last executing test programs: 1.272088156s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f00000003c0)={&(0x7f0000000340)=""/121, 0x79}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x50, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x32, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=0x1, r0, 0xa, 0x2000, 0x0, @value=r4}, 0x20) 1.09883603s ago: executing program 2 (id=7): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x200, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x80}]}}}]}, 0x40}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x3, 0xd, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @multicast1, {[@generic={0x94, 0xc, "c7716a09e978a60537c2"}, @noop, @ra={0x94, 0x4}]}}}}}) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in=@remote, 0x4e20, 0x3, 0x4e21, 0x8, 0xa, 0x80, 0x80, 0x33, r1, r2}, {0x73bc, 0x9, 0x5, 0xdc0, 0xc, 0x8, 0x46a, 0x7}, {0x1, 0x7, 0x3, 0x7fffffffffffffff}, 0x9, 0x6e6bc0, 0x2, 0x1, 0x1}, {{@in=@private=0xa010100, 0x4d5, 0x33}, 0xa, @in=@remote, 0x3504, 0x4, 0x0, 0xf0, 0x7, 0xac2, 0x7}}, 0xe8) 1.098417089s ago: executing program 0 (id=1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000018110000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd423f9074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x158}}, 0x800) 1.039342994s ago: executing program 1 (id=8): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x61, 0x36, 0x60, 0x65, 0x33, 0x31, 0x64, 0x36, 0x62, 0x37, 0x66, 0x32, 0x37, 0x39, 0x30, 0x33]}, &(0x7f00000001c0)={0x0, "b275b0f2aa44c6edfe9429cf52616527aa90a9491b57e6025cf6edd9a7281acbdea92d40fd9df72bda9194790d2a33ae01e30fe63d7fda65d5d01bff10c89d37", 0x24}, 0x48, 0xfffffffffffffffe) keyctl$describe(0x6, r0, &(0x7f0000000280)=""/185, 0xb9) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES16=r1, @ANYRESHEX=r1]) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8008550e, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x8, 0x6, 0x4f565559, 0x2, 0xa, [{0x0, 0x9}, {0xc3, 0x6}, {0x7}, {0x8, 0x6}, {0x7f, 0x6}, {0x0, 0x1000}, {0x5, 0x4}, {0xfffffffb, 0x2}], 0x0, 0x9, 0x1, 0x0, 0x1}}) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = dup(r5) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000600)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, 0x0) r9 = creat(&(0x7f0000000400)='./file0\x00', 0x128) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r10, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x16, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="b292edaa5c8f09"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.03860269s ago: executing program 2 (id=9): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x10}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xd0, 0x24, 0xc17, 0x70bd26, 0x2, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xfff2, 0xa}, {0xf, 0xc}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x24, 0x9, 0xa, 0x0, 0x2, 0x245a, 0x700000, 0x8}}, {0x14, 0x2, [0x1, 0x7, 0x0, 0xe8, 0x5, 0x586e, 0x4, 0x3]}}, {{0x1c, 0x1, {0x3, 0x0, 0x1000, 0xb, 0x0, 0x6, 0x80000000, 0x2}}, {0x8, 0x2, [0x6ef9, 0xf75]}}, {{0x1c, 0x1, {0x0, 0x8, 0xa6, 0x9, 0x2, 0x6, 0xa, 0x3}}, {0xa, 0x2, [0x1, 0x40, 0x100]}}, {{0x1c, 0x1, {0x7, 0xa3, 0x5, 0xffffe12e, 0x0, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x2, 0xa27, 0xfffe, 0x2]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48090}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf0, r3, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x8, 0x1}, {0xf, 0x2}, {0x1, 0x3}, {0x40, 0x6}, {0x3, 0x2}, {0x6, 0x6}], "65727b704044fdc3"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xa2}, {0x2, 0x7}, {0x0, 0x7}, {0x8, 0x5}, {0x99}, {0x7}, {0x43, 0x2}, {0xff, 0x1}, {0x8, 0x6}, {0x9, 0x2}, {0xf8}, {0x8e}, {0x0, 0x7}, {0x1, 0x7}], "d7250c4b487a8e09"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xea, 0x6}, {0xb, 0x2}, {}, {0x8d, 0x7}], "5b393c6cd149d2d9"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xd, 0x7}, {0x2d, 0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x4}, {0xb, 0x3}, {0xc, 0x7}, {0x1}, {0x4, 0x5}, {0x5c, 0x1}, {0xb6, 0x3}, {0x0, 0x5}], "b2d4f7334d0c0fd8"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x2, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x8, 0x3}, {0x8, 0x7}, {0x2a, 0x5}, {0x7f, 0x1}, {0x5, 0x3}, {0xde, 0x7}, {0x2, 0x5}, {0x17, 0x7}, {0x6, 0x6}, {}, {0x2, 0x3}, {0xa, 0x4}], "8a0c119ae54c4ea6"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xa, 0x5}, {0x4}, {0xf, 0x7}, {0x2, 0x2}, {}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x5}, {0xd9, 0xc}, {0x1}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0xff, 0x3}, {0xd1, 0x5}, {0x4e, 0x6}], "81dedad00ebd3dfa"}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x400c041}, 0x4000880) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf0, r3, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x8, 0x1}, {0xf, 0x2}, {0x1, 0x3}, {0x40, 0x6}, {0x3, 0x2}, {0x6, 0x6}], "65727b704044fdc3"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xa2}, {0x2, 0x7}, {0x0, 0x7}, {0x8, 0x5}, {0x99}, {0x7}, {0x43, 0x2}, {0xff, 0x1}, {0x8, 0x6}, {0x9, 0x2}, {0xf8}, {0x8e}, {0x0, 0x7}, {0x1, 0x7}], "d7250c4b487a8e09"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xea, 0x6}, {0xb, 