unlock+0x172/0x230 [ 72.676177][ T5911] bus_probe_device+0x17f/0x1c0 [ 72.681029][ T5911] device_add+0x114b/0x1a70 [ 72.685538][ T5911] ? __pfx_device_add+0x10/0x10 [ 72.690374][ T5911] ? mark_held_locks+0x9f/0xe0 [ 72.695157][ T5911] usb_set_configuration+0x10cb/0x1c50 [ 72.700627][ T5911] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 72.706695][ T5911] usb_generic_driver_probe+0xb1/0x110 [ 72.712236][ T5911] usb_probe_device+0xec/0x3e0 [ 72.717028][ T5911] ? __pfx_usb_probe_device+0x10/0x10 [ 72.722402][ T5911] really_probe+0x23e/0xa90 [ 72.727132][ T5911] __driver_probe_device+0x1de/0x440 [ 72.732407][ T5911] ? usb_driver_applicable+0x1c7/0x220 [ 72.738199][ T5911] driver_probe_device+0x4c/0x1b0 [ 72.743335][ T5911] __device_attach_driver+0x1df/0x310 [ 72.748717][ T5911] ? __pfx___device_attach_driver+0x10/0x10 [ 72.754666][ T5911] bus_for_each_drv+0x157/0x1e0 [ 72.759526][ T5911] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.764902][ T5911] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.770103][ T5911] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.775931][ T5911] __device_attach+0x1e8/0x4b0 [ 72.780692][ T5911] ? __pfx___device_attach+0x10/0x10 [ 72.786002][ T5911] ? do_raw_spin_unlock+0x172/0x230 [ 72.791193][ T5911] bus_probe_device+0x17f/0x1c0 [ 72.796061][ T5911] device_add+0x114b/0x1a70 [ 72.800555][ T5911] ? __pfx_device_add+0x10/0x10 [ 72.805406][ T5911] ? add_device_randomness+0xb8/0xf0 [ 72.810686][ T5911] usb_new_device+0xd09/0x1a20 [ 72.815471][ T5911] ? __pfx_usb_new_device+0x10/0x10 [ 72.820667][ T5911] hub_event+0x2d9a/0x4e10 [ 72.825343][ T5911] ? __pfx_hub_event+0x10/0x10 [ 72.830117][ T5911] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 72.836078][ T5911] ? rcu_is_watching+0x12/0xc0 [ 72.840840][ T5911] ? trace_lock_acquire+0x14e/0x1f0 [ 72.846059][ T5911] ? process_one_work+0x921/0x1ba0 [ 72.851176][ T5911] ? lock_acquire+0x2f/0xb0 [ 72.855705][ T5911] ? process_one_work+0x921/0x1ba0 [ 72.860824][ T5911] process_one_work+0x9c5/0x1ba0 [ 72.865787][ T5911] ? __pfx_ovs_dp_masks_rebalance+0x10/0x10 [ 72.871674][ T5911] ? __pfx_process_one_work+0x10/0x10 [ 72.877072][ T5911] ? rcu_is_watching+0x12/0xc0 [ 72.881829][ T5911] ? assign_work+0x1a0/0x250 [ 72.886445][ T5911] worker_thread+0x6c8/0xf00 [ 72.891032][ T5911] ? __kthread_parkme+0x148/0x220 [ 72.896078][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 72.901186][ T5911] kthread+0x3af/0x750 [ 72.905265][ T5911] ? __pfx_kthread+0x10/0x10 [ 72.909843][ T5911] ? lock_acquire+0x2f/0xb0 [ 72.914352][ T5911] ? __pfx_kthread+0x10/0x10 [ 72.918973][ T5911] ret_from_fork+0x45/0x80 [ 72.923395][ T5911] ? __pfx_kthread+0x10/0x10 [ 72.928264][ T5911] ret_from_fork_asm+0x1a/0x30 [ 72.933318][ T5911] [ 72.936336][ T5911] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.943590][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:6 Not tainted 