last executing test programs: 6m1.173578459s ago: executing program 1 (id=16): r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40041) r6 = socket(0x2, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r11 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x420440) r12 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCVHANGUP(r12, 0x5437, 0x1d) ioctl$NBD_SET_SOCK(r11, 0xab00, r12) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) 5m58.080756999s ago: executing program 1 (id=23): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8624}}}]}, 0x38}}, 0x4000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x0, 0xbabd}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x1, 0x40, 0x3fc, 0x4, 0x50}, 0x9c) bind$inet6(r11, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) sendto$inet6(r11, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m55.580195581s ago: executing program 1 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4c044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x9}, 0x0) r6 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r6, 0xb) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x90) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m51.323163596s ago: executing program 1 (id=39): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb", 0x1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) 5m50.989050908s ago: executing program 1 (id=42): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10600, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000000500050005000000050001000700000005000400000000000300686173683a6e65742c6e6574000000000000000000000000000000000000f241f572c0d6d95a6f5aae1c740907b923785748c1d7f503c9afd30ef08996bc22a73363fc91a0cd77d2d7ed53e0124b11c3a97a0e2b745510a98172707d60b979a978"], 0x4c}, 0x1, 0x0, 0x0, 0x24040001}, 0x40800) 5m49.761844058s ago: executing program 1 (id=45): socket$tipc(0x1e, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) socket(0x2d, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x10f, 0x10105, 0x12345}) r2 = syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x10, 0x5, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) socket(0x2, 0x5, 0x0) socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2e}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 5m34.294255357s ago: executing program 32 (id=45): socket$tipc(0x1e, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) socket(0x2d, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x10f, 0x10105, 0x12345}) r2 = syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x10, 0x5, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) socket(0x2, 0x5, 0x0) socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2e}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3m52.860152341s ago: executing program 0 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xdc}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffe}, 0x70bd25, 0x0, 0x2, 0x1}}, 0xf0}}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket(0x2, 0x400000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) fcntl$setstatus(r6, 0x4, 0x2000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b150000fefffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="45000000015001001800128008000100677470000c000280", @ANYRES32=r5, @ANYBLOB, @ANYRES32], 0x40}}, 0x0) 3m50.602343017s ago: executing program 0 (id=377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000100)=0x8) 3m48.721311862s ago: executing program 0 (id=382): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000480)='contention_end\x00', r0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) eventfd2(0xdfc, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) r6 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 3m47.391943637s ago: executing program 0 (id=385): remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x6, 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x240) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x80080, 0x1b0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 3m46.268774926s ago: executing program 0 (id=387): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000480), 0x4) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x3fff, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c890}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="c209719c9b8403d45d367cc454d230e4c2f48d5c7a34ddd006317d3ff0e8b2497b426bfd99d2cc6fd9ecbd3e8ce8517a656cc5090ff6fa782b507e09496ec64ca9f644bdfb7e6c1328ab3d281c8ee265cb67d284b5bb4a79ae244ddb2c8fac90740caaf509c69ca3e6878e1a143cf912b2bcc3d6cd8f7aa639e96e5e6bf6e307220b69ea2a5ae557d613736e729f1b758e9029ca2fd78200ab58f780f346577e01fe8a9140358d13ed29d9daa17950a489f6e07c53cf95ef173a77bb20f22e3cb06950f6e2c69ab61153251026197b09ac225c861d83e6f0248bd947ff0ac7241bf55fc2040362a6e4e2d94f217d9697ada7fc91f2", 0xf5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 3m43.988086776s ago: executing program 0 (id=395): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000480)='contention_end\x00', r0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) eventfd2(0xdfc, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) r6 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 3m42.454262233s ago: executing program 33 (id=395): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000480)='contention_end\x00', r0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) eventfd2(0xdfc, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) r6 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 1m34.236422775s ago: executing program 6 (id=396): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x24000680) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x80000024, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bond0\x00', {0x1}, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r1, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1m16.977470391s ago: executing program 6 (id=396): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x24000680) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x80000024, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bond0\x00', {0x1}, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r1, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1m1.470861117s ago: executing program 6 (id=396): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x24000680) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x80000024, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bond0\x00', {0x1}, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r1, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 38.061869486s ago: executing program 6 (id=396): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x24000680) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x80000024, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bond0\x00', {0x1}, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r1, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 20.240294445s ago: executing program 6 (id=396): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x24000680) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x80000024, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bond0\x00', {0x1}, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r1, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 16.730884473s ago: executing program 3 (id=674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000180)=[{r1, 0x1}], 0x1, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.901107559s ago: executing program 3 (id=680): syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000003c0)=0x12, 0x80000) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect(r7, &(0x7f0000000540)=@isdn={0x22, 0x6, 0x2, 0x7, 0x2}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mremap(&(0x7f000015a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x42001, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 13.480187577s ago: executing program 4 (id=681): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x4008700c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/80, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x41000, 0x73, &(0x7f00000001c0)=""/115}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000002c0)=""/13) socket(0x2, 0x80805, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 10.620680886s ago: executing program 4 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/127, 0x7f, 0x0, &(0x7f00000002c0)=""/120, 0x78}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r8 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r8, &(0x7f0000000040)="0600", 0x2) (async) write(r8, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r8, r8, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 10.15303873s ago: executing program 2 (id=686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000100)=0x8) 8.776892872s ago: executing program 3 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}, {@xattr}]}) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x8) 8.619567571s ago: executing program 2 (id=689): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000180)={0x10000, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe9) fcntl$setown(r1, 0x8, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000032680)=""/102376, 0x18fe8) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lseek(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x48031, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000001100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000000), 0xd2f, 0x101000) r7 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x5, 0x40) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002340)={0xf0, r8, 0x800, 0x70bd27, 0x5, {}, [@TIPC_NLA_MEDIA={0x78}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xccd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x203}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8.451454179s ago: executing program 5 (id=690): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000180)=[{r1, 0x1}], 0x1, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.804476921s ago: executing program 4 (id=691): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900"/15, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c}}, 0x0) 7.778643392s ago: executing program 2 (id=692): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0xf) ptrace(0x4208, r1) ptrace(0x4208, r1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYBLOB="f7c734832f430fd109b422f2f079616a15f799b5417548d12bdd35ec12f7ab7cde6ab31c9577cb956c47758ccf05b3bc39ff44067fb41b13eb3e61c35e49d20f722e0915dd3721509383f55fceee788848f04cda75f28ba242d3a299dc9ce902b883a649c697552415f85e09129484699bbcb70b9991f2333fc500b7d8cb8a24aa1c55a52dac11edab", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESDEC=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='new\"deed: 0000000\a0000M0000301\x00'/42], 0x2a, 0xfffffffffffffffb) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 7.063651189s ago: executing program 2 (id=693): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) stat(0x0, &(0x7f0000000200)) getgid() sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) setrlimit(0x9, &(0x7f00000000c0)={0x5, 0xb9d}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast2, 0xb}}}, 0x30) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x0, 0x0}) 6.317305196s ago: executing program 2 (id=694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x8) 6.004593743s ago: executing program 5 (id=695): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) unshare(0x22020600) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x200, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000380)=""/35, 0x23, &(0x7f0000000300)=""/18, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff], 0x2, {r1}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000480), &(0x7f00000000c0)=0x4) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = fcntl$dupfd(r9, 0x406, r9) connect$unix(r10, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) close(r8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) 5.20424313s ago: executing program 4 (id=696): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x108c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdir(0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0xee00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf3ff, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.169866935s ago: executing program 5 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4c044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.877049251s ago: executing program 3 (id=698): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc06c4124, 0x40944f9c780000) socket$inet6(0xa, 0x2, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4c248000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 3.708580165s ago: executing program 4 (id=699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000100)=0x8) 3.581589816s ago: executing program 5 (id=700): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140), &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_setup(0x179a, &(0x7f00000000c0)={0x0, 0xfb29, 0x100, 0x2, 0x2f5}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.139856501s ago: executing program 5 (id=701): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3103000000f1000000de0800000008000300", @ANYRES32=r3], 0x24}}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 3.095608057s ago: executing program 6 (id=396): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x24000680) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x80000024, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bond0\x00', {0x1}, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r1, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 2.802512344s ago: executing program 3 (id=702): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000004e40)={{{@in6=@private0, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000004f40)=0xe8) 18.032393ms ago: executing program 5 (id=703): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0x3, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x25, 0x0, 0x1000000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000180)) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd4d0}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000048}, 0x4000c040) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 8.003167ms ago: executing program 2 (id=704): bind$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) sendto$inet(r1, &(0x7f00000000c0)="b1dda64959c902fb6acc3440c133509950b5d164a4f65e457a6be51c9c3151b3138e075136b568eadef9381c32479d1279e12d5e0441ab13d5e46b", 0x3b, 