0x2}, {}, {0x8d, 0x7}], "5b393c6cd149d2d9"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xd, 0x7}, {0x2d, 0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x4}, {0xb, 0x3}, {0xc, 0x7}, {0x1}, {0x4, 0x5}, {0x5c, 0x1}, {0xb6, 0x3}, {0x0, 0x5}], "b2d4f7334d0c0fd8"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x2, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x8, 0x3}, {0x8, 0x7}, {0x2a, 0x5}, {0x7f, 0x1}, {0x5, 0x3}, {0xde, 0x7}, {0x2, 0x5}, {0x17, 0x7}, {0x6, 0x6}, {}, {0x2, 0x3}, {0xa, 0x4}], "8a0c119ae54c4ea6"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xa, 0x5}, {0x4}, {0xf, 0x7}, {0x2, 0x2}, {}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x5}, {0xd9, 0xc}, {0x1}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0xff, 0x3}, {0xd1, 0x5}, {0x4e, 0x6}], "81dedad00ebd3dfa"}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x400c041}, 0x4000880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES16=r0], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000180)={{0x1, 0x1, 0x3, 0x3}, 0x8, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000002680)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 979.783911ms ago: executing program 0 (id=11): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 978.377977ms ago: executing program 1 (id=12): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000e480), 0x0, 0x0) (async) r1 = fanotify_init(0x1b, 0x40000) fanotify_mark(r1, 0x219, 0x183b, 0xffffffffffffffff, 0x0) (async) keyctl$clear(0x7, 0xfffffffffffffffb) (async) close_range(r0, 0xffffffffffffffff, 0x0) 910.465284ms ago: executing program 1 (id=13): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x70) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0xfe, 0x2, 0x200}) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'geneve0\x00', {}, 0x5f}) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}, 0x7}], 0x1, 0x2, 0x0) recvfrom$unix(r3, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) 789.929625ms ago: executing program 0 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000010c0)={[{0x2b, 'memory'}]}, 0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00002268529de6f237e1ae40d59586f46100", @ANYRES16=r5, @ANYBLOB="1f742bbd7000fedbdf252500000008000300", @ANYRES32=r4, @ANYBLOB="0800350001000000110007005a530909d1254661e0c6c5777e0000000a000600ffffffffffff000004000b000500080005000000040034000800260016170000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 470.370171ms ago: executing program 3 (id=18): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x1, 0x4}, {0x6, 0x9}, 0x4c, 0x5, 0x8}) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x48000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r3 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000280)=[{0xd, 0xb1, 0x8b, 0x96, @time={0x8, 0x2}, {0x5, 0x1}, {0x9, 0xff}, @time=@time={0x7, 0x80000000}}, {0x6, 0x81, 0x10, 0x8, @tick=0xffff, {0x0, 0x2}, {0x20, 0xf0}, @raw32={[0xe26, 0x6, 0x9]}}, {0xd, 0x3, 0x7, 0xbb, @time={0x3, 0xf1c}, {0xb, 0xed}, {0x2, 0x74}, @addr={0x1}}, {0x5, 0x2, 0x0, 0x6, @tick=0x3, {0x2, 0x2}, {0xf9, 0x4}, @time=@tick=0x80000005}, {0xe, 0xf, 0x8, 0x6, @tick=0x5, {0xe, 0x9}, {0x37, 0x4}, @time=@time={0x1, 0xa}}, {0x8, 0x5, 0x8, 0x63, @time={0x2, 0x43}, {0xf0, 0x1}, {0x0, 0x2}, @time=@tick=0x88}, {0x4, 0x82, 0x3, 0x30, @time={0x80, 0x3}, {0x7, 0x7}, {0x8, 0x6f}, @raw32={[0xb, 0x1, 0x3f]}}, {0xfe, 0x4, 0x4, 0x8, @time={0xfffffff8, 0xf8}, {0x1, 0x4}, {0x2, 0x6}, @connect={{0x1, 0x8}, {0xc, 0x2}}}], 0xe0) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000240)={0x3, 0x4, 0x6, 0x0, 0x8, 0x1, 0x0, &(0x7f0000000080)=[{0x13, 0x1ff, 0x7}]}) 388.33486ms ago: executing program 3 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x130, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2a3, 0x1c}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0xf9, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @random="e82d7e796332", {0x3, 0x1}, @value=@ver_80211n={0x0, 0xc0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x6001, 0x3f, @default, @void, @void, [{0xdd, 0xad, "204498a8d3fb53f5859fbf49227af9dc612db0a5bd3f596c183e355c3d457637a54b3e4509f2c71cb17751d6ce03682a9b7821e4f93a30ce6acfb6a9da6d46e7b5300c30f83db8db2491c50ade556aef60af81bb3c96a47ee6216d15d68de695cd42249df502f5d04629f9f1994b54f87d9ccad0e1085c638e7c45d641f28d2b8e419fef332060eac0eb91b672681e93c4c844ea3a12ae0fb0cd4267c946f8f0a66771b6b65445a27f4aed94a1"}, {0xdd, 0x7, "beafa4141d0ed0"}, {0xdd, 0x19, "5c9651423c9f53753577a300d7a0c1f88755c2199fae673c94"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1ac, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "c55e1a69cb2a7b5ab3477652cba6169483001b4899e8604508a080ec0357e47cea4c1a91f0201ecd8c10"}, @NL80211_ATTR_FRAME_MATCH={0x94, 0x5b, "d06eb0b42289fe22552a296fc8967ba490abb147ffabfc260dafbc2021f080fb0b4fee6d624351257a52d725abb0320ce78a830ee1c6bb83d86b370b3f3ed6acf4d05348a26f3db5de5583297dc97a65af38ba852916675e295f80fa70dca36ae2eec52fde368454ad9ccba680bb2491e3023d7af25497edbafdb1ddf6ea643cfc43ea3e675cca4c567b74127c7992c7"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "f0b1c7a80ccb4b18017e6fd5078c0d98aedeee37164ff5ed09e7453a2b457db1e773006d57f9aa2e26ebcc20cb044872b6bb1727f4ac3bcaf9d31176eb4117c58d00e704b78681095fd898f8bdadf816e45b9d75c838f9103a36140c09ab887c79c876247ce8fcc0d7c7a8fa56b0004f3c3389"}, @NL80211_ATTR_FRAME_MATCH={0x52, 