last executing test programs: 4m37.699675467s ago: executing program 0 (id=262): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x9, 0x8}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x2]) personality(0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000016c0)={&(0x7f0000001680)='erofs_destroy_inode\x00'}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r3 = accept(r2, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="c8535b4abec4", 0x6}, {&(0x7f0000000a00)="60682863771646cdc910bcede7bdbaa0d0a6f6fcb1a8ab40b47b58eb73a316b4b829b87e3021ebcbe9fbf43a962efe1725f57f50cea42c0db8eda9c1328efdcadb0d6ffbc565263bbf2a87a3c510155c0960c47b76232fa8a68973fa7470d381e961949fcb072bd9606ebdc995476c4f8471e4033a", 0x75}], 0x2}, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000003, 0x13, 0xffffffffffffffff, 0x1000) syz_io_uring_setup(0x6e2c, &(0x7f00000003c0)={0x0, 0x2958, 0x100, 0x0, 0xf2}, &(0x7f0000000080), &(0x7f00000000c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$sysctl(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0xd, 0x3, 0x4, 0x40, 0x5, {}, {0x3, 0x1, 0x4, 0x6, 0x7, 0x5, "bf442eca"}, 0xf, 0x3, {&(0x7f0000000340)=[{0x2, 0x9, {0x2}, 0xffffffff}, {0xfffffffe, 0x4, {0x1}, 0x3}]}, 0x82d7}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086603, &(0x7f0000000040)) personality(0xf) 4m33.771684367s ago: executing program 0 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x0) unshare(0x22020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) close(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180), 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2m26.213028152s ago: executing program 0 (id=277): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x24800) setns(0xffffffffffffffff, 0x40000000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r4, 0xae7e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0xffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m20.351603104s ago: executing program 0 (id=390): timer_create(0x2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) lseek(r0, 0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0xc2800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x50, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 2m10.974011504s ago: executing program 0 (id=405): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r1, 0x0, 0x82) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r4, 0x400000001ffffffd) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r6 = accept$inet6(r4, 0x0, 0x0) close(r6) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x2, r0}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m10.24257174s ago: executing program 0 (id=408): r0 = socket(0x28, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "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"}) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}]}}) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m7.079485445s ago: executing program 1 (id=508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) close(r2) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000180), 0xc) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1m3.835740118s ago: executing program 1 (id=513): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}, 0xffffff4c, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a000030000000000000000019700"/32], &(0x7f00000023c0)='syzkaller\x00', 0x0, 0x9b, &(0x7f0000002400)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r3) pwritev(r3, &(0x7f0000000900)=[{&(0x7f0000000780)='C', 0x1}], 0x1, 0xa40, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x10ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0xb3, 0x0, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200200c100007006000000002000020d3"]) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0xd, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x5, 0x3, 0x7, 0x209, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x19, 0x1b, &(0x7f00000024c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000fc8400000083000000bf09000000000000550901000000000095000000000000008520000001000000181100006053dea23c1f8e853744a9bd8dea95d0ee4c6eec031e4ab12f2a78f1c85b3dddbb88622f3856012d", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000cf0d00007b8af8ff00000000bfa200000000000007020000f8aad9402a03000008000000b704000000000000850000008200000018000000060000000000000008bc0d00bf91000000000000b7020000000000008500000085000000b7000040000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xfd, &(0x7f0000000480)=""/253, 0x41100, 0x72, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0xffffff7b}, 0x10, 0x0, r0, 0x1, &(0x7f0000002340), &(0x7f0000002380)=[{0x2, 0x808, 0x2, 0xb}]}, 0x90) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000002180)=[0x0, 0x0], &(0x7f0000002180), 0x0, 0x2, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000005000)={&(0x7f0000000180)=[0x0], 0x0, r9, 0x0, '\x00', 0x1}) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000020c0)=0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b702000014800000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="680000001a000000000000000000000014000000000000000000000000000000000000bad4c9244e01440000803e000000280101a1d8e656b0590d68d0d76a4a4e38207c18b38cea3c9c700be24a70446c454baa6f0421a4707aa17d16574e0fbe63958c19b4f40b"], 0x68}], 0x1}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000013eb02000d34d8026a2c0000"], 0x2c}}, 0x0) connect$vsock_stream(r7, &(0x7f0000002100), 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m0.366766474s ago: executing program 1 (id=517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r1, 0x0, 0x82) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r4, 0x400000001ffffffd) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r6 = accept$inet6(r4, 0x0, 0x0) close(r6) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x2, r0}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 59.278901099s ago: executing program 1 (id=520): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setns(0xffffffffffffffff, 0x40000000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0xffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) 57.677417905s ago: executing program 1 (id=521): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) tkill(0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001ec0)={@loopback, @dev, 0x0}, &(0x7f0000001f00)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000033c0)={'syztnl2\x00', &(0x7f0000003340)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x7f, 0xb43, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x8000, 0xa90, 0x80000}}) sendmmsg$inet6(r6, &(0x7f00000034c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000240)="0e63eb324587758f6baa1d1327901b1c2406b318a64b04842e6b20fe752b06ff38f46bd8a298f5b560993cf825b4ef3f99d2bbb75c52c128047f55bf26ff212c9cd00ac3ac167fa8e296938a2be1c628cb40fb82ea12ce0c61c2dab31bb049104578807f4f119efe", 0x68}, {&(0x7f0000000040)}, {&(0x7f0000000300)="1b460393b6586ca22624a847922f849f114a823a4bae187122b1ab64f8f3a7542ca5635ac4e3f644de2235d45fdc76d8b0997fb32f1874fe5ebe1aafb428e0629243bca99cdd2e679c14f3d49b8ef5fcd4e9c3989742e1d39d9de45f4e51eb3bd067821c81389e2006366a0a4fb8757d", 0x70}], 0x3, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0x40}}, @tclass={{0x14, 0x29, 0x43, 0xd6f}}, @flowinfo={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0x56, 0x0, [@mcast2]}}}, @hopopts={{0x78, 0x29, 0x36, {0x1, 0xc, '\x00', [@calipso={0x7, 0x38, {0x6b2dc394bbd464c9, 0xc, 0xec, 0x7, [0x3, 0x80, 0x0, 0xfffffffffffffff7, 0x93, 0xe52]}}, @hao={0xc9, 0x10, @private0}, @generic={0x5}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x87, 0x4, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x80, 0x2ab, [0x4, 0x1ff, 0x183]}}]}}}], 0x128}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000000640)="0e49def6868ea85a90aa3e50c22050692c14c13a505144497d781171b012d0933321f95e4d457fd776a1fe6bde1101fb34a6ae023dc756fd6cea88bf93bcd17ffed454464fe32efcd24b74edd948a61ee281a46121ecc125f49531e8703c0eec56ea474f10a415fb0e", 0x69}, {&(0x7f0000000400)="c07d389b9e8cd49dfd1352a11dec021468c0cea59148e199478cb553d0d9d7509df5a6a54fb80901299a64996bebdfe7c50bf4e0aa4f01a153de256e577f713ff666f47290e8e55d387848c197d3d1a1d2915a2c2738cf58e5d0d8051355d5d5dd730772436978060aaff88604185f79503f4b50aa27789436c3afd3", 0x7c}, {&(0x7f00000007c0)="43ac734bd3c24504b840203f4971912312b7b3154df46fcda38223c5dcf57663609a3f8643b685eb31f53bc0656f4ca57eaf9224c47088d1d779f60afae8b7f8f0ad58cbf11c7dab294b4c7f77fd94545b461ce664a4e3eefa133cd2787a8901155355a2c965815c89d5dd696eea841affa0b046466cd9338266f9774782c73e7241a0a45c1439e67e08c76b0f1a6b1e9d6e822153d10dee3192ebbfee6b370801fd9f36bb37e4103f50c4ca67f88b5df6f7e17d0f67301fe27e01dc0cfdc1f06e938acab88b", 0xc6}, {&(0x7f0000001900)="ab3c20f16783d63ec339f2696e6ef8b03da1261a78", 0x15}, {&(0x7f0000001940)="21bc2b57ba2844fff1e4231fdfda3f5bd459505a296df1059174dc89aee2bee4512664047dbeb809e9dded3e078ad7e7c26e5a4975a00b99e84f9dc9412054bfa5e9df00fe2bb1cf2dcc57f64b8236cfb5ddbf2682134b0073fc3d9d0bea3153", 0x60}, {&(0x7f00000019c0)="bdd98d5ecbc88e4941d147a057a6704d84019cea741ea3e40d64474680c93e4edad9fb01de6d5b335016f5a981eed4d9dcfa15d4cf635c1502e4fde8bf8f2d71065407cc08a2aeee7742998675341a4c3c54dea4de178cae8816748dd04b571107900b3bfe39bce12f7991d6f96b0b3254968c64c318688dfcc417b95d4023b8f2dfea005da93435d623dcc2bb8a30d8742082f0aa6967a06a60689541b8c006e3417eba964e", 0xa6}, {&(0x7f0000001a80)="71dfa099fad485a48158a0928990481462da914a1f7a881f64e57a7492a8f0283f1f6437936a162945c73067642f8543f2db8fdfe61ba03f367eb9c23910dceb147d121b48b2424b17f47857ebe6c228934ec4923f3d3effa0f97c06be3a027b32c3bcdc0e5fdd81ae70e11e068fd2f5b51c1b629daa288ea540e65c0641b69bc079943bf097e1d1fd9fd7f754d1bbcd8f9d396006da05cf18bb7a431c08dbc59408c259476004eafc5e01b4c09b9f9cd00d8ba3f2df449888d355a273", 0xbd}, {&(0x7f0000001b40)="a5fcd932b33a5225436384b5883bd135841c5b3c7bc7940831fffa4e4832682dac0b5e253673a61fec56328225e8a67677c839d7f471afe13b8b910a1588050eec82bb664ea6f198ce016d26ce567e8c5ca79bd77e0b13d6694bbf991ee78640f5e0eaf87b3e5d072140f17836831783b309d7f05a3380c26566b898eb3a6e497de544fe4edfccdee15d9932e4d8953f0cd0a86ad670f6423cfc189736c5251dfdec9f1ebcac2f439115d506b5a0f9e6cd5827c059cd17e66b8b5d20259066b9b8237764d73db6c176f4ddaf9d27967540aa59953a1c49b1ffc9f6cd42d7088b836d5c5fe21a25054215f8174e063a2e132440da", 0xf4}], 0x8, &(0x7f0000001d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xb3}}], 0x18}}, {{&(0x7f0000001d40)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001d80)}, {&(0x7f0000001dc0)="9d491054a48f1d05cf5dab5d354c2b95cbed52a87afa26", 0x17}, {&(0x7f0000001e00)="5207be60ae82a409ffa7e2b085f81e32a006e3b15faa62cd0ed701abe34b58af3d2a1c33313cf1219e9bac6b5a3a6075c5622133a8a044561022ff8ba5cfb11226fcbe54c20d5d9cf4e7af7396061ead6aa33f5c15789add8ea2277fd988f78e37be9944cb93290c8968aea5c938053290ba2a70f65dad", 0x77}], 0x3, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x75812cf23fd785d7, 0xb2, 0x0, [@local, @empty]}}}, @dstopts={{0x70, 0x29, 0x37, {0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x9, [0x6, 0x36c000, 0x6, 0x600000000]}}]}}}], 0xe8}}], 0x3, 0x30000000) 55.669344561s ago: executing program 1 (id=524): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) tkill(0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001ec0)={@loopback, @dev, 0x0}, &(0x7f0000001f00)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000033c0)={'syztnl2\x00', &(0x7f0000003340)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x7f, 0xb43, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x8000, 0xa90, 0x80000}}) sendmmsg$inet6(r6, &(0x7f00000034c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000240)="0e63eb324587758f6baa1d1327901b1c2406b318a64b04842e6b20fe752b06ff38f46bd8a298f5b560993cf825b4ef3f99d2bbb75c52c128047f55bf26ff212c9cd00ac3ac167fa8e296938a2be1c628cb40fb82ea12ce0c61c2dab31bb049104578807f4f119efe", 0x68}, {&(0x7f0000000040)}, {&(0x7f0000000300)="1b460393b6586ca22624a847922f849f114a823a4bae187122b1ab64f8f3a7542ca5635ac4e3f644de2235d45fdc76d8b0997fb32f1874fe5ebe1aafb428e0629243bca99cdd2e679c14f3d49b8ef5fcd4e9c3989742e1d39d9de45f4e51eb3bd067821c81389e2006366a0a4fb8757d", 0x70}], 0x3, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0x40}}, @tclass={{0x14, 0x29, 0x43, 0xd6f}}, @flowinfo={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0x56, 0x0, [@mcast2]}}}, @hopopts={{0x78, 0x29, 0x36, {0x1, 0xc, '\x00', [@calipso={0x7, 0x38, {0x6b2dc394bbd464c9, 0xc, 0xec, 0x7, [0x3, 0x80, 0x0, 0xfffffffffffffff7, 0x93, 0xe52]}}, @hao={0xc9, 0x10, @private0}, @generic={0x5}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x87, 