0x40, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000140)={r1}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x4d}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xed}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40880) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r2) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, r8, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@ipv6_getnetconf={0x44, 0x52, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x200000}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xb1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x34f}, @NETCONFA_FORWARDING={0x8, 0x2, 0x98}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x4008080) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@newtclass={0x58, 0x28, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {0x7, 0x17}, {0xffff, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x86}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000000940)=0x1) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r10, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) bind$inet(r1, &(0x7f0000000b00)={0x2, 0x4e22, @empty}, 0x10) (async) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40), 0x54400, 0x0) connect$vsock_stream(r11, &(0x7f0000000b80)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r11) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, r12, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x360}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd9f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x76}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1161}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x5c}}, 0x20008080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000d40)={0x0, 0x0, r11}) connect$unix(r2, &(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e) (async) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000e00)={0x1}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x5c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa000000}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x64}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) 540.999µs ago: executing program 3 (id=705): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) 0s ago: executing program 4 (id=706): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900"/15, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000240001002cbd7000fcdbdf25f8"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 237877][ T7722] bridge_slave_1: entered promiscuous mode [ 229.397193][ T30] audit: type=1400 audit(1764887387.460:2355): avc: denied { append } for pid=7766 comm="syz.5.409" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.760980][ T30] audit: type=1400 audit(1764887387.690:2356): avc: denied { watch_reads } for pid=7769 comm="syz.3.410" path="/84" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 229.905846][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 229.971941][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 229.997674][ T7722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.014881][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 230.015102][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 230.015883][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 230.016039][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 230.052609][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 230.059282][ T7781] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 230.059323][ T7781] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 230.258047][ T7722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.290738][ T5812] Bluetooth: hci2: command tx timeout [ 232.390767][ T5812] Bluetooth: hci2: command tx timeout [ 232.710078][ T6302] hsr_slave_0: left promiscuous mode [ 232.711516][ T6302] hsr_slave_1: left promiscuous mode [ 232.716210][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.716226][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.716905][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.716917][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.760564][ T6302] veth1_macvtap: left promiscuous mode [ 232.771563][ T7779] tty tty25: ldisc open failed (-12), clearing slot 24 [ 232.778472][ T6302] veth0_macvtap: left promiscuous mode [ 232.819527][ T6302] veth1_vlan: left promiscuous mode [ 232.825385][ T6302] veth0_vlan: left promiscuous mode [ 233.425529][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 233.462248][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 233.763884][ T7722] team0: Port device team_slave_0 added [ 233.812240][ T7722] team0: Port device team_slave_1 added [ 233.946536][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.954268][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.988006][ T7722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.001332][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.008370][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.035733][ T7722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.237603][ T7722] hsr_slave_0: entered promiscuous mode [ 234.244215][ T7722] hsr_slave_1: entered promiscuous mode [ 234.250530][ T7722] debugfs: 'hsr0' already exists in 'hsr' [ 234.256370][ T7722] Cannot create hsr debugfs directory [ 234.431238][ T5812] Bluetooth: hci2: command tx timeout [ 234.450169][ T6302] IPVS: stop unused estimator thread 0... [ 234.696660][ T7722] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 234.718331][ T7722] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 234.743032][ T7722] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 234.760318][ T7722] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 235.111794][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.138301][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.145458][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.167598][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.174736][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.517723][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.894508][ T7722] veth0_vlan: entered promiscuous mode [ 235.907788][ T7722] veth1_vlan: entered promiscuous mode [ 236.008894][ T7722] veth0_macvtap: entered promiscuous mode [ 236.029705][ T7722] veth1_macvtap: entered promiscuous mode [ 236.118675][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.144241][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.162465][ T7722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 236.182746][ T7722] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 236.204257][ T7722] wireguard: wg0: Could not create IPv4 socket [ 236.213893][ T7722] wireguard: wg1: Could not create IPv4 socket [ 236.223357][ T7722] wireguard: wg2: Could not create IPv4 socket [ 237.155040][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 238.881142][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.889509][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.902323][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.910125][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.919024][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.956828][ T7903] Failed to initialize the IGMP autojoin socket (err -2) [ 240.068079][ T7903] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 240.088657][ T7903] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 240.104935][ T7903] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 240.125927][ T7903] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 240.675966][ T7903] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 240.697345][ T7903] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 240.717467][ T7903] wireguard: wg0: Could not create IPv4 socket [ 240.727657][ T7903] wireguard: wg1: Could not create IPv4 socket [ 240.738681][ T7903] wireguard: wg2: Could not create IPv4 socket [ 246.192119][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.199940][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.207994][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.224540][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.234670][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.269874][ T8217] Failed to initialize the IGMP autojoin socket (err -2) [ 246.959954][ T8217] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 246.991525][ T8217] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 247.010379][ T8217] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 247.027691][ T8217] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 247.588928][ T8217] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.632907][ T8217] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 247.658863][ T8217] wireguard: wg0: Could not create IPv4 socket [ 247.668789][ T8217] wireguard: wg1: Could not create IPv4 socket [ 247.679345][ T8217] wireguard: wg2: Could not create IPv4 socket [ 253.006244][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.015650][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.024946][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.035376][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.044652][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.075667][ T8525] Failed to initialize the IGMP autojoin socket (err -2) [ 253.726073][ T8525] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 253.740515][ T8525] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 253.756438][ T8525] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 253.769153][ T8525] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 254.308214][ T8525] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 254.332155][ T8525] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 254.355695][ T8525] wireguard: wg0: Could not create IPv4 socket [ 254.366041][ T8525] wireguard: wg1: Could not create IPv4 socket [ 254.376179][ T8525] wireguard: wg2: Could not create IPv4 socket [ 255.557730][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.565032][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.009675][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.018623][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.026962][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.038676][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.048518][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.094441][ T8813] Failed to initialize the IGMP autojoin socket (err -2) [ 260.816568][ T8813] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 260.841174][ T8813] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 260.858707][ T8813] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 260.885813][ T8813] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 261.429479][ T8813] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 261.449352][ T8813] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 261.472601][ T8813] wireguard: wg0: Could not create IPv4 socket [ 261.481991][ T8813] wireguard: wg1: Could not create IPv4 socket [ 261.494161][ T8813] wireguard: wg2: Could not create IPv4 socket [ 266.805689][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.815953][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.824093][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.834904][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.842590][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.876279][ T9110] Failed to initialize the IGMP autojoin socket (err -2) [ 267.566058][ T9110] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 267.589145][ T9110] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 267.604657][ T9110] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 267.625685][ T9110] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 268.147426][ T9110] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 268.170164][ T9110] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 268.197174][ T9110] wireguard: wg0: Could not create IPv4 socket [ 268.206357][ T9110] wireguard: wg1: Could not create IPv4 socket [ 268.215963][ T9110] wireguard: wg2: Could not create IPv4 socket [ 273.792220][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.800404][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.811076][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.818816][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.828124][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.858549][ T9361] Failed to initialize the IGMP autojoin socket (err -2) [ 274.405074][ T9361] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 274.418758][ T9361] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 274.432599][ T9361] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 274.452265][ T9361] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 275.033126][ T9361] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 275.057022][ T9361] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 275.076681][ T9361] wireguard: wg0: Could not create IPv4 socket [ 275.086056][ T9361] wireguard: wg1: Could not create IPv4 socket [ 275.096556][ T9361] wireguard: wg2: Could not create IPv4 socket [ 280.516363][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.532407][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.541025][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.549692][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.557416][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.588755][ T9659] Failed to initialize the IGMP autojoin socket (err -2) [ 281.345369][ T9659] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 281.369268][ T9659] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 281.386879][ T9659] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 281.404844][ T9659] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 281.974456][ T9659] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 281.996186][ T9659] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 282.017954][ T9659] wireguard: wg0: Could not create IPv4 socket [ 282.032374][ T9659] wireguard: wg1: Could not create IPv4 socket [ 282.041671][ T9659] wireguard: wg2: Could not create IPv4 socket [ 287.898034][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.909219][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.917405][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.927353][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.935232][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.966789][ T9808] Failed to initialize the IGMP autojoin socket (err -2) [ 288.817015][ T9808] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 288.851299][ T9808] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 288.876519][ T9808] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 288.907032][ T9808] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 289.504993][ T9808] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.543704][ T9808] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 289.594054][ T9808] wireguard: wg0: Could not create IPv4 