0x5b, "0901ab9518d0771737e12750302d201912fc9b9551ed64151ef10d45beb48b3c43bec5a7d0a3487b03edefe6e79c5d0b92c5cbf8629a80ddc5df15303e098d00f427477417ed450d65a0c2e6ca36"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x834}, 0x4) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) 386.004279ms ago: executing program 3 (id=20): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r4, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) r5 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r5, &(0x7f00000061c0)=[{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000003980)="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", 0x1000}, {&(0x7f0000004980)='d', 0x1}], 0x2}], 0x1, 0x40010000) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000840)={{0x832a, 0x4, 0x7, 0x5, 0x8}, &(0x7f0000000600)=[{}, {}, {}]}) 310.176355ms ago: executing program 3 (id=21): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0xa9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f00000006c0)="3b000000010006", 0x7) 239.146142ms ago: executing program 3 (id=22): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) 238.783376ms ago: executing program 3 (id=23): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r2, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xa, 0x9}}, 0x40000) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) write$tun(r0, &(0x7f0000000040)={@void, @void, @llc={@llc={0x44, 0xf0, 'v\a', "7dc0d766c6db041ebc1ddc74a3284e0fb333cb380b80efa8d9e358e43465f1dc21f7608356cea47e1b3c24fca4060ff5923eed381fb13514484ed25d0778fbf555f50f5ae2cfa7e66fc2515084"}}}, 0x51) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x3, 0x3, 0x27, 0xc, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0x7fffff8}]}}}}}}, 0x42) 180.431687ms ago: executing program 2 (id=24): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "ca2e8900029a71e92cdecbbc3372c86622daa676481f953803f1c333341cc95e39844d4f1f7ad6fd9d45f71c6e9eaba6fd2cd6c5fa04829224145ff130c7f38a", 0x29}, 0x48, r0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) keyctl$search(0xa, r0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$chown(0x4, r0, 0xee01, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "ca2e8900029a71e92cdecbbc3372c86622daa676481f953803f1c333341cc95e39844d4f1f7ad6fd9d45f71c6e9eaba6fd2cd6c5fa04829224145ff130c7f38a", 0x29}, 0x48, r0) (async) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) (async) keyctl$search(0xa, r0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) 180.206991ms ago: executing program 2 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x2, [{}, {}]}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4e1fd10fdc44164596512c744240047000000c744240247000000ff1c24b9800000c00f320f01c90f300f20e035000002000f22e066b8390140d84f2c66ba420066b8dd7666efc4a17853abb00c00003e470f019c1030000000440f20c0350e000000440f22c0", 0x67}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49.79648ms ago: executing program 1 (id=26): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x6) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd7010fddbdf2505000000060001000700000008000b000000000008000c00a80a00000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x4044020) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0xc081) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0xc543a64, 0x70, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x700, 0xe372, 0xfffffffe}}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=@newnexthop={0x0, 0x68, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x2, 0x0, 0x18}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_GROUP={0x0, 0x2, [{0x2, 0x9}, {0x2, 0x5}, {0x2, 0xd9}, {0x2, 0x4}]}, @NHA_OIF={0x0, 0x5, r5}, @NHA_BLACKHOLE, @NHA_BLACKHOLE, @NHA_RES_GROUP={0x0, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x0, 0x2, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x0, 0x3, 0x4}]}, @NHA_FDB, @NHA_GROUP={0x0, 0x2, [{0x2, 0x7f}, {0x0, 0x7}]}]}, 0x20}, 0x1, 0xf00, 0x0, 0x2400c011}, 0x4000810) 49.380803ms ago: executing program 1 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x148, 0x31, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea44}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9bf}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe04}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) write$P9_RREADDIR(r4, &(0x7f0000000500)={0xc5, 0x29, 0x1, {0x8, [{{0x0, 0x3, 0x8}, 0x5, 0x6, 0x7, './file0'}, {{0x80, 0x4, 0x7}, 0x401, 0x5d, 0x7, './file0'}, {{0x44, 0x1, 0x2}, 0xa, 0x1, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x1ff, 0x6, 0x7, './file0'}, {{0x0, 0x3, 0x6}, 0x4, 0xd0, 0x7, './file0'}, {{0x40, 0x1, 0x2}, 0x10000, 0x2, 0x7, './file0'}]}}, 0xc5) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=@delchain={0x24, 0x64, 0xb33, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 398.798µs ago: executing program 2 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x4, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x88d0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r11, &(0x7f0000000680)=[{&(0x7f0000000400)=""/162, 0xa2}, {0x0}], 0x2, 0x80000001, 