0x4, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x80, 0x2ab, [0x4, 0x1ff, 0x183]}}]}}}], 0x128}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000000640)="0e49def6868ea85a90aa3e50c22050692c14c13a505144497d781171b012d0933321f95e4d457fd776a1fe6bde1101fb34a6ae023dc756fd6cea88bf93bcd17ffed454464fe32efcd24b74edd948a61ee281a46121ecc125f49531e8703c0eec56ea474f10a415fb0e", 0x69}, {&(0x7f0000000400)="c07d389b9e8cd49dfd1352a11dec021468c0cea59148e199478cb553d0d9d7509df5a6a54fb80901299a64996bebdfe7c50bf4e0aa4f01a153de256e577f713ff666f47290e8e55d387848c197d3d1a1d2915a2c2738cf58e5d0d8051355d5d5dd730772436978060aaff88604185f79503f4b50aa27789436c3afd3", 0x7c}, {&(0x7f00000007c0)="43ac734bd3c24504b840203f4971912312b7b3154df46fcda38223c5dcf57663609a3f8643b685eb31f53bc0656f4ca57eaf9224c47088d1d779f60afae8b7f8f0ad58cbf11c7dab294b4c7f77fd94545b461ce664a4e3eefa133cd2787a8901155355a2c965815c89d5dd696eea841affa0b046466cd9338266f9774782c73e7241a0a45c1439e67e08c76b0f1a6b1e9d6e822153d10dee3192ebbfee6b370801fd9f36bb37e4103f50c4ca67f88b5df6f7e17d0f67301fe27e01dc0cfdc1f06e938acab88b", 0xc6}, {&(0x7f0000001900)="ab3c20f16783d63ec339f2696e6ef8b03da1261a78", 0x15}, {&(0x7f0000001940)="21bc2b57ba2844fff1e4231fdfda3f5bd459505a296df1059174dc89aee2bee4512664047dbeb809e9dded3e078ad7e7c26e5a4975a00b99e84f9dc9412054bfa5e9df00fe2bb1cf2dcc57f64b8236cfb5ddbf2682134b0073fc3d9d0bea3153", 0x60}, {&(0x7f00000019c0)="bdd98d5ecbc88e4941d147a057a6704d84019cea741ea3e40d64474680c93e4edad9fb01de6d5b335016f5a981eed4d9dcfa15d4cf635c1502e4fde8bf8f2d71065407cc08a2aeee7742998675341a4c3c54dea4de178cae8816748dd04b571107900b3bfe39bce12f7991d6f96b0b3254968c64c318688dfcc417b95d4023b8f2dfea005da93435d623dcc2bb8a30d8742082f0aa6967a06a60689541b8c006e3417eba964e", 0xa6}, {&(0x7f0000001a80)="71dfa099fad485a48158a0928990481462da914a1f7a881f64e57a7492a8f0283f1f6437936a162945c73067642f8543f2db8fdfe61ba03f367eb9c23910dceb147d121b48b2424b17f47857ebe6c228934ec4923f3d3effa0f97c06be3a027b32c3bcdc0e5fdd81ae70e11e068fd2f5b51c1b629daa288ea540e65c0641b69bc079943bf097e1d1fd9fd7f754d1bbcd8f9d396006da05cf18bb7a431c08dbc59408c259476004eafc5e01b4c09b9f9cd00d8ba3f2df449888d355a273", 0xbd}, {&(0x7f0000001b40)="a5fcd932b33a5225436384b5883bd135841c5b3c7bc7940831fffa4e4832682dac0b5e253673a61fec56328225e8a67677c839d7f471afe13b8b910a1588050eec82bb664ea6f198ce016d26ce567e8c5ca79bd77e0b13d6694bbf991ee78640f5e0eaf87b3e5d072140f17836831783b309d7f05a3380c26566b898eb3a6e497de544fe4edfccdee15d9932e4d8953f0cd0a86ad670f6423cfc189736c5251dfdec9f1ebcac2f439115d506b5a0f9e6cd5827c059cd17e66b8b5d20259066b9b8237764d73db6c176f4ddaf9d27967540aa59953a1c49b1ffc9f6cd42d7088b836d5c5fe21a25054215f8174e063a2e132440da", 0xf4}], 0x8, &(0x7f0000001d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xb3}}], 0x18}}, {{&(0x7f0000001d40)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001d80)}, {&(0x7f0000001dc0)="9d491054a48f1d05cf5dab5d354c2b95cbed52a87afa26", 0x17}, {&(0x7f0000001e00)="5207be60ae82a409ffa7e2b085f81e32a006e3b15faa62cd0ed701abe34b58af3d2a1c33313cf1219e9bac6b5a3a6075c5622133a8a044561022ff8ba5cfb11226fcbe54c20d5d9cf4e7af7396061ead6aa33f5c15789add8ea2277fd988f78e37be9944cb93290c8968aea5c938053290ba2a70f65dad", 0x77}], 0x3, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x75812cf23fd785d7, 0xb2, 0x0, [@local, @empty]}}}, @dstopts={{0x70, 0x29, 0x37, {0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x9, [0x6, 0x36c000, 0x6, 0x600000000]}}]}}}], 0xe8}}], 0x3, 0x30000000) 27.505424802s ago: executing program 4 (id=553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) close(r2) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000180), 0xc) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 26.396336516s ago: executing program 3 (id=554): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r1, 0x0, 0x82) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x8001420, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20}, 0xfdef) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r5 = accept$inet6(r3, 0x0, 0x0) close(r5) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x2, r0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 24.279493738s ago: executing program 3 (id=557): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d61"], 0x5c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d74d4156a221296a665e18aa4c7a0acfd92aa9fb57dbd7cb2c9a9d1cd00b40d432e82bebeb0c176990de4eceb7f41b16a0543f95240979fdcd68b7db60965ca8232034538be7d93df76fead7bddf574c70e3a9724a6614c371b405d4a8126f90990422f978e5e7eb2eb9448d419377df69a9d9635429f06fabcb6655d5dda77848c25b97f87151d9c21709000257580be9edd4f3041fcf2473042c8f55c0aa71ef035f5b89b0d2e4b322ec9787a321450d1c164e8cfaacca90a9773e6b877e38e4237eb5da067a85c2c25a89aeeea93c278cab807f725d6b2077c101c709797a9fa0a0d082797a", @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) utimes(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r3, &(0x7f00000002c0)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0xffffff38}}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 24.156190587s ago: executing program 4 (id=558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) close(r2) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000180), 0xc) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 21.650106193s ago: executing program 3 (id=561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="3b0200", @ANYRES32=0x0], 0x23b) io_setup(0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r3, 0x0, 0x0, 0x1, &(0x7f0000000040)="a2", 0x4}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x800, 0x0, @mcast2}, {0xa, 0xfffd, 0x0, @mcast2={0xff, 0x5}, 0x9}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x1, @mcast2}, {0xa, 0x0, 0x7fffffff, @local}, r6}}, 0x48) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000280)=[{}, {0x3, 0x8a, 0x1000}, {0x3, 0x3}], 0x2aaaaaaaaaaaac9d, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ptrace(0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) 21.628287956s ago: executing program 4 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02050003000000000000000000000000000000000000000000000086759e8024299c4b97710bdc6ae1e53c1cb8d3196f6bed57bb2efb9fcb46c6484d7d18c9c88d0ab5f9528b688083e7daeb6a016b18bdba10d1fffeecc49243f06ade70937004802fd7f18b0f08947a469a0c4e932b467ee0e0a41ccd"], 0x11) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r2 = creat(0x0, 0xd931d3864d39dcdb) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000001780)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create1(0x0) r7 = syz_io_uring_setup(0x12fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r6}) io_uring_enter(r7, 0x49f7, 0x0, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x320e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x12d}, &(0x7f0000000180), &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000400)={0x20000004}) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40f}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x5c}}, 0x0) 17.124201066s ago: executing program 4 (id=563): r0 = syz_open_dev$cec(0x0, 0x0, 0x880) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x5609, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000200)="89", 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 17.058230268s ago: executing program 3 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x9da9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d10, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0xfffffee3) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x8}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 15.404628977s ago: executing program 3 (id=566): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/75, 0x8e, 0x4000000000a2) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(r1, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@remote, @local, @val={@void, {0x8100, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @empty, @multicast, @dev={0xac, 0x14, 0x14, 0x29}}}}}, &(0x7f0000000280)={0x0, 0x4, [0xe14, 0xfac, 0x5c3, 0x827]}) r5 = gettid() tkill(r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r6, 0x10, 0x8000, 0x200, 0x3, {{0x30, 0x4, 0x0, 0x3, 0xc0, 0x66, 0x0, 0x0, 0x0, 0x0, @multicast1, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x22, 0x0, [{0x1, 0xd, "b1c477729992bce20e65bc"}, {0x2, 0x2}, {0x0, 0xd, "a5289f539fc62418d2b5a1"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x66, 0x1, 0x3, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x5ef}, {@remote, 0x8}, {@multicast2}]}, @timestamp_prespec={0x44, 0x4c, 0xeb, 0x3, 0x6, [{@broadcast, 0x7}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@local, 0x80000000}, {@empty, 0x3f}, {@multicast2, 0x7}, {@local, 0x85}, {@broadcast}]}, @timestamp_addr={0x44, 0x4, 0x2b, 0x1, 0x9}]}}}}}) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xe6da) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) 15.40370838s ago: executing program 4 (id=567): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x321040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x40}}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='.\\+\\##\x00', &(0x7f00000000c0)='J#\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', 0x0, &(0x7f0000000380)='\xd4\x02kJ\xacR\x82Xq\xca\xa1\xae\x8f\x87\xb0\x85\xf9p\xb1\xb4\x0f\x87\xddm^\x84Hy<\xc8\xd2\x86\xa4\xce\x99\xbb[\b\xfa\xee\xc5\xb2\x82\xd3t\xd3\xf0\x00\x0e\x91\x80)\b\x063\xf8&\xe2\xd3\xbb@\xc7\x90^4\x94M!#\x96\x7fhC\xa9\xed|\xc8e\xd5w[-\xd1\x16\xe3V\xa1\x83|\x1f\xe7\v\xcc\xe2\xd4.1\xc8bD\xa1:\xada\xfdBV\"\xcf\x11\x05&\x96\xab\x92\xc6J\'/y&\xc4\xdf0>)\x83\xfec7v\x88\x8a\xafZW&\x98\xf50?\x91 \x9b\x02\xa4\xa2\xd7\xc1\x85\xa5\a\xfbX\xfa\xd0\xc8\xa5\xca\xe2\xb6\xd0\xb3\xaf\x18C\xa4\xe4\xb8QM\x9b\xdb\xa8\x8a\xaf\x85\xe5[=d\xf8\x9b\x8d+\x98\xc0\xbd\xc6\x8e#r\x95\x9c\x90s\xc6\xd4Io\x90', &(0x7f0000000280)='.\\\x00'], &(0x7f0000000340)=[&(0x7f0000000480)='J#\x00a\xe4\x17\xc09\x95\x05\x06\xd8\x9c\x9eP3A\x9d>6~H\x9c\x17\xf6\x80\x1d\x1f\x13\xcfH\xa6\xcd\\\xdd\xe1\v\x01]=\xaa\x03\x15\xd5\t\xcfc\xa9P\x11l%\xb0\xe8\xe9o\x9c\xdc\x06\x90T5\x17c \x96\xb0h(qg|_\xf9\x84\x14G', 0x0]) 13.666500417s ago: executing program 4 (id=568): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x40}}, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000206010400000000000000000a00000005000100070000000900020073797a30000000000c0007800800124000010001050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x54}}, 0x0) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x44, r3, 0x1, 0x123, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xbeff75b0beda36a4}, @NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x90}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x50}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x4) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000980)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @f={0x9, 0x5, 0x2, 0x1, {0xa, 0xf2, "4490a08ab9adf3d79e5552c6c48c5a46a0ce1ca22ea25cf0103139993469561ee361b2879f498d2f73aeedfb27ef44c0da6631f92bbb9fa8f3bfaf3b551f9684f4d8800095fb8295fa30ff60e5eca3117984630038cb0a36d3858ba375776b97c834adcf527e62b75017114ad6373c27f743f3963028f6ff4876e88a7490e34724fba63e7ab49eae583158f33ba764779424e22d8a4bcd93f8691ca50288da78da51b4bedceabcf3af31d2522a484c9a0642d4156b370f7da80fe1524a97e1b11ad93ef5cfc2c82eb752e5e4887f4a66e861b916f1684ed8fef0ef90ae73a68534bc999b66925203b8706e05a4eb5e3e6207"}, 0x1}}, 0xfc) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 13.357038957s ago: executing program 3 (id=569): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000002200)="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"/3584, 0xe00) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x1000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x2c}, {0x6}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x10000810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000005300000008000300", @ANYRES32=r6], 0x30}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002"]) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000030101040000000000000000020000002c000280140001800800010000080001080002001b1414aa0c00028005000100000000000600034000000000"], 0x40}}, 0x0) unlink(&(0x7f0000000000)='./file1\x00') io_setup(0x3, &(0x7f00000003c0)=0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r11 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r11, 0x567, 0x0, 0x0, 0x0, 0x0) 8.007022301s ago: executing program 2 (id=573): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r1, 0x0, 0x82) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) close(r5) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x2, r0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 