socket [ 289.613242][ T9808] wireguard: wg1: Could not create IPv4 socket [ 289.632328][ T9808] wireguard: wg2: Could not create IPv4 socket [ 295.666163][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.680033][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.688222][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.698959][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.707010][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.750038][ T9826] Failed to initialize the IGMP autojoin socket (err -2) [ 296.706045][ T9826] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 296.729014][ T9826] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 296.750083][ T9826] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 296.770487][ T9826] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 297.370797][ T9826] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 297.398768][ T9826] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 297.418078][ T9826] wireguard: wg0: Could not create IPv4 socket [ 297.428931][ T9826] wireguard: wg1: Could not create IPv4 socket [ 297.437828][ T9826] wireguard: wg2: Could not create IPv4 socket [ 303.622756][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.630890][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.638674][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.647188][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.654981][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.684356][ T9844] Failed to initialize the IGMP autojoin socket (err -2) [ 304.579747][ T9844] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 304.596058][ T9844] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 304.622032][ T9844] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 304.636859][ T9844] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 305.207302][ T9844] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 305.228647][ T9844] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 305.258723][ T9844] wireguard: wg0: Could not create IPv4 socket [ 305.268573][ T9844] wireguard: wg1: Could not create IPv4 socket [ 305.278060][ T9844] wireguard: wg2: Could not create IPv4 socket [ 311.676659][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.685728][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.694309][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.703824][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.711476][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.753609][ T9863] Failed to initialize the IGMP autojoin socket (err -2) [ 312.414363][ T30] audit: type=1400 audit(1764887470.480:2357): avc: denied { write } for pid=9873 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.500441][ T30] audit: type=1400 audit(1764887470.480:2358): avc: denied { read } for pid=9873 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.512762][ T9881] trusted_key: encrypted_key: keylen parameter is missing [ 312.705990][ T9881] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 312.790788][ T7284] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 312.900077][ T9863] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 312.944942][ T9863] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 312.975619][ T9863] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 312.999977][ T7284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.030989][ T5928] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 313.070242][ T7284] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.095340][ T9863] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 313.120460][ T7284] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.146446][ T7284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.221206][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 313.323063][ T7284] usb 4-1: config 0 descriptor?? [ 313.837550][ T5812] Bluetooth: hci2: command tx timeout [ 313.868973][ T5928] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 314.040681][ T5928] usb 5-1: config 0 has no interface number 0 [ 314.046823][ T5928] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 314.062543][ T5928] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 314.071795][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.079791][ T5928] usb 5-1: Product: syz [ 314.084070][ T5928] usb 5-1: Manufacturer: syz [ 314.088671][ T5928] usb 5-1: SerialNumber: syz [ 314.096335][ T5928] usb 5-1: config 0 descriptor?? [ 314.102199][ T9887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.145532][ T30] audit: type=1400 audit(1764887472.210:2359): avc: denied { read } for pid=9902 comm="syz.5.422" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.316515][ T7284] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 314.371804][ T7284] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 314.378593][ T9887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.430889][ T5956] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 314.647216][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 314.680502][ T5956] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 314.720568][ T5928] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 314.798910][ T5928] asix 5-1:0.188: probe with driver asix failed with error -61 [ 314.807286][ T5956] usb 6-1: config 0 has no interface number 0 [ 314.807367][ T5956] usb 6-1: config 0 interface 12 has no altsetting 0 [ 314.810306][ T5956] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 315.035676][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.079548][ T5956] usb 6-1: Product: syz [ 315.101908][ T5956] usb 6-1: Manufacturer: syz [ 315.114670][ T5956] usb 6-1: SerialNumber: syz [ 315.190204][ T5956] usb 6-1: config 0 descriptor?? [ 315.870647][ T5812] Bluetooth: hci2: command tx timeout [ 316.010569][ T9863] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 316.039828][ T30] audit: type=1400 audit(1764887474.100:2360): avc: denied { setopt } for pid=9902 comm="syz.5.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.096551][ T5956] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 316.132309][ T5927] usb 4-1: USB disconnect, device number 8 [ 316.145011][ T5956] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 316.163591][ T7284] usb 5-1: USB disconnect, device number 8 [ 316.181317][ T9863] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 316.199704][ T5956] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 316.273079][ T9863] wireguard: wg0: Could not create IPv4 socket [ 316.292271][ T5956] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 316.335776][ T9863] wireguard: wg1: Could not create IPv4 socket [ 316.356709][ T9863] wireguard: wg2: Could not create IPv4 socket [ 316.392469][ T5956] usb 6-1: USB disconnect, device number 10 [ 316.761299][ T5956] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 316.962036][ T5956] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 316.981137][ T30] audit: type=1326 audit(1764887475.050:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 317.015361][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.022703][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.038156][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.060765][ T5956] usb 4-1: config 0 has no interface number 0 [ 317.062776][ T9935] netlink: 52 bytes leftover after parsing attributes in process `syz.5.427'. [ 317.072825][ T5956] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 317.131484][ T9937] netlink: 180 bytes leftover after parsing attributes in process `syz.4.428'. [ 317.167291][ T30] audit: type=1326 audit(1764887475.070:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 317.206095][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.220036][ T5956] usb 4-1: Product: syz [ 317.224354][ T5956] usb 4-1: Manufacturer: syz [ 317.238084][ T5956] usb 4-1: SerialNumber: syz [ 317.243194][ T30] audit: type=1326 audit(1764887475.200:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 317.301373][ T5956] usb 4-1: config 0 descriptor?? [ 317.379472][ T30] audit: type=1326 audit(1764887475.200:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 317.383096][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.427'. [ 317.405399][ T30] audit: type=1326 audit(1764887475.200:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 317.468315][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 317.671730][ T30] audit: type=1326 audit(1764887475.250:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 317.701806][ T5956] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 317.710321][ T5956] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 317.719257][ T5956] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 318.177497][ T30] audit: type=1326 audit(1764887475.250:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 318.207231][ T5956] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 318.215118][ T5956] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 318.230492][ T5956] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 318.316300][ T9949] netlink: 60 bytes leftover after parsing attributes in process `syz.4.429'. [ 318.464543][ T5882] usb 4-1: USB disconnect, device number 9 [ 318.497201][ T5882] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 318.536392][ T5882] keyspan 4-1:0.133: device disconnected [ 319.866706][ T30] audit: type=1326 audit(1764887477.930:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 319.990687][ T30] audit: type=1326 audit(1764887477.970:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 320.366272][ T30] audit: type=1326 audit(1764887477.970:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 320.421770][ T30] audit: type=1326 audit(1764887477.970:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 320.516729][ T30] audit: type=1326 audit(1764887477.970:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 320.663515][ T5928] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 320.732664][ T9969] Failed to initialize the IGMP autojoin socket (err -2) [ 320.795147][ T30] audit: type=1326 audit(1764887477.970:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 320.915399][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.932147][ T5928] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 320.956052][ T30] audit: type=1326 audit(1764887477.970:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 320.981777][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.153454][ T5928] usb 3-1: config 0 descriptor?? [ 321.179898][ T30] audit: type=1326 audit(1764887477.970:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c05d8f34b code=0x7ffc0000 [ 321.509289][ T9972] affs: No valid root block on device nullb0 [ 321.603473][ T5928] steelseries 0003:1038:12B6.0004: unknown main item tag 0x7 [ 321.647631][ T5928] steelseries 0003:1038:12B6.0004: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 321.842701][ T9978] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 323.425856][ T5928] steelseries 0003:1038:12B6.0004: hid_hw_raw_request() failed with -71 [ 323.458280][ T5928] usb 3-1: USB disconnect, device number 12 [ 325.531243][ T9996] Failed to initialize the IGMP autojoin socket (err -2) [ 325.539205][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 325.539236][ T30] audit: type=1326 audit(1764887483.470:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 325.863107][ T5928] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 325.882151][ T30] audit: type=1326 audit(1764887483.470:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 326.052481][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.071244][ T30] audit: type=1326 audit(1764887483.480:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 326.142659][ T5928] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 326.170857][ T5927] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 326.201514][ T30] audit: type=1326 audit(1764887483.990:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 326.242517][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.263692][ T5928] usb 5-1: config 0 descriptor?? [ 326.299454][ T30] audit: type=1326 audit(1764887483.990:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 326.329056][T10002] Failed to initialize the IGMP autojoin socket (err -2) [ 326.351346][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 326.366888][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 326.391046][ T30] audit: type=1326 audit(1764887484.390:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 326.431607][ T5927] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 326.452903][ T30] audit: type=1326 audit(1764887484.390:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 326.476972][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.502188][ T5927] usb 3-1: Product: syz [ 326.508332][ T5927] usb 3-1: Manufacturer: syz [ 326.520952][ T5927] usb 3-1: SerialNumber: syz [ 326.546984][ T5927] usb 3-1: config 0 descriptor?? [ 326.556122][ T30] audit: type=1326 audit(1764887484.390:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 326.595842][ T9993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 326.621630][ T5927] hub 3-1:0.0: bad descriptor, ignoring hub [ 326.628521][ T5927] hub 3-1:0.0: probe with driver hub failed with error -5 [ 326.660377][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.671762][ T30] audit: type=1326 audit(1764887484.390:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 326.703779][ T5927] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 326.713478][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.722401][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.731722][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.739606][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.753590][ T30] audit: type=1326 audit(1764887484.390:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 326.790336][ T5928] waltop 0003:172F:0501.0005: unknown main item tag 0x6 [ 326.804471][T10007] Failed to initialize the IGMP autojoin socket (err -2) [ 326.855588][ T5927] usb 3-1: USB disconnect, device number 13 [ 326.861720][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 326.872533][ T5928] waltop 0003:172F:0501.0005: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.4-1/input0 [ 327.053333][ T9988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.090370][ T9988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.143576][ T5928] usb 5-1: USB disconnect, device number 9 [ 328.792526][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 328.840708][ T5816] Bluetooth: hci2: command tx timeout [ 329.022110][ T5927] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 329.038889][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.071203][ T5927] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 