0x3) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 0s ago: executing program 1 (id=29): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x80, 0x5, 0xfffff018}, {0x6, 0x0, 0x0, 0x5387cf8b}]}) kernel console output (not intermixed with test programs): [ 53.038864][ T40] audit: type=1400 audit(1778763082.913:135): avc: denied { write } for pid=5711 comm="sh" path="pipe:[3866]" dev="pipefs" ino=3866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.048185][ T40] audit: type=1400 audit(1778763082.913:136): avc: denied { rlimitinh } for pid=5711 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.054927][ T40] audit: type=1400 audit(1778763082.913:137): avc: denied { siginh } for pid=5711 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.695218][ T921] cfg80211: failed to load regulatory.db [ 272.563974][ T40] audit: type=1400 audit(1778763302.453:138): avc: denied { write } for pid=5754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.618281][ T40] audit: type=1400 audit(1778763302.503:139): avc: denied { write } for pid=5757 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:38526' (ED25519) to the list of known hosts. [ 419.302304][ T40] audit: type=1400 audit(1778763449.183:140): avc: denied { name_bind } for pid=5784 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 419.351305][ T40] audit: type=1400 audit(1778763449.233:141): avc: denied { execute } for pid=5785 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 419.359388][ T40] audit: type=1400 audit(1778763449.233:142): avc: denied { execute_no_trans } for pid=5785 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 421.538861][ T40] audit: type=1400 audit(1778763451.423:143): avc: denied { mounton } for pid=5785 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 421.547434][ T40] audit: type=1400 audit(1778763451.433:144): avc: denied { mount } for pid=5785 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 421.550056][ T5785] cgroup: Unknown subsys name 'net' [ 421.557317][ T40] audit: type=1400 audit(1778763451.443:145): avc: denied { unmount } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 421.705903][ T5785] cgroup: Unknown subsys name 'cpuset' [ 421.709767][ T5785] cgroup: Unknown subsys name 'rlimit' [ 421.869033][ T40] audit: type=1400 audit(1778763451.753:146): avc: denied { setattr } for pid=5785 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.881980][ T40] audit: type=1400 audit(1778763451.773:147): avc: denied { create } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.890126][ T40] audit: type=1400 audit(1778763451.773:148): avc: denied { write } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.898433][ T40] audit: type=1400 audit(1778763451.773:149): avc: denied { read } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.946605][ T5791] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 422.659815][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 426.410692][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 426.410703][ T40] audit: type=1400 audit(1778763456.293:160): avc: denied { execmem } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 426.609619][ T40] audit: type=1400 audit(1778763456.493:161): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 426.618444][ T40] audit: type=1400 audit(1778763456.493:162): avc: denied { read write } for pid=5800 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 426.627674][ T40] audit: type=1400 audit(1778763456.493:163): avc: denied { read write } for pid=5801 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 426.634558][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.634998][ T40] audit: type=1400 audit(1778763456.493:164): avc: denied { open } for pid=5801 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 426.641884][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.644372][ T40] audit: type=1400 audit(1778763456.493:165): avc: denied { open } for pid=5800 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 426.648205][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.651417][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.654108][ T40] audit: type=1400 audit(1778763456.503:166): avc: denied { ioctl } for pid=5800 comm="syz-executor" path="socket:[6139]" dev="sockfs" ino=6139 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 426.654828][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.655824][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.656589][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.658856][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.658888][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.668479][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.668990][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.671779][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.673331][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.674601][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.675339][ T40] audit: type=1400 audit(1778763456.563:167): avc: denied { read } for pid=5800 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 426.675625][ T40] audit: type=1400 audit(1778763456.563:168): avc: denied { open } for pid=5800 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 426.677203][ T40] audit: type=1400 audit(1778763456.563:169): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 426.681216][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.684020][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.685927][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.686697][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.686936][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.689379][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.291320][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.294300][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.296736][ T5799] bridge_slave_0: entered allmulticast mode [ 427.299562][ T5799] bridge_slave_0: entered promiscuous mode [ 427.306954][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.310215][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.312953][ T5799] bridge_slave_1: entered allmulticast mode [ 427.316135][ T5799] bridge_slave_1: entered promiscuous mode [ 427.336052][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.339280][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.342376][ T5804] bridge_slave_0: entered allmulticast mode [ 427.347560][ T5804] bridge_slave_0: entered promiscuous mode [ 427.379488][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.382791][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.385534][ T5804] bridge_slave_1: entered allmulticast mode [ 427.388383][ T5804] bridge_slave_1: entered promiscuous mode [ 427.406072][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.409875][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.412216][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.414600][ T5800] bridge_slave_0: entered allmulticast mode [ 427.417378][ T5800] bridge_slave_0: entered promiscuous mode [ 427.421059][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.423562][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.426375][ T5800] bridge_slave_1: entered allmulticast mode [ 427.429570][ T5800] bridge_slave_1: entered promiscuous mode [ 427.446946][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.468804][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.479279][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.489191][ T5799] team0: Port device team_slave_0 added [ 427.497777][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.500394][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.503615][ T5801] bridge_slave_0: entered allmulticast mode [ 427.506346][ T5801] bridge_slave_0: entered promiscuous mode [ 427.521409][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.526229][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.530079][ T5799] team0: Port device team_slave_1 added [ 427.532003][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.534540][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.537023][ T5801] bridge_slave_1: entered allmulticast mode [ 427.539632][ T5801] bridge_slave_1: entered promiscuous mode [ 427.543419][ T5804] team0: Port device team_slave_0 added [ 427.547205][ T5804] team0: Port device team_slave_1 added [ 427.592080][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.595156][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.605368][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.610982][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.613947][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.623617][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.641874][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.644661][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.654469][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.660204][ T5800] team0: Port device team_slave_0 added [ 427.667447][ T5800] team0: Port device team_slave_1 added [ 427.670518][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.673755][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.676070][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.684066][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.697340][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.735744][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.738757][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.749846][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.761210][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.764131][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.774438][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.790012][ T5799] hsr_slave_0: entered promiscuous mode [ 427.793377][ T5799] hsr_slave_1: entered promiscuous mode [ 427.798581][ T5801] team0: Port device team_slave_0 added [ 427.826696][ T5801] team0: Port device team_slave_1 added [ 427.858017][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.860718][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.870535][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.877776][ T5804] hsr_slave_0: entered promiscuous mode [ 427.880087][ T5804] hsr_slave_1: entered promiscuous mode [ 427.882106][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 427.884439][ T5804] Cannot create hsr debugfs directory [ 427.895302][ T5800] hsr_slave_0: entered promiscuous mode [ 427.898264][ T5800] hsr_slave_1: entered promiscuous mode [ 