6.909801425s ago: executing program 2 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x9da9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d10, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0xfffffee3) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x8}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 5.820803744s ago: executing program 2 (id=575): r0 = syz_open_dev$cec(0x0, 0x0, 0x880) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x5609, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000200)="89", 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 4.391937181s ago: executing program 2 (id=576): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x69a7, 0x0, &(0x7f0000000000), &(0x7f0000000180)) r2 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x16cd, 0x0, 0x0, 0xcf}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x400}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000000340), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x100, 0x24, 0xe0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{0x0, 0x6}, [@TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x3, 0x3, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x6, 0x1}}]}, @TCA_NETEM_DELAY_DIST={0x3a, 0x2, "253d0f6d3edd80c65368c0585947e34d99703c50a984eb29796172089c131f4d88434b2eae8b43f550c913845e0990344c5d2ffb2b51"}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8000, 0x1, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x200, 0xe4f, 0x7ff, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x4, 0x6, 0x5}}]}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x50}]}, 0x100}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x15, r6, 0x1, 0x0, 0x6, @random="1518fb89afa7"}, 0x14) sendto$inet6(r7, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 1.534685413s ago: executing program 2 (id=579): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) epoll_create1(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000193c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001400010020010000000000000000000000000000080002000000000000625fd05a159094b2a4fcfe2b6ce2c62b61fdb71ecedd730b4a57d5abb8575f0f40fef46cdf48191fee4f8b90f312e3ec36c31c0cb25be7"], 0x38}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) read$msr(r1, &(0x7f00000003c0)=""/102376, 0x18fe8) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) r4 = io_uring_setup(0x3c92, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) close(r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00', 0x10081}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0xc05c5340, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0x80045300, 0x0) tkill(r5, 0x7) close_range(r6, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0x0, r2, {{0x2, 0x3ff, 0x3, r4}}}, 0x28) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) process_mrelease(r10, 0x0) kernel console output (not intermixed with test programs): atadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.522921][ T6725] input: syz1 as /devices/virtual/input/input27 [ 320.562819][ T6593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.691585][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 320.925912][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.971913][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.011967][ T6593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.039565][ T6729] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.075964][ T5281] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.084725][ T5281] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.126413][ T5281] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.164769][ T5281] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.198641][ T5281] rtc rtc0: __rtc_set_alarm: err=-22 [ 321.291692][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.305092][ T29] audit: type=1400 audit(1725242984.155:341): avc: denied { read } for pid=6744 comm="syz.4.213" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 321.318366][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.351993][ T6630] bridge_slave_0: entered allmulticast mode [ 321.371738][ T6630] bridge_slave_0: entered promiscuous mode [ 321.410658][ T29] audit: type=1400 audit(1725242984.185:342): avc: denied { open } for pid=6744 comm="syz.4.213" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 321.549429][ T29] audit: type=1400 audit(1725242984.335:343): avc: denied { create } for pid=6744 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 321.669751][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.708675][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.731841][ T6630] bridge_slave_1: entered allmulticast mode [ 321.779610][ T6630] bridge_slave_1: entered promiscuous mode [ 322.214298][ T6593] hsr_slave_0: entered promiscuous mode [ 322.249553][ T6593] hsr_slave_1: entered promiscuous mode [ 322.273517][ T6593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.294000][ T6593] Cannot create hsr debugfs directory [ 322.399812][ T5280] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 322.435716][ T6760] input: syz1 as /devices/virtual/input/input28 [ 322.658325][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 322.680764][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.697363][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.718670][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.744177][ T5280] usb 5-1: config 7 has an invalid interface number: 122 but max is 1 [ 322.760034][ T5280] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 322.770506][ T5280] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 322.810979][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.830284][ T5280] usb 5-1: config 7 has no interface number 0 [ 322.837452][ T5280] usb 5-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 322.858644][ T5280] usb 5-1: config 7 interface 122 has no altsetting 0 [ 322.910360][ T5280] usb 5-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13 [ 322.925636][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.948653][ T5280] usb 5-1: Product: syz [ 322.972334][ T5280] usb 5-1: Manufacturer: syz [ 323.000552][ T5280] usb 5-1: SerialNumber: syz [ 323.166806][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.215386][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.264933][ T6631] bridge_slave_0: entered allmulticast mode [ 323.294932][ T6631] bridge_slave_0: entered promiscuous mode [ 323.334194][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.371961][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.416468][ T6631] bridge_slave_1: entered allmulticast mode [ 323.458314][ T6631] bridge_slave_1: entered promiscuous mode [ 324.107123][ T6630] team0: Port device team_slave_0 added [ 324.160054][ T6630] team0: Port device team_slave_1 added [ 325.115096][ T5280] xr_serial 5-1:7.122: skipping garbage [ 325.121024][ T5280] xr_serial 5-1:7.122: More than one union descriptor, skipping ... [ 325.166570][ T6744] delete_channel: no stack [ 325.188967][ T5280] usb 5-1: USB disconnect, device number 5 [ 325.366478][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.498493][ T6780] input: syz1 as /devices/virtual/input/input29 [ 325.795473][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.841384][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.858563][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.930044][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.218265][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.248036][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.338484][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.522653][ T6631] team0: Port device team_slave_0 added [ 326.751256][ T6631] team0: Port device team_slave_1 added [ 327.045776][ T6630] hsr_slave_0: entered promiscuous mode [ 327.064245][ T6630] hsr_slave_1: entered promiscuous mode [ 327.116208][ T6630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.137616][ T6630] Cannot create hsr debugfs directory [ 330.588271][ T29] audit: type=1400 audit(1725242990.305:344): avc: denied { read } for pid=6796 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.773197][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.798910][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.830454][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.491098][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.551380][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.626947][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.004211][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 333.617625][ T4048] bridge_slave_1: left allmulticast mode [ 333.637447][ T4048] bridge_slave_1: left promiscuous mode [ 333.657946][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.699615][ T4048] bridge_slave_0: left allmulticast mode [ 333.712936][ T4048] bridge_slave_0: left promiscuous mode [ 333.738902][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.762273][ T4048] bridge_slave_1: left allmulticast mode [ 333.788459][ T4048] bridge_slave_1: left promiscuous mode [ 333.808654][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.899033][ T4048] bridge_slave_0: left allmulticast mode [ 333.904744][ T4048] bridge_slave_0: left promiscuous mode [ 333.958737][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.782422][ T6846] 9pnet_virtio: no channels available for device [ 335.794107][ T6846] netlink: 100 bytes leftover after parsing attributes in process `syz.4.225'. [ 337.674045][ T6855] syz.1.226: attempt to access beyond end of device [ 337.674045][ T6855] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.718197][ T6855] SQUASHFS error: Failed to read block 0x0: -5 [ 337.727996][ T6855] unable to read squashfs_super_block [ 337.751766][ T4048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.816932][ T4048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.856068][ T4048] bond0 (unregistering): Released all slaves [ 338.139359][ T4048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.162580][ T4048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.177288][ T4048] bond0 (unregistering): Released all slaves [ 338.611780][ T6631] hsr_slave_0: entered promiscuous mode [ 338.621482][ T6631] hsr_slave_1: entered promiscuous mode [ 338.629085][ T6631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.636822][ T6631] Cannot create hsr debugfs directory [ 338.662425][ T4048] hsr_slave_0: left promiscuous mode [ 338.671826][ T4048] hsr_slave_1: left promiscuous mode [ 338.687239][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.699661][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.728023][ T4048] hsr_slave_0: left promiscuous mode [ 338.737868][ T4048] hsr_slave_1: left promiscuous mode [ 338.746623][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.754761][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.773706][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.781525][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.838002][ T4048] veth1_macvtap: left promiscuous mode [ 338.843902][ T4048] veth0_macvtap: left promiscuous mode [ 338.854077][ T4048] veth1_vlan: left promiscuous mode [ 338.859624][ T4048] veth0_vlan: left promiscuous mode [ 339.696235][ T4048] team0 (unregistering): Port device team_slave_1 removed [ 339.742593][ T4048] team0 (unregistering): Port device team_slave_0 removed [ 340.263564][ T29] audit: type=1400 audit(1725243003.115:345): avc: denied { write } for pid=6870 comm="syz.1.228" path="socket:[15021]" dev="sockfs" ino=15021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 340.371519][ T29] audit: type=1400 audit(1725243003.215:346): avc: denied { read } for pid=6870 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 341.405194][ T4048] team0 (unregistering): Port device team_slave_1 removed [ 341.505920][ T4048] team0 (unregistering): Port device team_slave_0 removed [ 344.665588][ T6593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.961420][ T6593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.031698][ T6593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.065691][ T6593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.657034][ T6898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.283673][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.350189][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.357784][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.452018][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.480076][ T5284] rtc rtc0: __rtc_set_alarm: err=-22 [ 347.627730][ T6593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.063251][ T6926] 9pnet_virtio: no channels available for device [ 348.074727][ T6926] netlink: 100 bytes leftover after parsing attributes in process `syz.4.238'. [ 348.905994][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.927086][ T6630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.974685][ T29] audit: type=1400 audit(1725243011.795:347): avc: denied { write } for pid=6918 comm="syz.1.237" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 349.062402][ T6630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.101785][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.109005][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.148481][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.155698][ T4048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.244257][ T6630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.277226][ T6630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.452896][ T6631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 350.626466][ T6631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 350.699190][ T6631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.789008][ T6631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.977320][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.069306][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.502849][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.593990][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.601301][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.790542][ T6956] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 351.827048][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.843691][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.078884][ T6593] veth0_vlan: entered promiscuous mode [ 352.156989][ T6593] veth1_vlan: entered promiscuous mode [ 352.244316][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.662812][ T6631] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.901611][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.908914][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.110183][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.117527][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.203371][ T6593] veth0_macvtap: entered promiscuous mode [ 353.305484][ T6593] veth1_macvtap: entered promiscuous mode [ 353.404290][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.432817][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.451113][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.033951][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.228376][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.294522][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.340371][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.356923][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.462537][ T6593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.503540][ T6593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.555875][ T6593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.816319][ T6593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.938296][ T6994] 9pnet_virtio: no channels available for device [ 354.949984][ T6994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.246'. [ 355.150996][ T6630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.076774][ T6630] veth0_vlan: entered promiscuous mode [ 356.143396][ T6630] veth1_vlan: entered promiscuous mode [ 356.402972][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.419498][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.642804][ T6630] veth0_macvtap: entered promiscuous mode [ 356.665460][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.699292][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.751592][ T6630] veth1_macvtap: entered promiscuous mode [ 356.904560][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.002691][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.030046][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.048540][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.059869][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.084514][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.139322][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.156070][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.197126][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.209278][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.228584][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.248086][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.296069][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.366119][ T6630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.397287][ T6630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.407412][ T6630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.423500][ T6630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.740505][ T6631] veth0_vlan: entered promiscuous mode [ 358.922188][ T6631] veth1_vlan: entered promiscuous mode [ 358.964876][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.013497][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.491926][ T6631] veth0_macvtap: entered promiscuous mode [ 359.540961][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.574754][ T6631] veth1_macvtap: entered promiscuous mode [ 359.590981][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.874244][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.012972][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.074786][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.162233][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.197506][ T7024] fuse: Bad value for 'fd' [ 360.202229][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.220468][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.323301][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.339282][ T29] audit: type=1400 audit(1725243023.185:348): avc: denied { bind } for pid=7026 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.384345][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.444299][ T29] audit: type=1400 audit(1725243023.195:349): avc: denied { node_bind } for pid=7026 comm="syz.3.18" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 360.467690][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.498428][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.556792][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.598743][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.664837][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.763121][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.027820][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.041267][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.197245][ T7035] netlink: 'syz.0.252': attribute type 4 has an invalid length. [ 362.106650][ T6631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.167612][ T6631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.178407][ T6631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.187177][ T6631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.824047][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.962817][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.200514][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.201767][ T7041] input: syz1 as /devices/virtual/input/input30 [ 364.228635][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.298399][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 364.498263][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 364.524124][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.572061][ T47] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 364.609543][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.617699][ T47] usb 1-1: Product: syz [ 364.623160][ T47] usb 1-1: Manufacturer: syz [ 364.628026][ T47] usb 1-1: SerialNumber: syz [ 364.654865][ T47] usb 1-1: config 0 descriptor?? [ 364.725234][ T47] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 366.378552][ T47] usb 1-1: USB disconnect, device number 2 [ 367.409835][ T7084] input: syz1 as /devices/virtual/input/input32 [ 367.820853][ T7094] input: syz0 as /devices/virtual/input/input33 [ 368.246406][ T7102] dvmrp5: entered allmulticast mode [ 370.436749][ T29] audit: type=1400 audit(1725243033.265:350): avc: denied { create } for pid=7107 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.630299][ T29] audit: type=1400 audit(1725243033.265:351): avc: denied { bind } for pid=7107 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.741061][ T7119] rtc_cmos 00:00: Alarms can be up to one day in the future [ 370.898554][ T29] audit: type=1400 audit(1725243033.265:352): avc: denied { listen } for pid=7107 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.985513][ T29] audit: type=1400 audit(1725243033.265:353): avc: denied { write } for pid=7107 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.072039][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 371.114749][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 371.164491][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 371.200150][ T5284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 371.250905][ T5284] rtc rtc0: __rtc_set_alarm: err=-22 [ 372.949732][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 374.559231][ T7152] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.274'. [ 374.587809][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 374.727983][ T29] audit: type=1400 audit(1725243037.575:354): avc: denied { bind } for pid=7155 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 382.018216][ T29] audit: type=1400 audit(1725243044.855:355): avc: denied { create } for pid=7161 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 382.139536][ T29] audit: type=1400 audit(1725243044.985:356): avc: denied { connect } for pid=7161 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.078288][ T29] audit: type=1400 audit(1725243045.925:357): avc: denied { setopt } for pid=7161 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.471161][ T5282] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 383.758226][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 384.179060][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.185584][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.278053][ T5282] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.338301][ T5282] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.419916][ T5282] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 384.474499][ T5282] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.545417][ T5282] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 384.592382][ T5282] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.625036][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.677781][ T5282] usb 2-1: Product: syz [ 384.706823][ T5282] usb 2-1: Manufacturer: syz [ 384.794564][ T5282] usb 2-1: SerialNumber: syz [ 385.092779][ T5282] cdc_ncm 2-1:1.0: bind() failure [ 385.182875][ T5282] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 385.211277][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.220990][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.230250][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.238970][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.246919][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.255086][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.368281][ T5282] cdc_ncm 2-1:1.1: bind() failure [ 385.403429][ T5282] usb 2-1: USB disconnect, device number 2 [ 385.489393][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.501693][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.530448][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.544931][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.553235][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 385.560966][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.375396][ T1121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.769238][ T1121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.873905][ T5241] Bluetooth: hci1: command tx timeout [ 387.880224][ T5241] Bluetooth: hci4: command tx timeout [ 388.048085][ T1121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.363033][ T1121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.540222][ T1121] bridge_slave_1: left allmulticast mode [ 389.545890][ T1121] bridge_slave_1: left promiscuous mode [ 389.569200][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.602172][ T7217] input: syz1 as /devices/virtual/input/input34 [ 