329.107781][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.197739][ T5927] usb 5-1: config 0 descriptor?? [ 329.229813][ T5927] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 329.459051][T10007] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 329.494884][T10007] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 329.526534][T10007] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 329.575323][T10007] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 330.113859][T10037] futex_wake_op: syz.2.450 tries to shift op by -1; fix this program [ 330.314338][T10044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.447'. [ 330.437387][T10044] binder: BINDER_SET_CONTEXT_MGR already set [ 330.453637][T10044] binder: 10021:10044 ioctl 4018620d 200000004a80 returned -16 [ 330.752962][T10051] sp0: Synchronizing with TNC [ 330.803969][T10052] FAULT_INJECTION: forcing a failure. [ 330.803969][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 330.851245][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz.5.449 Not tainted syzkaller #0 PREEMPT(full) [ 330.851284][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.851297][T10052] Call Trace: [ 330.851304][T10052] [ 330.851312][T10052] dump_stack_lvl+0x16c/0x1f0 [ 330.851349][T10052] should_fail_ex+0x512/0x640 [ 330.851378][T10052] ? fs_reclaim_acquire+0xae/0x150 [ 330.851412][T10052] should_failslab+0xc2/0x120 [ 330.851444][T10052] __kmalloc_noprof+0xdd/0x8f0 [ 330.851467][T10052] ? tomoyo_encode2+0x100/0x3e0 [ 330.851499][T10052] ? tomoyo_encode2+0x100/0x3e0 [ 330.851523][T10052] tomoyo_encode2+0x100/0x3e0 [ 330.851552][T10052] tomoyo_encode+0x29/0x50 [ 330.851579][T10052] tomoyo_realpath_from_path+0x18f/0x6e0 [ 330.851615][T10052] tomoyo_path_number_perm+0x245/0x580 [ 330.851636][T10052] ? tomoyo_path_number_perm+0x237/0x580 [ 330.851662][T10052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.851686][T10052] ? find_held_lock+0x2b/0x80 [ 330.851735][T10052] ? find_held_lock+0x2b/0x80 [ 330.851756][T10052] ? hook_file_ioctl_common+0x144/0x410 [ 330.851793][T10052] ? __fget_files+0x20e/0x3c0 [ 330.851819][T10052] security_file_ioctl+0x9b/0x240 [ 330.851846][T10052] __x64_sys_ioctl+0xb7/0x210 [ 330.851877][T10052] do_syscall_64+0xcd/0xf80 [ 330.851909][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.851931][T10052] RIP: 0033:0x7fb96018f749 [ 330.851948][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.851983][T10052] RSP: 002b:00007fb960fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.852003][T10052] RAX: ffffffffffffffda RBX: 00007fb9603e6090 RCX: 00007fb96018f749 [ 330.852017][T10052] RDX: 0000200000000480 RSI: 0000000000008926 RDI: 0000000000000003 [ 330.852031][T10052] RBP: 00007fb960fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 330.852044][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.852056][T10052] R13: 00007fb9603e6128 R14: 00007fb9603e6090 R15: 00007ffe4b1fccf8 [ 330.852087][T10052] [ 330.854589][T10052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.072776][ T5816] Bluetooth: hci2: command tx timeout [ 331.494282][T10055] affs: No valid root block on device nullb0 [ 331.756353][T10007] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 331.847567][T10007] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 331.915894][T10007] wireguard: wg0: Could not create IPv4 socket [ 331.958088][T10007] wireguard: wg1: Could not create IPv4 socket [ 331.989704][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 332.025433][T10007] wireguard: wg2: Could not create IPv4 socket [ 332.684489][ T7284] usb 5-1: USB disconnect, device number 10 [ 332.860621][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 332.860637][ T30] audit: type=1400 audit(1764887490.920:2504): avc: denied { create } for pid=10069 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 332.868258][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 332.975349][ T30] audit: type=1400 audit(1764887490.930:2505): avc: denied { connect } for pid=10069 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 333.017397][T10073] futex_wake_op: syz.2.457 tries to shift op by -1; fix this program [ 333.790306][ T30] audit: type=1400 audit(1764887491.830:2506): avc: denied { setopt } for pid=10081 comm="syz.5.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.680944][T10091] devpts: Bad value for 'gid' [ 334.685661][T10091] devpts: Bad value for 'gid' [ 336.230734][ T30] audit: type=1400 audit(1764887494.280:2507): avc: denied { read } for pid=10099 comm="syz.5.464" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 336.564918][ T30] audit: type=1400 audit(1764887494.280:2508): avc: denied { open } for pid=10099 comm="syz.5.464" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 336.737637][T10109] affs: No valid root block on device nullb0 [ 337.047243][T10101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.110756][T10101] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 337.178221][T10101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.195723][T10101] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 337.288869][T10101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.305380][T10101] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 337.442478][T10101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.523395][T10101] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.619562][T10118] devpts: Bad value for 'gid' [ 337.624377][T10118] devpts: Bad value for 'gid' [ 338.351070][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 339.230693][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 339.310826][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 339.470714][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 339.901905][T10126] input: syz1 as /devices/virtual/input/input15 [ 340.046213][ T30] audit: type=1400 audit(1764887498.010:2509): avc: denied { ioctl } for pid=10123 comm="syz.5.470" path="socket:[28284]" dev="sockfs" ino=28284 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.432257][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 341.310815][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 341.488191][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 341.551271][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 341.559494][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.474'. [ 341.887480][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.897201][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.906928][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.914661][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.922175][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.993453][T10147] Failed to initialize the IGMP autojoin socket (err -2) [ 342.646488][ T30] audit: type=1400 audit(1764887500.700:2510): avc: denied { write } for pid=10161 comm="syz.3.478" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 342.708590][ T30] audit: type=1400 audit(1764887500.740:2511): avc: denied { ioctl } for pid=10163 comm="syz.2.479" path="socket:[28811]" dev="sockfs" ino=28811 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 342.799131][ T30] audit: type=1400 audit(1764887500.770:2512): avc: denied { append } for pid=10161 comm="syz.3.478" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 343.071585][ T7507] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 343.262579][T10171] Failed to initialize the IGMP autojoin socket (err -2) [ 343.552258][ T30] audit: type=1326 audit(1764887501.220:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 343.620674][ T7507] usb 3-1: Using ep0 maxpacket: 8 [ 343.630197][ T7507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.641961][ T7507] usb 3-1: config 1 interface 0 has no altsetting 0 [ 343.653083][ T7507] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=6a.56 [ 343.666655][ T7507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.677112][ T7507] usb 3-1: Product: syz [ 343.681636][ T7507] usb 3-1: Manufacturer: syz [ 343.748350][ T7507] usb 3-1: SerialNumber: syz [ 343.770464][ T30] audit: type=1326 audit(1764887501.220:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 343.832817][ T30] audit: type=1326 audit(1764887501.220:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 344.041393][ T5816] Bluetooth: hci2: command tx timeout [ 344.085106][ T7507] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 344.174248][T10186] 9pnet_fd: Insufficient options for proto=fd [ 344.564288][ T7507] pwc: send_video_command error -71 [ 344.575606][ T30] audit: type=1326 audit(1764887501.720:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 344.605612][ T7507] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 344.715018][ T7507] Philips webcam 3-1:1.0: probe with driver Philips webcam failed with error -71 [ 344.734231][ T30] audit: type=1326 audit(1764887501.720:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 344.849685][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.484'. [ 344.870116][ T7507] usb 3-1: USB disconnect, device number 14 [ 345.146479][ T30] audit: type=1326 audit(1764887502.350:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.3.483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c05d8f749 code=0x0 [ 345.381134][ T5927] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 345.417251][T10147] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 345.517759][T10147] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 345.531343][T10194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 345.561284][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 345.573262][ T5927] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 345.588763][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.601642][T10147] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 345.625766][T10147] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 345.634402][ T5927] usb 4-1: config 0 descriptor?? [ 345.655509][ T5927] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 345.680414][T10198] program syz.5.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.951641][ T5928] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 346.110955][ T5816] Bluetooth: hci2: command tx timeout [ 346.127888][ T5928] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 346.142690][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.204212][ T5928] usb 6-1: config 0 descriptor?? [ 347.165674][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.178399][ T5928] ath6kl: Failed to read usb control message: -32 [ 347.193866][ T30] audit: type=1326 audit(1764887505.240:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 347.227251][ T5928] ath6kl: Unable to read the bmi data from the device: -32 [ 347.238264][ T5928] ath6kl: Unable to recv target info: -32 [ 347.256643][ T30] audit: type=1326 audit(1764887505.240:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 347.410947][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.411965][ T5927] gspca_vc032x: reg_w err -110 [ 347.588112][ T5928] ath6kl: Failed to init ath6kl core: -32 [ 347.674623][ T5928] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 347.708710][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.747908][ T30] audit: type=1326 audit(1764887505.320:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 347.779013][ T5928] usb 6-1: USB disconnect, device number 11 [ 347.812731][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.833454][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.848969][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.868721][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.886838][ T30] audit: type=1326 audit(1764887505.470:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 347.918572][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.941027][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.973178][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.997250][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.027967][ T30] audit: type=1326 audit(1764887505.470:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 348.055325][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.063293][T10147] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 348.074188][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.126554][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.204275][ T5816] Bluetooth: hci2: command tx timeout [ 348.213394][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.219032][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.233734][ T30] audit: type=1326 audit(1764887506.180:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 348.285360][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.362620][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.371409][T10220] affs: No valid root block on device nullb0 [ 348.606851][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.615592][ T30] audit: type=1326 audit(1764887506.180:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 348.639379][ T5927] gspca_vc032x: I2c Bus Busy Wait 00 [ 348.644744][ T5927] gspca_vc032x: Unknown sensor... [ 348.652269][ T5927] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 348.667747][ T5927] usb 4-1: USB disconnect, device number 10 [ 348.674532][ T30] audit: type=1326 audit(1764887506.180:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 348.735068][T10147] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 348.834143][ T30] audit: type=1326 audit(1764887506.180:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa0a2f8f749 code=0x7ffc0000 [ 348.943034][T10147] wireguard: wg0: Could not create IPv4 socket [ 348.979625][T10147] wireguard: wg1: Could not create IPv4 socket [ 349.047315][T10147] wireguard: wg2: Could not create IPv4 socket [ 351.034476][T10253] fuse: Bad value for 'fd' [ 351.212131][ T5927] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 351.503446][ T5927] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 351.532879][ T5927] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 351.552268][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.612861][ T5927] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 351.641691][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 351.671647][ T5927] usb 4-1: Product: syz [ 351.712935][ T5927] usb 4-1: Manufacturer: syz [ 351.721335][ T5927] usb 4-1: SerialNumber: syz [ 351.772653][ T5927] usb 4-1: config 0 descriptor?? [ 351.812930][T10250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.871755][ T5927] usb 4-1: selecting invalid altsetting 0 [ 352.272701][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 352.272716][ T30] audit: type=1400 audit(1764887510.320:2538): avc: denied { create } for pid=10244 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 352.287709][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.393522][T10265] overlayfs: overlapping lowerdir path [ 352.452359][ T30] audit: type=1400 audit(1764887510.340:2539): avc: denied { write } for pid=10244 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 352.477982][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.510080][ T30] audit: type=1400 audit(1764887510.380:2540): avc: denied { bind } for pid=10260 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 352.559882][ T30] audit: type=1400 audit(1764887510.390:2541): avc: denied { write } for pid=10262 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 352.617844][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.671299][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.720947][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.761675][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.775140][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.802967][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.855649][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.885812][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.909507][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.936632][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.958796][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.057070][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.131372][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.185149][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.206147][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.243819][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.277994][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.309966][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.347293][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.369238][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.394365][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.433145][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.484663][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.537688][T10247] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 353.652153][T10247] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 353.741715][ T6091] usb 4-1: USB disconnect, device number 11 [ 355.877783][ T30] audit: type=1400 audit(1764887513.940:2542): avc: denied { read write } for pid=10276 comm="syz.3.506" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 356.167262][ T30] audit: type=1400 audit(1764887513.970:2543): avc: denied { open } for pid=10276 comm="syz.3.506" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 356.192100][ T30] audit: type=1400 audit(1764887514.130:2544): avc: denied { write } for pid=10276 comm="syz.3.506" dev="sockfs" ino=29164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.233753][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.504'. [ 356.340712][ T7284] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 356.520680][ T7284] usb 5-1: Using ep0 maxpacket: 32 [ 356.556217][ T7284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 356.647568][ T7284] usb 5-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 356.711010][ T7284] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 356.722956][ T7284] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f4.6a [ 356.741200][ T7284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.749223][ T7284] usb 5-1: Product: syz [ 356.784943][ T7284] usb 5-1: Manufacturer: syz [ 356.789673][ T7284] usb 5-1: SerialNumber: syz [ 357.519040][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.529779][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.540775][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.548631][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.558108][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.599585][T10295] Failed to initialize the IGMP autojoin socket (err -2) [ 357.814550][ T7284] usb 5-1: USB disconnect, device number 11 [ 358.040955][ T5927] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 358.215469][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.243340][ T5927] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.299610][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 358.324604][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 358.345997][ T5927] usb 4-1: Product: syz [ 358.365454][ T5927] usb 4-1: Manufacturer: syz [ 358.383315][ T5927] usb 4-1: SerialNumber: syz [ 359.544226][ T30] audit: type=1400 audit(1764887517.610:2545): avc: denied { create } for pid=10312 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 359.599282][ T30] audit: type=1400 audit(1764887517.640:2546): avc: denied { ioctl } for pid=10312 comm="syz.4.511" path="socket:[30305]" dev="sockfs" ino=30305 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 359.630697][ T5816] Bluetooth: hci2: command tx timeout [ 359.694694][ T30] audit: type=1400 audit(1764887517.700:2547): avc: denied { write } for pid=10312 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 359.757669][T10312] lec:lec_atm_close: lec0: Shut down! [ 360.394093][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 360.806157][T10295] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 360.817536][ T6091] usb 4-1: USB disconnect, device number 12 [ 360.861903][T10295] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 361.027065][T10295] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 361.114004][T10295] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 361.490031][ T30] audit: type=1400 audit(1764887519.550:2548): avc: denied { listen } for pid=10347 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 361.533870][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 361.720654][ T5816] Bluetooth: hci2: command tx timeout [ 362.151864][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 362.650553][T10375] netlink: 'syz.5.523': attribute type 27 has an invalid length. [ 363.051943][ T30] audit: type=1400 audit(1764887520.770:2549): avc: denied { ioctl } for pid=10371 comm="syz.5.523" path="socket:[30648]" dev="sockfs" ino=30648 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 363.464855][T10375] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.473256][T10375] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.513390][T10381] affs: No valid root block on device nullb0 [ 363.583377][ T5881] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 363.789189][T10375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.800387][T10375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.803589][ T5816] Bluetooth: hci2: command tx timeout [ 363.881539][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 364.322998][ T5881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 364.430363][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 364.436414][T10376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.449982][T10376] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.460748][ T5881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 364.471876][T10376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.538796][ T2984] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.556553][ T2984] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.581567][ T2984] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.603433][ T5881] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 364.640437][ T2984] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.652809][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.676014][ T30] audit: type=1400 audit(1764887522.740:2550): avc: denied { block_suspend } for pid=10388 comm="syz.4.527" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 364.677458][ T5881] usb 6-1: Product: syz [ 364.866671][ T5881] usb 6-1: Manufacturer: syz [ 364.875048][ T5881] usb 6-1: SerialNumber: syz [ 364.882548][ T5881] usb 6-1: config 0 descriptor?? [ 364.888285][T10377] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 364.895660][T10377] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 364.904285][ T5881] usb 6-1: ucan: probing device on interface #0 [ 366.003133][T10295] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 366.736075][ T5816] Bluetooth: hci2: command tx timeout [ 366.742028][ T5881] ucan 6-1:0.0: probe with driver ucan failed with error -110 [ 367.002746][ T6091] usb 6-1: USB disconnect, device number 12 [ 367.437435][T10408] syz.4.529: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 367.456675][T10408] CPU: 0 UID: 0 PID: 10408 Comm: syz.4.529 Not tainted syzkaller #0 PREEMPT(full) [ 367.456706][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.456719][T10408] Call Trace: [ 367.456727][T10408] [ 367.456736][T10408] dump_stack_lvl+0x16c/0x1f0 [ 367.456772][T10408] warn_alloc+0x248/0x3a0 [ 367.456799][T10408] ? __pfx_warn_alloc+0x10/0x10 [ 367.456837][T10408] ? hash_netport4_resize+0x1d8/0x1c50 [ 367.456860][T10408] ? __vmalloc_node_noprof+0xad/0xf0 [ 367.456898][T10408] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 367.456938][T10408] ? hash_netport4_resize+0x1d8/0x1c50 [ 367.456961][T10408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 367.456991][T10408] ? ___kmalloc_large_node+0x130/0x1a0 [ 367.457021][T10408] __kvmalloc_node_noprof+0x42c/0xa50 [ 367.457043][T10408] ? hash_netport4_resize+0x1d8/0x1c50 [ 367.457060][T10408] ? trace_kmalloc+0x2b/0xb0 [ 367.457081][T10408] ? __kmalloc_noprof+0x34f/0x8f0 [ 367.457097][T10408] ? hash_netport4_resize+0x1d8/0x1c50 [ 367.457119][T10408] ? hash_netport4_resize+0x1d8/0x1c50 [ 367.457135][T10408] hash_netport4_resize+0x1d8/0x1c50 [ 367.457153][T10408] ? __pfx_hash_netport4_add+0x10/0x10 [ 367.457170][T10408] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 367.457211][T10408] ? __pfx_hash_netport4_resize+0x10/0x10 [ 367.457234][T10408] call_ad.constprop.0+0x36d/0x940 [ 367.457252][T10408] ? __pfx_hash_netport4_resize+0x10/0x10 [ 367.457272][T10408] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 367.457288][T10408] ? __pfx___nla_validate_parse+0x10/0x10 [ 367.457317][T10408] ? __nla_parse+0x40/0x60 [ 367.457337][T10408] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 367.457360][T10408] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 367.457379][T10408] ? trace_contention_end+0xdd/0x110 [ 367.457403][T10408] ? __mutex_lock+0x27b/0x1b10 [ 367.457455][T10408] ? find_held_lock+0x2b/0x80 [ 367.457484][T10408] nfnetlink_rcv_msg+0x9fc/0x1200 [ 367.457509][T10408] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 367.457530][T10408] ? __lock_acquire+0x433/0x22f0 [ 367.457572][T10408] ? avc_has_perm_noaudit+0x149/0x3b0 [ 367.457607][T10408] netlink_rcv_skb+0x158/0x420 [ 367.457633][T10408] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 367.457651][T10408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.457683][T10408] ? ns_capable+0xd7/0x110 [ 367.457710][T10408] nfnetlink_rcv+0x1b3/0x430 [ 367.457736][T10408] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 367.457761][T10408] ? netlink_deliver_tap+0x1ae/0xd30 [ 367.457786][T10408] netlink_unicast+0x5aa/0x870 [ 367.457810][T10408] ? __pfx_netlink_unicast+0x10/0x10 [ 367.457841][T10408] netlink_sendmsg+0x8c8/0xdd0 [ 367.457866][T10408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.457896][T10408] ____sys_sendmsg+0xa5d/0xc30 [ 367.457919][T10408] ? copy_msghdr_from_user+0x10a/0x160 [ 367.457935][T10408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.457961][T10408] ? __pfx_futex_wake_mark+0x10/0x10 [ 367.457985][T10408] ___sys_sendmsg+0x134/0x1d0 [ 367.457999][T10408] ? find_held_lock+0x2b/0x80 [ 367.458017][T10408] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.458033][T10408] ? __lock_acquire+0x433/0x22f0 [ 367.458083][T10408] __sys_sendmsg+0x16d/0x220 [ 367.458101][T10408] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.458117][T10408] ? __x64_sys_futex+0x1e0/0x4c0 [ 367.458157][T10408] do_syscall_64+0xcd/0xf80 [ 367.458183][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.458201][T10408] RIP: 0033:0x7fa0a2f8f749 [ 367.458217][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.458233][T10408] RSP: 002b:00007fa0a3ec2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.458251][T10408] RAX: ffffffffffffffda RBX: 00007fa0a31e6180 RCX: 00007fa0a2f8f749 [ 367.458262][T10408] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 367.458273][T10408] RBP: 00007fa0a3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 367.458283][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.458294][T10408] R13: 00007fa0a31e6218 R14: 00007fa0a31e6180 R15: 00007ffcdc3ee708 [ 367.458318][T10408] [ 367.458328][T10408] Mem-Info: [ 367.786448][T10295] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 367.789858][T10408] active_anon:24660 inactive_anon:0 isolated_anon:0 [ 367.789858][T10408] active_file:18198 inactive_file:41119 isolated_file:0 [ 367.789858][T10408] unevictable:768 dirty:271 writeback:0 [ 367.789858][T10408] slab_reclaimable:13519 slab_unreclaimable:106393 [ 367.789858][T10408] mapped:37325 shmem:10198 pagetables:2233 [ 367.789858][T10408] sec_pagetables:0 bounce:0 [ 367.789858][T10408] kernel_misc_reclaimable:0 [ 367.789858][T10408] free:1261203 free_pcp:26495 free_cma:0 [ 367.934910][T10408] Node 0 active_anon:98800kB inactive_anon:0kB active_file:72792kB inactive_file:164272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149280kB dirty:1100kB writeback:0kB shmem:39176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15616kB pagetables:8816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 367.967451][T10408] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 368.009737][T10408] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.042328][T10408] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 368.048139][T10408] Node 0 DMA32 free:1136420kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99000kB inactive_anon:0kB active_file:72792kB inactive_file:164272kB unevictable:1536kB writepending:1100kB zspages:0kB present:3129332kB managed:2542032kB mlocked:0kB bounce:0kB free_pcp:85504kB local_pcp:53088kB free_cma:0kB [ 368.127007][T10408] lowmem_reserve[]: 0 0 1 1 1 [ 368.131837][T10408] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.163045][T10408] lowmem_reserve[]: 0 0 0 0 0 [ 368.167847][T10408] Node 1 Normal free:3892824kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21192kB local_pcp:14888kB free_cma:0kB [ 368.202579][T10408] lowmem_reserve[]: 0 0 0 0 0 [ 368.207671][T10408] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 368.222795][T10408] Node 0 DMA32: 561*4kB (UME) 116*8kB (UM) 118*16kB (UM) 465*32kB (UME) 388*64kB (UME) 264*128kB (UM) 60*256kB (UM) 54*512kB (UM) 39*1024kB (UM) 14*2048kB (ME) 231*4096kB (UM) = 1136356kB [ 368.242012][T10408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 368.253590][T10408] Node 1 Normal: 228*4kB (UME) 55*8kB (UME) 41*16kB (UME) 162*32kB (UME) 