427.900980][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 427.903742][ T5800] Cannot create hsr debugfs directory [ 427.906471][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.909164][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.919259][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.027521][ T5801] hsr_slave_0: entered promiscuous mode [ 428.030275][ T5801] hsr_slave_1: entered promiscuous mode [ 428.032345][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 428.034337][ T5801] Cannot create hsr debugfs directory [ 428.277266][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.283347][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.289312][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.294681][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.299377][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.304794][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.307741][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.313028][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.361466][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.367863][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.371125][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.376941][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.379777][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.384849][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.387588][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.392567][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.467838][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.473971][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.477890][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.482922][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.486972][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.492575][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.496737][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.501426][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.562796][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.577664][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.581876][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.584884][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.588778][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.592389][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.596835][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.599593][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.603600][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.630551][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.637002][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.662952][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.665663][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.678880][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.689122][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.691435][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.695388][ T5817] Bluetooth: hci0: command tx timeout [ 428.708290][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.710590][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.734314][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.737392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.773539][ T5817] Bluetooth: hci1: command tx timeout [ 428.773586][ T5806] Bluetooth: hci3: command tx timeout [ 428.773638][ T5809] Bluetooth: hci2: command tx timeout [ 428.803518][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.819110][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.831814][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.845383][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.847758][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.855799][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.862505][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.864876][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.868914][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.871144][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.878059][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.880318][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.068206][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.097313][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.122880][ T5799] veth0_vlan: entered promiscuous mode [ 429.137742][ T5799] veth1_vlan: entered promiscuous mode [ 429.155356][ T5800] veth0_vlan: entered promiscuous mode [ 429.171193][ T5799] veth0_macvtap: entered promiscuous mode [ 429.175297][ T5800] veth1_vlan: entered promiscuous mode [ 429.178357][ T5799] veth1_macvtap: entered promiscuous mode [ 429.197771][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.204224][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.208043][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.217556][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.231052][ T5911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.234674][ T5911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.250138][ T5911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.253897][ T5911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.261664][ T5800] veth0_macvtap: entered promiscuous mode [ 429.275342][ T5800] veth1_macvtap: entered promiscuous mode [ 429.284179][ T5804] veth0_vlan: entered promiscuous mode [ 429.299575][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.309787][ T5801] veth0_vlan: entered promiscuous mode [ 429.312622][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.318125][ T5804] veth1_vlan: entered promiscuous mode [ 429.335711][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.336476][ T5801] veth1_vlan: entered promiscuous mode [ 429.339046][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.347284][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.355424][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.358384][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.361726][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.378894][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.381877][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.408503][ T5801] veth0_macvtap: entered promiscuous mode [ 429.411980][ T5804] veth0_macvtap: entered promiscuous mode [ 429.421504][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 429.421536][ T5801] veth1_macvtap: entered promiscuous mode [ 429.438404][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.441113][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.442676][ T5804] veth1_macvtap: entered promiscuous mode [ 429.473597][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.479514][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.491385][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.502264][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.505981][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.509292][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.511825][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.518787][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.529898][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.539304][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.542077][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.547858][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.550919][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.558402][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.621792][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.624780][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.641194][ T5911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.644460][ T5911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.658770][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.662377][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.678006][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.680484][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.780100][ T5973] nfs4: Unknown parameter '' [ 429.797216][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 429.841975][ T5980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5980 comm=syz.2.9 [ 429.847648][ T5981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5981 comm=syz.2.9 [ 429.907320][ T5979] xt_cgroup: path and classid specified [ 430.119625][ T5997] Invalid ELF header type: 0 != 1 [ 430.122457][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 430.125393][ T5997] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 430.211582][ T6000] input: syz0 as /devices/virtual/input/input6 [ 430.259025][ T6003] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 430.265298][ T6003] Zero length message leads to an empty skb [ 430.467080][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 430.583907][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 430.587248][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22'. [ 430.773413][ T5817] Bluetooth: hci0: command tx timeout [ 430.785051][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 430.812383][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'. [ 430.851401][ T6034] [ 430.852250][ T6034] ====================================================== [ 430.853149][ T5817] Bluetooth: hci1: command tx timeout [ 430.854552][ T6034] WARNING: possible circular locking dependency detected [ 430.854559][ T6034] syzkaller #0 Not tainted [ 430.854565][ T6034] ------------------------------------------------------ [ 430.854568][ T6034] syz.2.28/6034 is trying to acquire lock: [ 430.854574][ T6034] ffff88802b008a68 ((work_completion)(&new_smc->smc_listen_work) [ 430.856471][ T5817] Bluetooth: hci3: command tx timeout [ 430.858584][ T6034] ){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 430.858619][ T6034] [ 430.858619][ T6034] but task is already holding lock: [ 430.858624][ T6034] ffff88802b008ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 430.874875][ T6034] [ 430.874875][ T6034] which lock already depends on the new lock. [ 430.874875][ T6034] [ 430.874881][ T6034] [ 430.874881][ T6034] the existing dependency chain (in reverse order) is: [ 430.874886][ T6034] [ 430.874886][ T6034] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 430.874910][ T6034] lock_sock_nested+0x41/0xf0 [ 430.874931][ T6034] smc_listen_out+0x1f5/0x4b0 [ 430.874946][ T6034] smc_listen_work+0x767/0x50e0 [ 430.874960][ T6034] process_one_work+0xa0e/0x1980 [ 430.874975][ T6034] worker_thread+0x5ef/0xe50 [ 430.874990][ T6034] kthread+0x370/0x450 [ 430.875004][ T6034] ret_from_fork+0x72b/0xd50 [ 430.875019][ T6034] ret_from_fork_asm+0x1a/0x30 [ 430.875034][ T6034] [ 430.875034][ T6034] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 430.875050][ T6034] __lock_acquire+0x14b8/0x2630 [ 430.875065][ T6034] lock_acquire+0x1b1/0x370 [ 430.875078][ T6034] __flush_work+0x4de/0xcb0 [ 430.875093][ T6034] cancel_work_sync+0xd1/0xf0 [ 430.875108][ T6034] smc_clcsock_release+0x5f/0xe0 [ 430.875121][ T6034] __smc_release+0x5c2/0x880 [ 430.875132][ T6034] smc_close_non_accepted+0xda/0x200 [ 430.875144][ T6034] smc_close_active+0x4ff/0x1070 [ 430.875156][ T6034] __smc_release+0x634/0x880 [ 430.875167][ T6034] smc_release+0x1fc/0x620 [ 430.875177][ T6034] __sock_release+0xb3/0x260 [ 430.875187][ T6034] sock_close+0x1c/0x30 [ 430.875196][ T6034] __fput+0x3ff/0xb50 [ 430.875210][ T6034] task_work_run+0x150/0x240 [ 430.875222][ T6034] exit_to_user_mode_loop+0x107/0x4f0 [ 430.875236][ T6034] do_syscall_64+0x706/0xf80 [ 430.875250][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.875261][ T6034] [ 430.875261][ T6034] other info that might help us debug this: [ 430.875261][ T6034] [ 430.875266][ T6034] Possible unsafe locking scenario: [ 430.875266][ T6034] [ 430.875270][ T6034] CPU0 CPU1 [ 430.875276][ T6034] ---- ---- [ 430.875280][ T6034] lock(sk_lock-AF_SMC/1); [ 430.875294][ T6034] lock((work_completion)(&new_smc->smc_listen_work)); [ 430.875307][ T6034] lock(sk_lock-AF_SMC/1); [ 430.875324][ T6034] lock((work_completion)(&new_smc->smc_listen_work)); [ 430.875338][ T6034] [ 430.875338][ T6034] *** DEADLOCK *** [ 430.875338][ T6034] [ 430.875342][ T6034] 3 locks held by syz.2.28/6034: [ 430.875354][ T6034] #0: ffff888057ae7a40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 430.875395][ T6034] #1: ffff88802b008ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 430.875438][ T6034] #2: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 430.875493][ T6034] [ 430.875493][ T6034] stack backtrace: [ 430.875501][ T6034] CPU: 2 UID: 0 PID: 6034 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT(full) [ 430.875515][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.875523][ T6034] Call Trace: [ 430.875549][ T6034] [ 430.875554][ T6034] dump_stack_lvl+0x100/0x190 [ 430.875570][ T6034] print_circular_bug.cold+0x178/0x1c7 [ 430.875590][ T6034] check_noncircular+0x146/0x160 [ 430.875606][ T6034] __lock_acquire+0x14b8/0x2630 [ 430.875622][ T6034] lock_acquire+0x1b1/0x370 [ 430.875636][ T6034] ? __flush_work+0x4ca/0xcb0 [ 430.875650][ T6034] ? mark_held_locks+0x40/0x70 [ 430.875663][ T6034] ? __flush_work+0x4ca/0xcb0 [ 430.875676][ T6034] __flush_work+0x4de/0xcb0 [ 430.875689][ T6034] ? __flush_work+0x4ca/0xcb0 [ 430.875703][ T6034] ? __pfx___flush_work+0x10/0x10 [ 430.875718][ T6034] ? __pfx_wq_barrier_func+0x10/0x10 [ 430.875729][ T6034] ? __pfx___might_resched+0x10/0x10 [ 430.875746][ T6034] cancel_work_sync+0xd1/0xf0 [ 430.875762][ T6034] smc_clcsock_release+0x5f/0xe0 [ 430.875775][ T6034] __smc_release+0x5c2/0x880 [ 430.875787][ T6034] ? __pfx_sock_def_readable+0x10/0x10 [ 430.875802][ T6034] smc_close_non_accepted+0xda/0x200 [ 430.875815][ T6034] smc_close_active+0x4ff/0x1070 [ 430.875828][ T6034] __smc_release+0x634/0x880 [ 430.875839][ T6034] smc_release+0x1fc/0x620 [ 430.875851][ T6034] __sock_release+0xb3/0x260 [ 430.875861][ T6034] ? __pfx_sock_close+0x10/0x10 [ 430.875900][ T6034] sock_close+0x1c/0x30 [ 430.875910][ T6034] __fput+0x3ff/0xb50 [ 430.875933][ T6034] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.875952][ T6034] task_work_run+0x150/0x240 [ 430.875973][ T6034] ? __pfx_task_work_run+0x10/0x10 [ 430.875995][ T6034] ? rcu_is_watching+0x12/0xc0 [ 430.876021][ T6034] exit_to_user_mode_loop+0x107/0x4f0 [ 430.876044][ T6034] ? rcu_is_watching+0x12/0xc0 [ 430.876069][ T6034] do_syscall_64+0x706/0xf80 [ 430.876091][ T6034] ? clear_bhb_loop+0x40/0x90 [ 430.876110][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.876129][ T6034] RIP: 0033:0x7fe73639ce59 [ 430.876143][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.876155][ T6034] RSP: 002b:00007fe7345f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 430.876165][ T6034] RAX: 0000000000000000 RBX: 00007fe736615fa0 RCX: 00007fe73639ce59 [ 430.876173][ T6034] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 430.876180][ T6034] RBP: 00007fe736432d6f R08: 0000000000000000 R09: 0000000000000000 [ 430.876186][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.876193][ T6034] R13: 00007fe736616038 R14: 00007fe736615fa0 R15: 00007fffd037baa8 [ 430.876203][ T6034] [ 430.876437][ T5817] Bluetooth: hci2: command tx timeout [ 432.853436][ T5817] Bluetooth: hci0: command tx timeout [ 432.933401][ T5817] Bluetooth: hci2: command 0x040f tx timeout [ 432.933435][ T5809] Bluetooth: hci3: command tx timeout [ 432.943189][ T5806] Bluetooth: hci1: command tx timeout [ 434.943169][ T5806] Bluetooth: hci0: command tx timeout [ 435.013570][ T5806] Bluetooth: hci3: command tx timeout [ 435.013607][ T5809] Bluetooth: hci1: command tx timeout [ 435.013638][ T5817] Bluetooth: hci2: command 0x040f tx timeout [ 437.093245][ T5809] Bluetooth: hci2: command 0x040f tx timeout