6.13.0-syzkaller-05474-g113691ce9f32 #0 [ 72.953987][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.964058][ T5911] Workqueue: usb_hub_wq hub_event [ 72.969094][ T5911] Call Trace: [ 72.972354][ T5911] [ 72.975270][ T5911] dump_stack_lvl+0x3d/0x1f0 [ 72.979851][ T5911] panic+0x71d/0x800 [ 72.983729][ T5911] ? __pfx_panic+0x10/0x10 [ 72.988130][ T5911] ? show_trace_log_lvl+0x29d/0x3d0 [ 72.993319][ T5911] ? __mutex_lock+0x3a3/0xb10 [ 72.997984][ T5911] check_panic_on_warn+0xab/0xb0 [ 73.002904][ T5911] __warn+0xf6/0x3c0 [ 73.006784][ T5911] ? __mutex_lock+0x3a3/0xb10 [ 73.011447][ T5911] report_bug+0x3c0/0x580 [ 73.015764][ T5911] handle_bug+0x54/0xa0 [ 73.019901][ T5911] exc_invalid_op+0x17/0x50 [ 73.024386][ T5911] asm_exc_invalid_op+0x1a/0x20 [ 73.029221][ T5911] RIP: 0010:__mutex_lock+0x3a3/0xb10 [ 73.034497][ T5911] Code: d0 7c 08 84 d2 0f 85 59 07 00 00 8b 0d d6 5b 0b 05 85 c9 75 19 90 48 c7 c6 80 c2 6c 8b 48 c7 c7 00 c2 6c 8b e8 2e 0b 23 f6 90 <0f> 0b 90 90 90 e9 b8 fd ff ff 4c 8d b5 60 ff ff ff 48 89 df 4c 89 [ 73.054094][ T5911] RSP: 0018:ffffc90004d26e40 EFLAGS: 00010282 [ 73.060156][ T5911] RAX: 0000000000000000 RBX: ffff8880626fd518 RCX: ffffc9001b2ec000 [ 73.068115][ T5911] RDX: 0000000000100000 RSI: ffffffff817a3406 RDI: 0000000000000001 [ 73.076068][ T5911] RBP: ffffc90004d26f80 R08: 0000000000000001 R09: 0000000000000000 [ 73.084025][ T5911] R10: 0000000000000000 R11: 284e4f5f4e524157 R12: dffffc0000000000 [ 73.091977][ T5911] R13: 0000000000000002 R14: 0000000000000000 R15: ffffc90004d26ec0 [ 73.099930][ T5911] ? __warn_printk+0x1a6/0x350 [ 73.104683][ T5911] ? __pfx_vsnprintf+0x10/0x10 [ 73.109432][ T5911] ? uvc_alloc_new_entity+0x145/0x630 [ 73.114804][ T5911] ? uvc_status_unregister+0x21/0xe0 [ 73.120081][ T5911] ? __pfx___mutex_lock+0x10/0x10 [ 73.125105][ T5911] ? __dev_printk+0xf5/0x270 [ 73.129683][ T5911] ? __pfx__dev_info+0x10/0x10 [ 73.134438][ T5911] ? uvc_status_unregister+0x21/0xe0 [ 73.139708][ T5911] uvc_status_unregister+0x21/0xe0 [ 73.144818][ T5911] uvc_unregister_video+0x126/0x250 [ 73.150000][ T5911] uvc_probe+0x2c08/0x4960 [ 73.154409][ T5911] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.160201][ T5911] usb_probe_interface+0x300/0x9c0 [ 73.165296][ T5911] ? __pfx_usb_probe_interface+0x10/0x10 [ 73.170923][ T5911] really_probe+0x23e/0xa90 [ 73.175425][ T5911] __driver_probe_device+0x1de/0x440 [ 73.180701][ T5911] driver_probe_device+0x4c/0x1b0 [ 73.185799][ T5911] __device_attach_driver+0x1df/0x310 [ 73.191249][ T5911] ? __pfx___device_attach_driver+0x10/0x10 [ 73.197132][ T5911] bus_for_each_drv+0x157/0x1e0 [ 73.201967][ T5911] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.207323][ T5911] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.212506][ T5911] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.218296][ T5911] __device_attach+0x1e8/0x4b0 [ 73.223050][ T5911] ? __pfx___device_attach+0x10/0x10 [ 73.228329][ T5911] ? do_raw_spin_unlock+0x172/0x230 [ 73.233508][ T5911] bus_probe_device+0x17f/0x1c0 [ 73.238435][ T5911] device_add+0x114b/0x1a70 [ 73.242921][ T5911] ? __pfx_device_add+0x10/0x10 [ 73.247750][ T5911] ? mark_held_locks+0x9f/0xe0 [ 73.252500][ T5911] usb_set_configuration+0x10cb/0x1c50 [ 73.258123][ T5911] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 73.264177][ T5911] usb_generic_driver_probe+0xb1/0x110 [ 73.269619][ T5911] usb_probe_device+0xec/0x3e0 [ 73.274378][ T5911] ? __pfx_usb_probe_device+0x10/0x10 [ 73.279735][ T5911] really_probe+0x23e/0xa90 [ 73.284226][ T5911] __driver_probe_device+0x1de/0x440 [ 73.289497][ T5911] ? usb_driver_applicable+0x1c7/0x220 [ 73.294936][ T5911] driver_probe_device+0x4c/0x1b0 [ 73.299949][ T5911] __device_attach_driver+0x1df/0x310 [ 73.305308][ T5911] ? __pfx___device_attach_driver+0x10/0x10 [ 73.311204][ T5911] bus_for_each_drv+0x157/0x1e0 [ 73.316043][ T5911] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.321399][ T5911] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.326593][ T5911] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.332401][ T5911] __device_attach+0x1e8/0x4b0 [ 73.337180][ T5911] ? __pfx___device_attach+0x10/0x10 [ 73.342470][ T5911] ? do_raw_spin_unlock+0x172/0x230 [ 73.347653][ T5911] bus_probe_device+0x17f/0x1c0 [ 73.352494][ T5911] device_add+0x114b/0x1a70 [ 73.356983][ T5911] ? __pfx_device_add+0x10/0x10 [ 73.361814][ T5911] ? add_device_randomness+0xb8/0xf0 [ 73.367102][ T5911] usb_new_device+0xd09/0x1a20 [ 73.371856][ T5911] ? __pfx_usb_new_device+0x10/0x10 [ 73.377041][ T5911] hub_event+0x2d9a/0x4e10 [ 73.381452][ T5911] ? __pfx_hub_event+0x10/0x10 [ 73.386209][ T5911] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 73.391829][ T5911] ? rcu_is_watching+0x12/0xc0 [ 73.396574][ T5911] ? trace_lock_acquire+0x14e/0x1f0 [ 73.401765][ T5911] ? process_one_work+0x921/0x1ba0 [ 73.406861][ T5911] ? lock_acquire+0x2f/0xb0 [ 73.411349][ T5911] ? process_one_work+0x921/0x1ba0 [ 73.416444][ T5911] process_one_work+0x9c5/0x1ba0 [ 73.421370][ T5911] ? __pfx_ovs_dp_masks_rebalance+0x10/0x10 [ 73.427256][ T5911] ? __pfx_process_one_work+0x10/0x10 [ 73.432616][ T5911] ? rcu_is_watching+0x12/0xc0 [ 73.437364][ T5911] ? assign_work+0x1a0/0x250 [ 73.441940][ T5911] worker_thread+0x6c8/0xf00 [ 73.446519][ T5911] ? __kthread_parkme+0x148/0x220 [ 73.451526][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 73.456623][ T5911] kthread+0x3af/0x750 [ 73.460676][ T5911] ? __pfx_kthread+0x10/0x10 [ 73.465247][ T5911] ? lock_acquire+0x2f/0xb0 [ 73.469735][ T5911] ? __pfx_kthread+0x10/0x10 [ 73.474306][ T5911] ret_from_fork+0x45/0x80 [ 73.478708][ T5911] ? __pfx_kthread+0x10/0x10 [ 73.483280][ T5911] ret_from_fork_asm+0x1a/0x30 [ 73.488027][ T5911] [ 73.491234][ T5911] Kernel Offset: disabled [ 73.495534][ T5911] Rebooting in 86400 seconds..