39*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3892824kB [ 368.272385][T10408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.281977][T10408] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.291293][T10408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.301376][T10408] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.310774][T10408] 69491 total pagecache pages [ 368.315445][T10408] 0 pages in swap cache [ 368.319584][T10408] Free swap = 124996kB [ 368.324358][T10408] Total swap = 124996kB [ 368.328517][T10408] 2097051 pages RAM [ 368.332893][T10408] 0 pages HighMem/MovableOnly [ 368.337561][T10408] 429517 pages reserved [ 368.341752][T10408] 0 pages cma reserved [ 368.583354][T10295] wireguard: wg0: Could not create IPv4 socket [ 368.597446][T10295] wireguard: wg1: Could not create IPv4 socket [ 368.623176][T10295] wireguard: wg2: Could not create IPv4 socket [ 369.482849][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 370.177513][T10432] affs: No valid root block on device nullb0 [ 370.530713][ T30] audit: type=1326 audit(1764887528.590:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 370.615300][ T30] audit: type=1326 audit(1764887528.640:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 370.692421][T10445] Failed to initialize the IGMP autojoin socket (err -2) [ 371.165886][ T30] audit: type=1326 audit(1764887529.230:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 371.270650][ T30] audit: type=1326 audit(1764887529.250:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 371.348318][ T30] audit: type=1326 audit(1764887529.310:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 371.448765][ T30] audit: type=1326 audit(1764887529.320:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 371.548661][ T30] audit: type=1326 audit(1764887529.320:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 371.610670][ T30] audit: type=1326 audit(1764887529.330:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 371.680793][ T30] audit: type=1326 audit(1764887529.330:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 371.745893][ T30] audit: type=1326 audit(1764887529.330:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 372.270830][ T5812] Bluetooth: hci2: command 0x1003 tx timeout [ 372.277143][ T5816] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 373.484362][T10469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.525497][T10469] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 373.895572][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.907197][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.917152][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.926331][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.935062][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.976851][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 373.978541][T10480] Failed to initialize the IGMP autojoin socket (err -2) [ 374.992842][T10492] ocfs2: Bad value for 'barrier' [ 375.146228][T10499] Failed to initialize the IGMP autojoin socket (err -2) [ 376.100747][ T5816] Bluetooth: hci2: command tx timeout [ 376.158045][T10515] binder: BINDER_SET_CONTEXT_MGR already set [ 376.164133][T10515] binder: 10509:10515 ioctl 4018620d 200000000040 returned -16 [ 376.526956][T10480] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 376.562879][T10480] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 376.653457][T10480] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 376.751821][T10480] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 376.936883][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 376.936899][ T30] audit: type=1400 audit(1764887535.000:2571): avc: denied { write } for pid=10520 comm="syz.2.563" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 378.110926][ T5816] Bluetooth: hci2: command tx timeout [ 378.183355][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 378.447560][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.454432][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.788570][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 379.122445][T10480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 379.219472][T10480] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 379.299366][T10480] wireguard: wg0: Could not create IPv4 socket [ 379.382398][T10480] wireguard: wg1: Could not create IPv4 socket [ 379.409485][T10480] wireguard: wg2: Could not create IPv4 socket [ 379.462456][ T30] audit: type=1400 audit(1764887537.497:2572): avc: denied { shutdown } for pid=10563 comm="syz.5.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.708936][ T30] audit: type=1400 audit(1764887537.757:2573): avc: denied { create } for pid=10567 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 379.721901][T10568] loop9: detected capacity change from 0 to 7 [ 379.729895][T10566] syzkaller0: entered promiscuous mode [ 379.780895][T10566] syzkaller0: entered allmulticast mode [ 379.811069][ T30] audit: type=1400 audit(1764887537.767:2574): avc: denied { ioctl } for pid=10567 comm="syz.4.574" path="socket:[31409]" dev="sockfs" ino=31409 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 379.837840][T10568] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 379.870879][T10568] loop9: partition table partially beyond EOD, truncated [ 379.899728][T10568] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 380.100704][ T30] audit: type=1800 audit(1764887538.117:2575): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.574" name="SYSV798dd824" dev="tmpfs" ino=0 res=0 errno=0 [ 380.256824][ T30] audit: type=1400 audit(1764887538.127:2576): avc: denied { bind } for pid=10567 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.348635][ T30] audit: type=1400 audit(1764887538.127:2577): avc: denied { connect } for pid=10567 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.662381][T10576] usb usb8: usbfs: process 10576 (syz.2.575) did not claim interface 0 before use [ 381.481672][T10582] Failed to initialize the IGMP autojoin socket (err -2) [ 381.792496][ T30] audit: type=1326 audit(1764887539.427:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.5.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 381.873606][ T30] audit: type=1326 audit(1764887539.427:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.5.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 381.929101][ T30] audit: type=1326 audit(1764887539.437:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.5.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 382.023195][ T30] audit: type=1326 audit(1764887539.927:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.5.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 382.073025][ T30] audit: type=1326 audit(1764887539.927:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.5.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 384.527009][T10626] netlink: 188 bytes leftover after parsing attributes in process `syz.5.584'. [ 384.928115][T10629] FAULT_INJECTION: forcing a failure. [ 384.928115][T10629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.950995][T10629] CPU: 0 UID: 0 PID: 10629 Comm: syz.2.590 Not tainted syzkaller #0 PREEMPT(full) [ 384.951013][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.951021][T10629] Call Trace: [ 384.951027][T10629] [ 384.951033][T10629] dump_stack_lvl+0x16c/0x1f0 [ 384.951055][T10629] should_fail_ex+0x512/0x640 [ 384.951075][T10629] _copy_from_user+0x2e/0xd0 [ 384.951091][T10629] copy_msghdr_from_user+0x98/0x160 [ 384.951103][T10629] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 384.951114][T10629] ? __lock_acquire+0x433/0x22f0 [ 384.951136][T10629] ___sys_sendmsg+0xfe/0x1d0 [ 384.951147][T10629] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.951158][T10629] ? __lock_acquire+0x433/0x22f0 [ 384.951189][T10629] __sys_sendmsg+0x16d/0x220 [ 384.951200][T10629] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.951221][T10629] do_syscall_64+0xcd/0xf80 [ 384.951239][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.951251][T10629] RIP: 0033:0x7f228d38f749 [ 384.951261][T10629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.951272][T10629] RSP: 002b:00007f228e233038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.951284][T10629] RAX: ffffffffffffffda RBX: 00007f228d5e5fa0 RCX: 00007f228d38f749 [ 384.951292][T10629] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 384.951299][T10629] RBP: 00007f228e233090 R08: 0000000000000000 R09: 0000000000000000 [ 384.951305][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.951312][T10629] R13: 00007f228d5e6038 R14: 00007f228d5e5fa0 R15: 00007ffee4fe5f88 [ 384.951327][T10629] [ 384.953096][ T30] audit: type=1400 audit(1764887542.987:2583): avc: denied { getopt } for pid=10628 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 385.460665][ T30] audit: type=1400 audit(1764887543.447:2584): avc: denied { read } for pid=10630 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 385.620809][ T30] audit: type=1400 audit(1764887543.457:2585): avc: denied { getopt } for pid=10630 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 386.873744][ T30] audit: type=1400 audit(1764887544.917:2586): avc: denied { mount } for pid=10639 comm="syz.4.594" name="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 387.131844][ T30] audit: type=1400 audit(1764887544.917:2587): avc: denied { search } for pid=10639 comm="syz.4.594" name="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.154617][ T30] audit: type=1400 audit(1764887544.917:2588): avc: denied { search } for pid=10639 comm="syz.4.594" name="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.135665][ T30] audit: type=1400 audit(1764887544.927:2589): avc: denied { mounton } for pid=10639 comm="syz.4.594" path="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.158407][ T30] audit: type=1400 audit(1764887544.927:2590): avc: denied { read open } for pid=10639 comm="syz.4.594" path="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.482251][ T30] audit: type=1400 audit(1764887546.547:2591): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 390.229293][ T30] audit: type=1400 audit(1764887548.287:2592): avc: denied { write } for pid=10650 comm="syz.2.597" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 390.301387][T10651] Failed to initialize the IGMP autojoin socket (err -2) [ 390.341304][ T30] audit: type=1400 audit(1764887548.307:2593): avc: denied { map } for pid=10652 comm="syz.5.596" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.460680][ T30] audit: type=1400 audit(1764887548.317:2594): avc: denied { setopt } for pid=10652 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.521001][ T30] audit: type=1400 audit(1764887548.387:2595): avc: denied { create } for pid=10654 comm="syz.4.599" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 390.543904][T10663] netlink: 36 bytes leftover after parsing attributes in process `syz.5.600'. [ 390.580712][ T30] audit: type=1400 audit(1764887548.387:2596): avc: denied { unlink } for pid=10654 comm="syz.4.599" name="file0" dev="ramfs" ino=32211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 391.090375][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.100532][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.109735][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.140373][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.145758][T10675] netlink: 76 bytes leftover after parsing attributes in process `syz.2.604'. [ 391.157530][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.234203][T10673] Failed to initialize the IGMP autojoin socket (err -2) [ 391.598672][T10685] affs: No valid root block on device nullb0 [ 393.231685][ T5812] Bluetooth: hci2: command tx timeout [ 395.886720][ T5812] Bluetooth: hci2: command tx timeout [ 397.758037][T10703] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR [ 397.960815][ T5812] Bluetooth: hci2: command tx timeout [ 398.199546][T10716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10716 comm=syz.4.613 [ 398.535448][T10673] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 398.689787][T10673] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 398.872989][T10673] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 399.143441][T10673] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 399.754288][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 399.754304][ T30] audit: type=1326 audit(1764887557.817:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 399.860771][ T30] audit: type=1326 audit(1764887557.857:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.120713][ T5812] Bluetooth: hci2: command tx timeout [ 400.157774][ T30] audit: type=1326 audit(1764887558.207:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.250710][ T5927] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 400.371279][ T30] audit: type=1326 audit(1764887558.437:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.371478][ T30] audit: type=1326 audit(1764887558.437:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.381135][ T5927] usb 3-1: device descriptor read/64, error -71 [ 400.454341][T10732] Failed to initialize the IGMP autojoin socket (err -2) [ 400.466631][ T30] audit: type=1326 audit(1764887558.517:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.530755][ T30] audit: type=1326 audit(1764887558.517:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.587524][ T30] audit: type=1326 audit(1764887558.517:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.641058][ T30] audit: type=1326 audit(1764887558.647:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.720094][ T30] audit: type=1326 audit(1764887558.647:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 400.810728][ T5927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 400.960722][ T5927] usb 3-1: device descriptor read/64, error -71 [ 401.073230][ T5927] usb usb3-port1: attempt power cycle [ 401.093244][T10673] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 401.153034][T10673] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 401.244733][T10673] wireguard: wg0: Could not create IPv4 socket [ 401.284600][T10673] wireguard: wg1: Could not create IPv4 socket [ 401.412296][T10673] wireguard: wg2: Could not create IPv4 socket [ 401.440830][ T5927] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 401.511896][ T5927] usb 3-1: device descriptor read/8, error -71 [ 401.781311][ T5927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 401.821945][ T5927] usb 3-1: device descriptor read/8, error -71 [ 401.952584][ T5927] usb usb3-port1: unable to enumerate USB device [ 402.069530][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.621'. [ 402.093986][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.621'. [ 402.229775][T10755] /dev/nullb0: Can't open blockdev [ 402.349092][T10755] Failed