389.679563][ T1121] bridge_slave_0: left allmulticast mode [ 389.738299][ T1121] bridge_slave_0: left promiscuous mode [ 389.773982][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.889558][ T5241] Bluetooth: hci1: command tx timeout [ 389.897578][ T56] Bluetooth: hci4: command tx timeout [ 390.884856][ T29] audit: type=1400 audit(1725243053.725:358): avc: denied { shutdown } for pid=7230 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.968350][ T56] Bluetooth: hci4: command tx timeout [ 391.973832][ T56] Bluetooth: hci1: command tx timeout [ 392.191797][ T7253] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 392.199646][ T7253] netlink: 512 bytes leftover after parsing attributes in process `syz.4.293'. [ 392.278858][ T29] audit: type=1400 audit(1725243055.105:359): avc: denied { ioctl } for pid=7248 comm="syz.4.293" path="socket:[18434]" dev="sockfs" ino=18434 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 393.009974][ T29] audit: type=1400 audit(1725243055.115:360): avc: denied { write } for pid=7248 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 393.152347][ T29] audit: type=1400 audit(1725243055.955:361): avc: denied { bind } for pid=7251 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.395347][ T29] audit: type=1400 audit(1725243055.955:362): avc: denied { name_bind } for pid=7251 comm="syz.1.294" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 393.439717][ T29] audit: type=1400 audit(1725243055.955:363): avc: denied { node_bind } for pid=7251 comm="syz.1.294" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 393.620752][ T29] audit: type=1400 audit(1725243056.165:364): avc: denied { read } for pid=7256 comm="syz.4.295" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 396.388286][ T29] audit: type=1400 audit(1725243056.165:365): avc: denied { open } for pid=7256 comm="syz.4.295" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 398.722202][ T29] audit: type=1400 audit(1725243056.225:366): avc: denied { ioctl } for pid=7256 comm="syz.4.295" path="/dev/usbmon0" dev="devtmpfs" ino=707 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 398.852408][ T56] Bluetooth: hci1: command tx timeout [ 398.857871][ T56] Bluetooth: hci4: command tx timeout [ 399.207857][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.252250][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.288021][ T1121] bond0 (unregistering): Released all slaves [ 401.272477][ T7186] chnl_net:caif_netlink_parms(): no params data found [ 402.043771][ T1121] hsr_slave_0: left promiscuous mode [ 402.448316][ T29] audit: type=1400 audit(1725243065.045:367): avc: denied { mount } for pid=7284 comm="syz.3.298" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 402.470644][ T1121] hsr_slave_1: left promiscuous mode [ 402.541499][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.564330][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.677713][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.688067][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.775931][ T1121] veth1_macvtap: left promiscuous mode [ 402.781759][ T1121] veth0_macvtap: left promiscuous mode [ 402.836663][ T1121] veth1_vlan: left promiscuous mode [ 402.863934][ T1121] veth0_vlan: left promiscuous mode [ 402.984168][ T29] audit: type=1400 audit(1725243065.835:368): avc: denied { unmount } for pid=6630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 403.810160][ T7306] input: syz1 as /devices/virtual/input/input35 [ 405.639569][ T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.651208][ T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.665754][ T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.675252][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.684030][ T56] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 405.692014][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.835150][ T7322] input: syz1 as /devices/virtual/input/input36 [ 407.187026][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 407.254802][ T29] audit: type=1400 audit(1725243070.105:369): avc: denied { read } for pid=7321 comm="syz.3.303" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 407.318479][ T29] audit: type=1400 audit(1725243070.135:370): avc: denied { open } for pid=7321 comm="syz.3.303" path="/15/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 407.358658][ T7325] sd 0:0:1:0: PR command failed: 1026 [ 407.366864][ T29] audit: type=1400 audit(1725243070.195:371): avc: denied { ioctl } for pid=7321 comm="syz.3.303" path="/15/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 407.367785][ T7325] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 407.402725][ T7325] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 407.436573][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 407.728638][ T5241] Bluetooth: hci2: command tx timeout [ 408.402868][ T7328] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 408.409163][ T7328] [U] J"—e:ÀÆ" [ 408.524455][ T29] audit: type=1400 audit(1725243071.365:372): avc: denied { bind } for pid=7327 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.585067][ T29] audit: type=1400 audit(1725243071.405:373): avc: denied { setopt } for pid=7327 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.693466][ T29] audit: type=1400 audit(1725243071.495:374): avc: denied { write } for pid=7333 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.982177][ T7327] [U] f½Bq38²ú)…b¯ò¼öLð(ÈL–{®2§Ÿ¿-A¦"ÀúŠ®OúUß^Çë°p»aHòÍæÑ(Šú…˜ú)¬€Æd-RÆö¹yèþ^¾vÊÃ+ÅA³öšI [ 409.108273][ T29] audit: type=1400 audit(1725243071.905:375): avc: denied { create } for pid=7333 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 409.258606][ T29] audit: type=1400 audit(1725243071.965:376): avc: denied { write } for pid=7333 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 409.636995][ T7188] chnl_net:caif_netlink_parms(): no params data found [ 409.808592][ T5241] Bluetooth: hci2: command tx timeout [ 409.912150][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.991728][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.050784][ T7186] bridge_slave_0: entered allmulticast mode [ 410.097195][ T7186] bridge_slave_0: entered promiscuous mode [ 410.229103][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.256821][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.265021][ T29] audit: type=1400 audit(1725243073.105:377): avc: denied { read } for pid=7350 comm="syz.1.315" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 410.265101][ T29] audit: type=1400 audit(1725243073.105:378): avc: denied { open } for pid=7350 comm="syz.1.315" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 411.002591][ T7186] bridge_slave_1: entered allmulticast mode [ 411.137480][ T7186] bridge_slave_1: entered promiscuous mode [ 411.906038][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'. [ 411.915647][ T5241] Bluetooth: hci2: command tx timeout [ 412.362044][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 412.693450][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.918596][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 412.971498][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.011675][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.105652][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.145900][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.158479][ T47] usb 4-1: Product: syz [ 413.162937][ T47] usb 4-1: Manufacturer: syz [ 413.167654][ T47] usb 4-1: SerialNumber: syz [ 413.402870][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.678342][ T7186] team0: Port device team_slave_0 added [ 413.767711][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.777024][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.800599][ T7188] bridge_slave_0: entered allmulticast mode [ 413.832327][ T7188] bridge_slave_0: entered promiscuous mode [ 413.870975][ T7186] team0: Port device team_slave_1 added [ 413.923097][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.961549][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.969486][ T5241] Bluetooth: hci2: command tx timeout [ 413.981133][ T7188] bridge_slave_1: entered allmulticast mode [ 413.995952][ T7188] bridge_slave_1: entered promiscuous mode [ 414.236407][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.256288][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.292572][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.330878][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.357886][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.374602][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.401531][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.473264][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.651916][ T7188] team0: Port device team_slave_0 added [ 414.815029][ T47] usb 4-1: 0:2 : does not exist [ 415.448171][ T47] usb 4-1: USB disconnect, device number 3 [ 416.073224][ T7188] team0: Port device team_slave_1 added [ 416.325602][ T7186] hsr_slave_0: entered promiscuous mode [ 416.375526][ T7186] hsr_slave_1: entered promiscuous mode [ 416.565437][ T1121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.637054][ T7403] 9pnet_virtio: no channels available for device syz [ 416.953025][ T1121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.088334][ T7403] nbd3: detected capacity change from 0 to 22 [ 417.133924][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.143707][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.155569][ T7409] block nbd3: shutting down sockets [ 417.175835][ T7188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.204367][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.283993][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.345918][ T41] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.355686][ T41] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.374175][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.397351][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.407210][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.469254][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.544160][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.553968][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.563438][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.574486][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.608046][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.627301][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.653208][ T1121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.653254][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.685851][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.695779][ T7266] ldm_validate_partition_table(): Disk read failed. [ 417.703493][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.715345][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.723644][ T7266] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.734123][ T7266] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.744627][ T7266] Dev nbd3: unable to read RDB block 0 [ 417.772791][ T7266] nbd3: unable to read partition table [ 417.808533][ T7266] nbd3: partition table beyond EOD, truncated [ 417.849650][ T7266] ldm_validate_partition_table(): Disk read failed. [ 417.878715][ T7266] Dev nbd3: unable to read RDB block 0 [ 417.884769][ T7266] nbd3: unable to read partition table [ 417.908529][ T7266] nbd3: partition table beyond EOD, truncated [ 417.937758][ T1121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.972108][ T7418] ldm_validate_partition_table(): Disk read failed. [ 417.988889][ T7418] Dev nbd3: unable to read RDB block 0 [ 417.995205][ T7418] nbd3: unable to read partition table [ 418.002079][ T7418] nbd3: partition table beyond EOD, truncated [ 418.053742][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.078192][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.188270][ T7188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.606760][ T7188] hsr_slave_0: entered promiscuous mode [ 418.671218][ T7188] hsr_slave_1: entered promiscuous mode [ 418.748601][ T7188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.769251][ T7188] Cannot create hsr debugfs directory [ 418.974769][ T7415] infiniband syz1: set down [ 418.990628][ T7415] infiniband syz1: added ipvlan1 [ 419.015085][ T7415] syz1: rxe_create_cq: returned err = -12 [ 419.028383][ T29] audit: type=1400 audit(1725243081.875:379): avc: denied { listen } for pid=7421 comm="syz.3.318" lport=42349 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 419.061712][ T7415] infiniband syz1: Couldn't create ib_mad CQ [ 