to initialize the IGMP autojoin socket (err -2) [ 403.227038][T10764] /dev/nullb0: Can't open blockdev [ 403.936699][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 404.154518][ T24] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 404.217906][ T24] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 404.244627][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.270783][ T24] usb 5-1: Product: syz [ 404.309624][ T24] usb 5-1: Manufacturer: syz [ 404.347828][ T24] usb 5-1: SerialNumber: syz [ 405.267321][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 405.267582][ T30] audit: type=1326 audit(1764887563.317:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10770 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 405.334169][ T24] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 405.350778][ T30] audit: type=1326 audit(1764887563.317:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10770 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 405.391061][ T24] command write [95] error -22 [ 405.424119][ T24] usb 5-1: USB disconnect, device number 12 [ 405.984360][ T30] audit: type=1326 audit(1764887564.047:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 406.036520][ T30] audit: type=1326 audit(1764887564.067:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 406.097404][ T30] audit: type=1400 audit(1764887564.077:2728): avc: denied { accept } for pid=10778 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 406.251668][ T30] audit: type=1400 audit(1764887564.317:2729): avc: denied { read } for pid=10778 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 408.190726][ T30] audit: type=1400 audit(1764887566.197:2730): avc: denied { setattr } for pid=10785 comm="syz.4.629" name="[io_uring]" dev="anon_inodefs" ino=33607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 409.266217][ T30] audit: type=1400 audit(1764887567.327:2731): avc: denied { unlink } for pid=10790 comm="syz.5.630" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.369441][ T30] audit: type=1400 audit(1764887567.427:2732): avc: denied { read write } for pid=10796 comm="syz.3.632" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 409.404332][T10797] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 409.450308][ T30] audit: type=1400 audit(1764887567.457:2733): avc: denied { open } for pid=10796 comm="syz.3.632" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 409.548361][T10800] Driver unsupported XDP return value 0 on prog (id 205) dev N/A, expect packet loss! [ 409.723343][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'. [ 411.814875][ T30] audit: type=1400 audit(1764887569.877:2734): avc: denied { ioctl } for pid=10804 comm="syz.2.635" path="socket:[33642]" dev="sockfs" ino=33642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.947433][ T30] audit: type=1400 audit(1764887569.877:2735): avc: denied { shutdown } for pid=10804 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 412.164694][T10819] /dev/nullb0: Can't open blockdev [ 412.225350][T10819] Failed to initialize the IGMP autojoin socket (err -2) [ 412.321044][ T30] audit: type=1326 audit(1764887570.217:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 412.723068][ T30] audit: type=1326 audit(1764887570.217:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 412.880684][ T30] audit: type=1326 audit(1764887570.217:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 412.940718][ T30] audit: type=1326 audit(1764887570.237:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 413.532697][ T30] audit: type=1326 audit(1764887570.237:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 413.761587][ T30] audit: type=1326 audit(1764887570.237:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 413.847300][ T30] audit: type=1326 audit(1764887570.247:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 413.939947][ T30] audit: type=1326 audit(1764887570.247:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 414.249947][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.259648][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.268433][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.276740][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.286290][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.363155][T10834] Failed to initialize the IGMP autojoin socket (err -2) [ 414.420698][ T5881] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 414.609595][ T5881] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 414.644381][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.713164][ T5881] usb 3-1: config 0 has no interface number 0 [ 414.775779][ T5881] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 414.835503][ T5881] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.954358][ T5881] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 414.963967][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.975522][ T5881] usb 3-1: Product: syz [ 414.979685][ T5881] usb 3-1: Manufacturer: syz [ 414.991356][ T5881] usb 3-1: SerialNumber: syz [ 414.999532][ T5881] usb 3-1: config 0 descriptor?? [ 415.069129][T10843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56032 sclass=netlink_route_socket pid=10843 comm=syz.5.642 [ 415.640838][T10831] Failed to initialize the IGMP autojoin socket (err -2) [ 416.357803][ T5816] Bluetooth: hci2: command tx timeout [ 416.742672][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.644'. [ 416.922186][T10855] overlayfs: workdir and upperdir must be separate subtrees [ 417.874415][ T5927] usb 3-1: USB disconnect, device number 19 [ 417.980955][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 417.980971][ T30] audit: type=1400 audit(1764887576.037:2817): avc: denied { mount } for pid=10860 comm="syz.5.646" name="/" dev="autofs" ino=32701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 418.206089][T10869] /dev/nullb0: Can't open blockdev [ 418.430797][ T5816] Bluetooth: hci2: command tx timeout [ 418.558648][T10834] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 418.623582][T10834] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 418.674882][T10834] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 418.716628][T10834] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 418.827272][ T30] audit: type=1400 audit(1764887576.887:2818): avc: denied { unmount } for pid=6318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 418.993795][ T30] audit: type=1326 audit(1764887577.047:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 419.179713][ T30] audit: type=1326 audit(1764887577.097:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 419.179764][ T30] audit: type=1326 audit(1764887577.097:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 419.179802][ T30] audit: type=1326 audit(1764887577.097:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 419.773750][ T30] audit: type=1326 audit(1764887577.097:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 419.970405][ T30] audit: type=1326 audit(1764887577.127:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 419.996059][ T30] audit: type=1326 audit(1764887577.147:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 420.488871][ T30] audit: type=1326 audit(1764887577.147:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 420.512483][ T5816] Bluetooth: hci2: command tx timeout [ 420.823133][ T5882] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.895578][ T5882] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.481796][T10902] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 421.509179][T10902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.537832][T10902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 421.547099][T10902] bond1: entered promiscuous mode [ 421.552478][T10902] bond1: entered allmulticast mode [ 421.586571][T10902] bond1: (slave dummy0): making interface the new active one [ 421.594085][T10902] dummy0: entered promiscuous mode [ 421.599470][T10902] dummy0: entered allmulticast mode [ 421.606547][T10902] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 422.171706][T10834] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 422.238559][T10834] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 422.311291][T10834] wireguard: wg0: Could not create IPv4 socket [ 422.360262][T10834] wireguard: wg1: Could not create IPv4 socket [ 422.402589][T10834] wireguard: wg2: Could not create IPv4 socket [ 422.403657][T10911] hid-generic 0000:0000:0000.0006: pid 10911 passed too short report [ 422.592442][ T5816] Bluetooth: hci2: command tx timeout [ 423.442944][T10922] netlink: 76 bytes leftover after parsing attributes in process `syz.5.658'. [ 423.526470][T10928] Failed to initialize the IGMP autojoin socket (err -2) [ 423.916410][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 423.916469][ T30] audit: type=1326 audit(1764887581.977:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 423.969456][ T30] audit: type=1326 audit(1764887582.007:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 424.052155][T10932] pim6reg1: entered promiscuous mode [ 424.057638][T10932] pim6reg1: entered allmulticast mode [ 424.161130][ T30] audit: type=1326 audit(1764887582.017:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 424.185083][ T30] audit: type=1326 audit(1764887582.017:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 424.209380][ T30] audit: type=1326 audit(1764887582.017:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 425.267046][ T30] audit: type=1326 audit(1764887582.017:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 426.275546][ T5812] Bluetooth: hci2: command 0x0405 tx timeout [ 426.300850][ T30] audit: type=1326 audit(1764887582.017:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f34b code=0x7ffc0000 [ 426.324412][ T30] audit: type=1326 audit(1764887582.017:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f34b code=0x7ffc0000 [ 426.348013][ T30] audit: type=1326 audit(1764887582.017:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f34b code=0x7ffc0000 [ 426.376130][ T30] audit: type=1326 audit(1764887582.017:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f34b code=0x7ffc0000 [ 426.494393][T10944] /dev/nullb0: Can't open blockdev [ 427.667852][ T7284] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 427.842479][ T7284] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 427.860644][ T7284] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 427.880651][ T7284] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 427.902781][ T7284] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 427.921365][ T7284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.929393][ T7284] usb 3-1: Product: syz [ 427.960657][ T7284] usb 3-1: Manufacturer: syz [ 427.965290][ T7284] usb 3-1: SerialNumber: syz [ 427.982639][ T7284] usb 3-1: config 0 descriptor?? [ 427.989749][T10950] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 428.010872][T10950] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 428.019354][ T7284] usb 3-1: ucan: probing device on interface #0 [ 428.446238][ T7284] usb 3-1: ucan: device reported invalid device info [ 428.453028][ T7284] usb 3-1: ucan: probe failed; try to update the device firmware [ 429.523144][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 429.523162][ T30] audit: type=1400 audit(1764887587.587:2957): avc: denied { map } for pid=10960 comm="syz.3.669" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 429.630161][ T30] audit: type=1400 audit(1764887587.617:2958): avc: denied { execute } for pid=10960 comm="syz.3.669" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 429.780910][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 429.783618][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.671'. [ 430.080680][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 430.088214][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 430.117753][ T24] usb 6-1: config 4 interface 0 has no altsetting 0 [ 430.164691][ T24] usb 6-1: string descriptor 0 read error: -22 [ 430.229434][ T24] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 430.293109][ T5928] usb 3-1: USB disconnect, device number 20 [ 430.303448][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.318466][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.331597][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.345243][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.354850][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.363468][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.415066][ T24] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 430.438507][T10969] Failed to initialize the IGMP autojoin socket (err -2) [ 430.832011][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 430.875764][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 430.903785][ T24] usb 6-1: media controller created [ 431.036339][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.080992][ T5928] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 431.206357][ T30] audit: type=1326 audit(1764887589.247:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 431.254160][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 431.282112][ T5928] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 431.290685][ T30] audit: type=1326 audit(1764887589.247:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 431.312106][ T5928] usb 4-1: config 0 has no interface number 0 [ 431.354960][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.433423][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 431.467243][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 431.505765][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 431.535196][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 431.580397][ T30] audit: type=1326 audit(1764887589.247:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 431.581242][ T5928] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 431.694420][ T24] usb 6-1: USB disconnect, device number 13 [ 431.724346][ T30] audit: type=1326 audit(1764887589.257:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 431.754450][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.763950][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.676'. [ 431.795226][ T30] audit: type=1326 audit(1764887589.267:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228d38f749 code=0x7ffc0000 [ 431.824972][ T30] audit: type=1326 audit(1764887589.267:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f34b code=0x7ffc0000 [ 431.856232][ T5928] usb 4-1: config 0 descriptor?? [ 431.876255][T10975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 431.931273][ T5928] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 432.013313][ T30] audit: type=1326 audit(1764887589.267:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f34b code=0x7ffc0000 [ 432.117322][ T30] audit: type=1326 audit(1764887589.267:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228d38f34b code=0x7ffc0000 [ 432.117543][ T5928] usb 4-1: USB disconnect, device number 13 [ 432.188226][ T5928] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 432.430704][ T5816] Bluetooth: hci2: command tx timeout [ 433.461063][T10969] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 433.817174][T10969] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 434.933655][T10998] /dev/nullb0: Can't open blockdev [ 435.235268][ T5816] Bluetooth: hci2: command tx timeout [ 435.272519][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 435.272552][ T30] audit: type=1326 audit(1764887592.977:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 435.391799][T10998] Failed to initialize the IGMP autojoin socket (err -2) [ 435.457930][T10969] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 436.493935][T10969] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 436.518384][ T30] audit: type=1326 audit(1764887592.987:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 436.572892][ T30] audit: type=1326 audit(1764887592.987:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 436.639887][ T30] audit: type=1326 audit(1764887592.997:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 436.771230][ T30] audit: type=1326 audit(1764887592.997:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 436.820243][ T30] audit: type=1326 audit(1764887593.027:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 436.881125][ T30] audit: type=1326 audit(1764887593.027:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 437.090712][ T30] audit: type=1326 audit(1764887593.027:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 437.201241][ T30] audit: type=1326 audit(1764887593.037:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 437.254533][T11019] syzkaller0: entered promiscuous mode [ 437.260042][T11019] syzkaller0: entered allmulticast mode [ 437.310726][ T5816] Bluetooth: hci2: command tx timeout [ 438.172017][T11027] /dev/nullb0: Can't open blockdev [ 438.292034][ T30] audit: type=1326 audit(1764887593.037:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96018f749 code=0x7ffc0000 [ 438.508945][T11025] Failed to initialize the IGMP autojoin socket (err -2) [ 439.390674][ T5816] Bluetooth: hci2: command tx timeout [ 439.642594][ T5882] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 439.807550][T10969] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 439.852450][ T5882] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 439.889385][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.896606][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.910285][ T5882] usb 6-1: config 0 has no interface number 0 [ 440.026590][ T5882] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.037522][ T5882] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 440.049876][ T5882] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 440.061162][ T5882] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 440.072645][ T5882] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 440.086271][T10969] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 440.086332][ T5882] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 440.144526][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.190438][ T5882] usb 6-1: config 0 descriptor?? [ 440.207126][T11044] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.218810][ T5882] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 440.240518][T10969] wireguard: wg0: Could not create IPv4 socket [ 440.301608][T10969] wireguard: wg1: Could not create IPv4 socket [ 440.342937][T10969] wireguard: wg2: Could not create IPv4 socket [ 440.429995][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 440.430012][ T30] audit: type=1400 audit(1764887598.487:3122): avc: denied { append } for pid=11054 comm="syz.2.693" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 440.485517][ T5882] usb 6-1: USB disconnect, device number 14 [ 440.501893][ T5882] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 441.094043][ T30] audit: type=1326 audit(1764887599.147:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.159262][ T30] audit: type=1326 audit(1764887599.187:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.224919][ T30] audit: type=1326 audit(1764887599.287:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.424667][T11053] Failed to initialize the IGMP autojoin socket (err -2) [ 441.544788][ T30] audit: type=1326 audit(1764887599.607:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.586200][ T30] audit: type=1326 audit(1764887599.607:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.655978][ T30] audit: type=1326 audit(1764887599.717:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.792415][ T30] audit: type=1326 audit(1764887599.747:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.857380][ T30] audit: type=1326 audit(1764887599.747:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 441.935013][ T30] audit: type=1326 audit(1764887599.787:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c05d8f749 code=0x7ffc0000 [ 444.031835][T11075] Failed to initialize the IGMP autojoin socket (err -2) [ 444.652369][T11096] Failed to initialize the IGMP autojoin socket (err -2) [ 447.440728][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 447.440745][ T30] audit: type=1400 audit(1764887605.497:3252): avc: denied { setopt } for pid=11113 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 447.592043][ T30] audit: type=1400 audit(1764887605.507:3253): avc: denied { write } for pid=11113 comm="syz.2.704" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 552.630607][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 552.637578][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5480/1:b..l [ 552.645827][ C0] rcu: (detected by 0, t=10502 jiffies, g=49437, q=127 ncpus=2) [ 552.653527][ C0] task:dhcpcd state:R running task stack:23832 pid:5480 tgid:5480 ppid:1 task_flags:0x400140 flags:0x00080000 [ 552.667775][ C0] Call Trace: [ 552.671045][ C0] [ 552.673971][ C0] ? __schedule+0x10b9/0x6150 [ 552.678628][ C0] __schedule+0x1139/0x6150 [ 552.683122][ C0] ? __pfx___schedule+0x10/0x10 [ 552.687949][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 552.692697][ C0] preempt_schedule_irq+0x51/0x90 [ 552.697702][ C0] irqentry_exit+0x1d8/0x8c0 [ 552.702273][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.708233][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 552.713410][ C0] Code: cf 10 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 e2 f4 ec 0e 0f 82 74 02 00 00 8b 35 5a 25 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 ce 10 12 0f 85 ad 02 00 00 48 83 c4 [ 552.732993][ C0] RSP: 0018:ffffc900035872b0 EFLAGS: 00000206 [ 552.739033][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c92c0 RCX: 0000000000000001 [ 552.746979][ C0] RDX: 0000000000000000 RSI: ffffffff8da8836f RDI: ffffffff8bf21080 [ 552.754928][ C0] RBP: 0000000000000002 R08: 000000005a44979c R09: 00000000ffffffff [ 552.762872][ C0] R10: ffff888032970b30 R11: 00000000ffffffff R12: 0000000000000000 [ 552.770815][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.778769][ C0] ? find_held_lock+0x2b/0x80 [ 552.783426][ C0] unwind_next_frame+0xd1/0x20a0 [ 552.788343][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 552.793430][ C0] ? __unwind_start+0x574/0x7f0 [ 552.798255][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 552.803690][ C0] __unwind_start+0x45f/0x7f0 [ 552.808343][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.814471][ C0] arch_stack_walk+0x73/0x100 [ 552.819128][ C0] ? __unwind_start+0x574/0x7f0 [ 552.823955][ C0] stack_trace_save+0x8e/0xc0 [ 552.828608][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 552.833955][ C0] ? kasan_save_stack+0x42/0x60 [ 552.838780][ C0] ? kasan_save_stack+0x33/0x60 [ 552.843604][ C0] ? kasan_save_track+0x14/0x30 [ 552.848426][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 552.853173][ C0] ? __kmalloc_node_track_caller_noprof+0x345/0x910 [ 552.859743][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 552.864571][ C0] kasan_save_stack+0x33/0x60 [ 552.869250][ C0] kasan_save_track+0x14/0x30 [ 552.873901][ C0] __kasan_slab_alloc+0x89/0x90 [ 552.878730][ C0] kmem_cache_alloc_node_noprof+0x28a/0x7f0 [ 552.884598][ C0] ? __alloc_skb+0x156/0x410 [ 552.889166][ C0] ? __alloc_skb+0x35d/0x410 [ 552.893734][ C0] ? __alloc_skb+0x156/0x410 [ 552.898302][ C0] __alloc_skb+0x156/0x410 [ 552.902696][ C0] ? __alloc_skb+0x35d/0x410 [ 552.907277][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 552.912190][ C0] ? _raw_spin_unlock_irq+0x30/0x50 [ 552.917367][ C0] ? __lock_acquire+0x433/0x22f0 [ 552.922282][ C0] alloc_skb_with_frags+0xe0/0x860 [ 552.927371][ C0] sock_alloc_send_pskb+0x7f9/0x980 [ 552.932549][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 552.937901][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 552.943596][ C0] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 552.949896][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 552.956549][ C0] ? avc_has_perm+0x144/0x1f0 [ 552.961212][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 552.966217][ C0] unix_dgram_sendmsg+0x3bc/0x1830 [ 552.971302][ C0] ? sock_has_perm+0x258/0x2f0 [ 552.976038][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 552.981123][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 552.986646][ C0] ? inode_has_perm+0x16d/0x1d0 [ 552.991476][ C0] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 552.996822][ C0] sock_write_iter+0x566/0x610 [ 553.001562][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 553.006827][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 553.012173][ C0] ? security_file_permission+0x71/0x210 [ 553.017781][ C0] ? rw_verify_area+0xcf/0x6c0 [ 553.022522][ C0] vfs_write+0x7d3/0x11d0 [ 553.026830][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 553.032094][ C0] ? __pfx_vfs_write+0x10/0x10 [ 553.036860][ C0] ? __lock_acquire+0x433/0x22f0 [ 553.041784][ C0] ksys_write+0x1f8/0x250 [ 553.046096][ C0] ? __pfx_ksys_write+0x10/0x10 [ 553.050925][ C0] ? __secure_computing+0x28e/0x3b0 [ 553.056110][ C0] do_syscall_64+0xcd/0xf80 [ 553.060605][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.066485][ C0] RIP: 0033:0x7fafc09a9407 [ 553.070873][ C0] RSP: 002b:00007ffd4a4922a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 553.079259][ C0] RAX: ffffffffffffffda RBX: 00007fafc091f740 RCX: 00007fafc09a9407 [ 553.087204][ C0] RDX: 0000000000000040 RSI: 00007ffd4a492300 RDI: 0000000000000005 [ 553.095168][ C0] RBP: 0000556a85d10168 R08: 0000000000000000 R09: 0000000000000000 [ 553.103117][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd4a492730 [ 553.111064][ C0] R13: 0000556a9a0f6020 R14: 0000556a99eca1e0 R15: 0000556a99eca060 [ 553.119028][ C0] [ 553.122025][ C0] rcu: rcu_preempt kthread starved for 10296 jiffies! g49437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 553.133189][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 553.143132][ C0] rcu: RCU grace-period kthread stack dump: [ 553.148990][ C0] task:rcu_preempt state:R running task stack:28456 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 553.162456][ C0] Call Trace: [ 553.165731][ C0] [ 553.168640][ C0] ? __schedule+0x10b9/0x6150 [ 553.173297][ C0] __schedule+0x1139/0x6150 [ 553.177782][ C0] ? __mod_timer+0x8f2/0xd30 [ 553.182359][ C0] ? __pfx___schedule+0x10/0x10 [ 553.187194][ C0] ? find_held_lock+0x2b/0x80 [ 553.191848][ C0] ? schedule+0x2d7/0x3a0 [ 553.196170][ C0] schedule+0xe7/0x3a0 [ 553.200220][ C0] schedule_timeout+0x123/0x290 [ 553.205056][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 553.210420][ C0] ? __pfx_process_timeout+0x10/0x10 [ 553.215695][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 553.221485][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 553.226926][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 553.231672][ C0] ? rcu_gp_init+0xc2e/0x15e0 [ 553.236331][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 553.241595][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.246775][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 553.251693][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 553.256535][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.262428][ C0] rcu_gp_kthread+0x26d/0x380 [ 553.267096][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.272280][ C0] ? rcu_is_watching+0x12/0xc0 [ 553.277027][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.282208][ C0] ? __kthread_parkme+0x19e/0x250 [ 553.287211][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.292388][ C0] kthread+0x3c5/0x780 [ 553.296440][ C0] ? __pfx_kthread+0x10/0x10 [ 553.301006][ C0] ? rcu_is_watching+0x12/0xc0 [ 553.305746][ C0] ? __pfx_kthread+0x10/0x10 [ 553.310311][ C0] ret_from_fork+0x983/0xb10 [ 553.314882][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 553.319968][ C0] ? __switch_to+0x7af/0x10d0 [ 553.324626][ C0] ? __pfx_kthread+0x10/0x10 [ 553.329192][ C0] ret_from_fork_asm+0x1a/0x30 [ 553.333943][ C0] [ 553.336941][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 553.343243][ C0] Sending NMI from CPU 0 to CPUs 1: [ 553.348439][ C1] NMI backtrace for cpu 1 [ 553.348454][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 553.348477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.348489][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 553.348520][ C1] Code: f6 72 02 e9 93 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 93 27 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 553.348540][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c2 [ 553.348555][ C1] RAX: 00000000014836c3 RBX: 0000000000000001 RCX: ffffffff8b62c6f9 [ 553.348568][ C1] RDX: 0000000000000000 RSI: ffffffff8daae276 RDI: ffffffff8bf21080 [ 553.348581][ C1] RBP: ffffed1003b55498 R08: 0000000000000001 R09: ffffed10170a671d [ 553.348594][ C1] R10: ffff8880b85338eb R11: 00000000ffffffff R12: 0000000000000001 [ 553.348607][ C1] R13: ffff88801daaa4c0 R14: ffffffff908645d0 R15: 0000000000000000 [ 553.348620][ C1] FS: 0000000000000000(0000) GS:ffff888124a7e000(0000) knlGS:0000000000000000 [ 553.348639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.348652][ C1] CR2: 0000200000001a40 CR3: 00000000776a9000 CR4: 00000000003526f0 [ 553.348665][ C1] Call Trace: [ 553.348672][ C1] [ 553.348678][ C1] default_idle+0x13/0x20 [ 553.348696][ C1] default_idle_call+0x6c/0xb0 [ 553.348714][ C1] do_idle+0x38d/0x510 [ 553.348736][ C1] ? __pfx_do_idle+0x10/0x10 [ 553.348758][ C1] cpu_startup_entry+0x4f/0x60 [ 553.348778][ C1] start_secondary+0x21d/0x2b0 [ 553.348798][ C1] ? __pfx_start_secondary+0x10/0x10 [ 553.348820][ C1] common_startup_64+0x13e/0x148 [ 553.348850][ C1]