419.067971][ T7415] infiniband syz1: Couldn't open port 1 [ 419.146188][ T29] audit: type=1400 audit(1725243081.995:380): avc: denied { accept } for pid=7421 comm="syz.3.318" lport=42349 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 419.200616][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 419.235669][ T7415] RDS/IB: syz1: added [ 419.243515][ T7415] smc: adding ib device syz1 with port count 1 [ 419.260148][ T7415] smc: ib device syz1 port 1 has pnetid [ 420.584896][ T1121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.709128][ T7445] nvme_fabrics: unknown parameter or missing value '÷¡<:"FXIPUü‰D‹ Ý{Äù¾*“¬1&Fn`Òè΢÷~ëëÁ®Ìú<“øþh’mÜgéWÌ' in ctrl creation request [ 422.055628][ T1121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.267647][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.291776][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.330982][ T29] audit: type=1400 audit(1725243085.185:381): avc: denied { setrlimit } for pid=7454 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 422.364579][ T7317] bridge_slave_0: entered allmulticast mode [ 422.391521][ T7317] bridge_slave_0: entered promiscuous mode [ 422.522217][ T1121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.802253][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.810593][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.817858][ T7317] bridge_slave_1: entered allmulticast mode [ 422.830070][ T7317] bridge_slave_1: entered promiscuous mode [ 422.921377][ T1121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.076261][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.174804][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.535807][ T7317] team0: Port device team_slave_0 added [ 423.648966][ T7317] team0: Port device team_slave_1 added [ 423.694720][ T1121] bridge_slave_1: left allmulticast mode [ 423.708316][ T1121] bridge_slave_1: left promiscuous mode [ 423.714203][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.772088][ T1121] bridge_slave_0: left allmulticast mode [ 423.777747][ T1121] bridge_slave_0: left promiscuous mode [ 423.802465][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.851911][ T1121] bridge_slave_1: left allmulticast mode [ 423.857609][ T1121] bridge_slave_1: left promiscuous mode [ 423.896042][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.945102][ T1121] bridge_slave_0: left allmulticast mode [ 423.956612][ T1121] bridge_slave_0: left promiscuous mode [ 423.963447][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.960467][ T7465] mmap: syz.3.323 (7465) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 425.050990][ T29] audit: type=1400 audit(1725243087.895:382): avc: denied { create } for pid=7464 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 425.098814][ T29] audit: type=1400 audit(1725243087.935:383): avc: denied { setopt } for pid=7464 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 425.547328][ T1121] dvmrp5 (unregistering): left allmulticast mode [ 425.578877][ T1121] dvmrp5 (unregistering): left allmulticast mode [ 425.968472][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.982683][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.995302][ T1121] bond0 (unregistering): Released all slaves [ 426.133682][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.147543][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.161908][ T1121] bond0 (unregistering): Released all slaves [ 426.436636][ T7186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.488383][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.495369][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.596924][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.639761][ T1121] tipc: Disabling bearer [ 426.674050][ T7186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.688669][ T1121] tipc: Left network mode [ 426.808475][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.815499][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.867332][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.893990][ T7186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.950729][ T7186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.627072][ T7317] hsr_slave_0: entered promiscuous mode [ 427.722074][ T7317] hsr_slave_1: entered promiscuous mode [ 427.784632][ T7317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.810268][ T7317] Cannot create hsr debugfs directory [ 428.236663][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.251846][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.260917][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.272900][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.281074][ T56] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 428.291741][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.046294][ T7188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.439665][ T7188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.801269][ T7188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.882488][ T7188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 430.099123][ T29] audit: type=1400 audit(1725243092.955:384): avc: denied { read } for pid=7486 comm="syz.3.327" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 430.160588][ T29] audit: type=1400 audit(1725243092.955:385): avc: denied { open } for pid=7486 comm="syz.3.327" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 430.378560][ T5241] Bluetooth: hci3: command tx timeout [ 431.007218][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.046609][ T7490] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 431.073913][ T7490] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 431.196748][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.199301][ T7490] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 431.216862][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.224087][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.246775][ T7490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 431.298871][ T7490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 431.312076][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.319360][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.430146][ T7490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 431.548437][ T7490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.555597][ T7490] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 431.646163][ T7490] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 431.782471][ T7490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.829075][ T7490] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 431.970465][ T7490] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 432.063571][ T7490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.093548][ T7490] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.164832][ T7490] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.458427][ T5241] Bluetooth: hci5: command 0x0c1a tx timeout [ 432.872734][ T7317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.895623][ T7317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.915077][ T7317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.969086][ T1121] hsr_slave_0: left promiscuous mode [ 432.984668][ T1121] hsr_slave_1: left promiscuous mode [ 433.003515][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.037023][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.045540][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.083552][ T1121] hsr_slave_0: left promiscuous mode [ 433.143208][ T1121] hsr_slave_1: left promiscuous mode [ 433.180404][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.202619][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.231676][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.249305][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 433.261883][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.387195][ T1121] veth1_macvtap: left promiscuous mode [ 433.393108][ T1121] veth0_macvtap: left promiscuous mode [ 433.408466][ T1121] veth1_vlan: left promiscuous mode [ 433.413910][ T1121] veth0_vlan: left promiscuous mode [ 433.433264][ T1121] veth1_macvtap: left promiscuous mode [ 433.485696][ T1121] veth0_macvtap: left promiscuous mode [ 433.494313][ T1121] veth1_vlan: left promiscuous mode [ 433.500421][ T1121] veth0_vlan: left promiscuous mode [ 433.569125][ T5241] Bluetooth: hci4: command 0x0c1a tx timeout [ 433.891423][ T5241] Bluetooth: hci2: command 0x0c1a tx timeout [ 433.990502][ T29] audit: type=1400 audit(1725243096.825:386): avc: denied { bind } for pid=7519 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 434.138301][ T56] Bluetooth: hci3: command 0x040f tx timeout [ 434.538477][ T56] Bluetooth: hci5: command 0x0c1a tx timeout [ 435.054577][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 435.125139][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 435.331849][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 435.648379][ T56] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.978205][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 436.159300][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 436.219756][ T56] Bluetooth: hci3: command 0x040f tx timeout [ 436.227875][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 436.608308][ T56] Bluetooth: hci5: command 0x0c1a tx timeout [ 436.837724][ T7317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 436.872753][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.209057][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.408261][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.410307][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.421457][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.563970][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.571235][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.728773][ T56] Bluetooth: hci4: command 0x0c1a tx timeout [ 438.048425][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 438.254052][ T7186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.288589][ T56] Bluetooth: hci3: command 0x040f tx timeout [ 438.383679][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 438.446056][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.984069][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.514047][ T1121] IPVS: stop unused estimator thread 0... [ 439.828456][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.835726][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.870054][ T7479] bridge_slave_0: entered allmulticast mode [ 439.883491][ T7479] bridge_slave_0: entered promiscuous mode [ 439.905780][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.931651][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.949053][ T7479] bridge_slave_1: entered allmulticast mode [ 439.968734][ T7479] bridge_slave_1: entered promiscuous mode [ 440.022224][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.029630][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.151107][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.158489][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.214409][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.298267][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.346633][ T7186] veth0_vlan: entered promiscuous mode [ 440.376408][ T56] Bluetooth: hci3: command 0x040f tx timeout [ 440.408743][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.446126][ T56] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 440.679002][ T7479] team0: Port device team_slave_0 added [ 440.767210][ T7186] veth1_vlan: entered promiscuous mode [ 440.796751][ T7479] team0: Port device team_slave_1 added [ 441.181717][ T1121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.271787][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.297687][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.352110][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.366327][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.383539][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.425838][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.599460][ T1121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.887261][ T1121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.374724][ T29] audit: type=1400 audit(1725243105.045:387): avc: denied { create } for pid=7594 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 442.461769][ T56] Bluetooth: hci3: command 0x040f tx timeout [ 443.075796][ T7188] veth0_vlan: entered promiscuous mode [ 443.259666][ T1121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.334166][ T7479] hsr_slave_0: entered promiscuous mode [ 443.410363][ T7479] hsr_slave_1: entered promiscuous mode [ 443.446505][ T7479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.478508][ T7479] Cannot create hsr debugfs directory [ 444.289745][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.316953][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.326130][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.338431][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.347304][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 444.356641][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.469373][ T5305] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 444.504249][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 444.513919][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 444.522224][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 444.532368][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 444.540766][ T56] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 444.548423][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.731303][ T5305] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.763352][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.778448][ T5305] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 444.814959][ T5305] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 444.918585][ T5305] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 444.939930][ T5305] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 444.961224][ T5305] usb 4-1: Manufacturer: syz [ 444.999161][ T5305] usb 4-1: SerialNumber: syz [ 445.282470][ T1121] bridge_slave_1: left allmulticast mode [ 445.296702][ T1121] bridge_slave_1: left promiscuous mode [ 445.315663][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.331194][ T1121] bridge_slave_0: left allmulticast mode [ 445.347224][ T1121] bridge_slave_0: left promiscuous mode [ 445.357778][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.574517][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.581388][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.750389][ T5241] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 445.922697][ T1121] dvmrp5 (unregistering): left allmulticast mode [ 446.204211][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.218642][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.236416][ T1121] bond0 (unregistering): Released all slaves [ 446.319126][ T7613] sp0: Synchronizing with TNC [ 446.476764][ T5241] Bluetooth: hci0: command tx timeout [ 446.618965][ T5241] Bluetooth: hci1: command tx timeout [ 446.715204][ T5305] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 446.789656][ T5305] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input37 [ 446.859146][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.866245][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.873299][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.880418][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.887449][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.894494][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.901531][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.908575][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 446.915378][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 446.971299][ T5305] usb 4-1: USB disconnect, device number 4 [ 447.780565][ T7317] veth0_vlan: entered promiscuous mode [ 447.831878][ T7317] veth1_vlan: entered promiscuous mode [ 448.466830][ T7479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.538786][ T5241] Bluetooth: hci0: command tx timeout [ 448.688393][ T5241] Bluetooth: hci1: command tx timeout [ 448.748555][ T7479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.791285][ T7479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.857594][ T1121] hsr_slave_0: left promiscuous mode [ 448.915721][ T1121] hsr_slave_1: left promiscuous mode [ 448.933932][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.954893][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.966912][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.975098][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.034318][ T1121] veth1_macvtap: left promiscuous mode [ 449.041106][ T1121] veth0_macvtap: left promiscuous mode [ 449.046922][ T1121] veth1_vlan: left promiscuous mode [ 449.053153][ T1121] veth0_vlan: left promiscuous mode [ 449.848661][ T1111] smc: removing ib device syz1 [ 450.608626][ T5241] Bluetooth: hci0: command tx timeout [ 450.778308][ T5241] Bluetooth: hci1: command tx timeout [ 452.272035][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 452.457401][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 452.699383][ T5241] Bluetooth: hci0: command tx timeout [ 452.856205][ T5241] Bluetooth: hci1: command tx timeout [ 453.964590][ T7694] input: syz1 as /devices/virtual/input/input38 [ 454.337727][ T7479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 454.439839][ T7317] veth0_macvtap: entered promiscuous mode [ 454.577990][ T7614] chnl_net:caif_netlink_parms(): no params data found [ 454.658415][ T7317] veth1_macvtap: entered promiscuous mode [ 455.366123][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.380328][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.394398][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.435480][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.454588][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.501474][ T7614] bridge_slave_0: entered allmulticast mode [ 455.526332][ T7614] bridge_slave_0: entered promiscuous mode [ 455.560528][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.567926][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.615444][ T7614] bridge_slave_1: entered allmulticast mode [ 455.642175][ T7614] bridge_slave_1: entered promiscuous mode [ 455.689761][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.725559][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.765953][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.763216][ T7618] chnl_net:caif_netlink_parms(): no params data found [ 456.911435][ T7614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.937393][ T7317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.964168][ T7317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.973938][ T7317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.994220][ T7317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.171484][ T7614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.582078][ T7614] team0: Port device team_slave_0 added [ 457.603141][ T7614] team0: Port device team_slave_1 added [ 457.872421][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.902368][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.946676][ T7614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.059192][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.066357][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.097123][ T7614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.810938][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.910277][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.932041][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.952045][ T7618] bridge_slave_0: entered allmulticast mode [ 458.960580][ T7618] bridge_slave_0: entered promiscuous mode [ 459.285829][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.293821][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.305930][ T7618] bridge_slave_1: entered allmulticast mode [ 459.323037][ T7618] bridge_slave_1: entered promiscuous mode [ 460.312130][ T4048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.340081][ T4048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.424850][ T7614] hsr_slave_0: entered promiscuous mode [ 460.444410][ T7614] hsr_slave_1: entered promiscuous mode [ 460.458786][ T7614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.475793][ T7614] Cannot create hsr debugfs directory [ 460.664393][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.695518][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.721400][ T4048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.760807][ T4048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.927992][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.953445][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.960643][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.037029][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.044268][ T4048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.284431][ T7618] team0: Port device team_slave_0 added [ 461.430730][ T7618] team0: Port device team_slave_1 added [ 461.842832][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.850533][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.893035][ T7618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.899631][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.906722][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.935381][ T7618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.037148][ T7754] dvmrp5: entered allmulticast mode [ 463.453559][ T29] audit: type=1400 audit(1725243126.285:388): avc: denied { create } for pid=7761 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 464.178245][ T29] audit: type=1400 audit(1725243127.015:389): avc: denied { create } for pid=7759 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 464.276736][ T7618] hsr_slave_0: entered promiscuous mode [ 464.311971][ T7618] hsr_slave_1: entered promiscuous mode [ 464.339632][ T7618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.355217][ T29] audit: type=1400 audit(1725243127.195:390): avc: denied { ioctl } for pid=7759 comm="syz.4.349" path="socket:[20256]" dev="sockfs" ino=20256 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 464.380541][ T7618] Cannot create hsr debugfs directory [ 467.671794][ T1121] bridge_slave_1: left allmulticast mode [ 467.697840][ T1121] bridge_slave_1: left promiscuous mode [ 467.716771][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.849504][ T1121] bridge_slave_0: left allmulticast mode [ 467.855208][ T1121] bridge_slave_0: left promiscuous mode [ 467.915047][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.980978][ T1121] bridge_slave_1: left allmulticast mode [ 467.986642][ T1121] bridge_slave_1: left promiscuous mode [ 468.018170][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.081862][ T1121] bridge_slave_0: left allmulticast mode [ 468.087647][ T1121] bridge_slave_0: left promiscuous mode [ 468.137407][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.090240][ T7811] 9pnet_virtio: no channels available for device [ 470.138310][ T7811] netlink: 100 bytes leftover after parsing attributes in process `syz.3.355'. [ 471.123298][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.152032][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.193507][ T1121] bond0 (unregistering): Released all slaves [ 471.495006][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.525406][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.561995][ T1121] bond0 (unregistering): Released all slaves [ 472.438196][ T1121] hsr_slave_0: left promiscuous mode [ 473.477807][ T1121] hsr_slave_1: left promiscuous mode [ 473.578447][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.586447][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.610677][ T1121] hsr_slave_0: left promiscuous mode [ 473.631715][ T1121] hsr_slave_1: left promiscuous mode [ 473.652155][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.675287][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.666487][ T1121] veth0_vlan: left promiscuous mode [ 474.675456][ T1121] veth1_vlan: left promiscuous mode [ 474.687374][ T1121] veth0_vlan: left promiscuous mode [ 475.925636][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 475.985816][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 477.025144][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 477.086526][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 477.824350][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.222487][ T7479] veth0_vlan: entered promiscuous mode [ 478.932777][ T7479] veth1_vlan: entered promiscuous mode [ 479.550812][ T7870] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 479.558653][ T7870] netlink: 512 bytes leftover after parsing attributes in process `syz.3.362'. [ 480.447034][ T7479] veth0_macvtap: entered promiscuous mode [ 480.743435][ T7479] veth1_macvtap: entered promiscuous mode [ 481.152448][ T7614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.185808][ T7614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.214542][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.234287][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.245364][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.263056][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.300197][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.320748][ T29] audit: type=1400 audit(1725243144.175:391): avc: denied { ioctl } for pid=7876 comm="syz.3.364" path="socket:[22626]" dev="sockfs" ino=22626 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 481.360805][ T7614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.445029][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.487000][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.508331][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.539562][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.574234][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.749841][ T7614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 481.841921][ T7881] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 481.922066][ T7479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.958394][ T7479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.981098][ T7479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.991959][ T7479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.261530][ T7618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.290543][ T7618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.368016][ T7618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.428755][ T7618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.584863][ T5689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.608591][ T5689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.748409][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.774499][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.936459][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.079629][ T7614] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.147440][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.154754][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.115541][ T29] audit: type=1400 audit(1725243147.965:392): avc: denied { getopt } for pid=7903 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 485.171894][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.179151][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.459866][ T29] audit: type=1400 audit(1725243148.315:393): avc: denied { map } for pid=7913 comm="syz.3.367" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 485.610692][ T7917] 9pnet_fd: Insufficient options for proto=fd [ 485.883546][ T29] audit: type=1400 audit(1725243148.615:394): avc: denied { execute } for pid=7913 comm="syz.3.367" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 485.959965][ T29] audit: type=1400 audit(1725243148.815:395): avc: denied { connect } for pid=7903 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.042966][ T7914] openvswitch: netlink: Message has 4 unknown bytes. [ 486.111260][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.318778][ T7926] dvmrp5: entered allmulticast mode [ 486.870252][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.065883][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.066050][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.180191][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.180337][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.828710][ T7942] 9pnet_fd: Insufficient options for proto=fd [ 491.132723][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.344961][ T7614] veth0_vlan: entered promiscuous mode [ 491.393804][ T7614] veth1_vlan: entered promiscuous mode [ 491.653107][ T7614] veth0_macvtap: entered promiscuous mode [ 491.778381][ T7614] veth1_macvtap: entered promiscuous mode [ 492.093488][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.152169][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.169057][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.208152][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.233145][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.252889][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.295223][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.371929][ T7977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.374506][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.518148][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.570371][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.612999][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.658150][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.669051][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.821066][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.912582][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.471316][ T7614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.509852][ T7614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.548224][ T7614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.598130][ T7614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.614927][ T7618] veth0_vlan: entered promiscuous mode [ 495.227470][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.273977][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.371444][ T7618] veth1_vlan: entered promiscuous mode [ 495.449280][ T29] audit: type=1400 audit(1725243158.305:396): avc: denied { connect } for pid=8011 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 497.159157][ T8017] netlink: 256 bytes leftover after parsing attributes in process `syz.4.380'. [ 498.110350][ T29] audit: type=1400 audit(1725243160.645:397): avc: denied { bind } for pid=8011 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.477731][ T29] audit: type=1400 audit(1725243160.735:398): avc: denied { write } for pid=8011 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.549476][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.557356][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.628521][ T29] audit: type=1400 audit(1725243160.885:399): avc: denied { read } for pid=8011 comm="syz.4.380" path="socket:[23095]" dev="sockfs" ino=23095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.709069][ T7618] veth0_macvtap: entered promiscuous mode [ 498.785088][ T7618] veth1_macvtap: entered promiscuous mode [ 499.029557][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.056943][ T8020] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.381'. [ 499.075632][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.098038][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.145741][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.391113][ T29] audit: type=1400 audit(1725243162.245:400): avc: denied { bind } for pid=8018 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.438540][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.473998][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.503606][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.521953][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.592139][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.817059][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.873456][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.894495][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.938479][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.955445][ T8031] input: syz1 as /devices/virtual/input/input39 [ 499.987667][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.098257][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.120456][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.140750][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.177641][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.306587][ T7618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.358531][ T7618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.399044][ T7618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.451268][ T7618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.082727][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.618370][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.933176][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.988262][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.648280][ T8052] input: syz1 as /devices/virtual/input/input40 [ 506.958874][ T29] audit: type=1400 audit(1725243169.805:401): avc: denied { append } for pid=8082 comm="syz.2.393" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.016106][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.023760][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.948263][ T29] audit: type=1400 audit(1725243400.793:402): avc: denied { listen } for pid=8091 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.308680][ T29] audit: type=1326 audit(1725243403.113:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8676d79eb9 code=0x0 [ 511.463121][ T29] audit: type=1400 audit(1725243403.313:404): avc: denied { setopt } for pid=8108 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 513.167708][ T8134] VFS: could not find a valid V7 on nullb0. [ 513.562550][ T29] audit: type=1400 audit(1725243405.053:405): avc: denied { append } for pid=8130 comm="syz.3.403" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 515.948140][ T29] audit: type=1400 audit(1725243407.763:406): avc: denied { write } for pid=8140 comm="syz.2.406" path="socket:[22472]" dev="sockfs" ino=22472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 516.171002][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.354862][ T8156] overlayfs: overlapping lowerdir path [ 516.513393][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.709244][ T8157] input: syz1 as /devices/virtual/input/input42 [ 517.013435][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.311465][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.741024][ T63] bridge_slave_1: left allmulticast mode [ 518.762486][ T63] bridge_slave_1: left promiscuous mode [ 518.810756][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.985273][ T63] bridge_slave_0: left allmulticast mode [ 519.015531][ T63] bridge_slave_0: left promiscuous mode [ 519.049573][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.751135][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.387718][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.401253][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.412094][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.421362][ T56] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 522.438428][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 524.703531][ T56] Bluetooth: hci0: command tx timeout [ 525.268305][ T8232] trusted_key: encrypted_key: insufficient parameters specified [ 525.289335][ T8232] netlink: 'syz.4.421': attribute type 7 has an invalid length. [ 526.061342][ T29] audit: type=1400 audit(1725243417.163:407): avc: denied { shutdown } for pid=8227 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 526.780032][ T56] Bluetooth: hci0: command tx timeout [ 527.554891][ T5305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 528.528172][ T5305] usb 2-1: Using ep0 maxpacket: 8 [ 528.708615][ T5305] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 528.708704][ T5305] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.708787][ T5305] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.708839][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.753550][ T5305] usbtmc 2-1:16.0: bulk endpoints not found [ 528.848730][ T56] Bluetooth: hci0: command tx timeout [ 529.638972][ T8255] Driver unsupported XDP return value 0 on prog (id 159) dev N/A, expect packet loss! [ 529.658967][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.678305][ T5241] Bluetooth: hci0: command tx timeout [ 532.098187][ T29] audit: type=1400 audit(1725243423.003:408): avc: denied { watch_mount } for pid=8257 comm="syz.2.428" path="/10" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 532.227247][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.299197][ T63] bond0 (unregistering): Released all slaves [ 532.328541][ T8] usb 2-1: USB disconnect, device number 3 [ 534.218352][ T29] audit: type=1400 audit(1725243426.063:409): avc: denied { ioctl } for pid=8288 comm="syz.3.433" path="socket:[23988]" dev="sockfs" ino=23988 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 534.405649][ T29] audit: type=1400 audit(1725243426.243:410): avc: denied { accept } for pid=8288 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 534.560696][ T29] audit: type=1400 audit(1725243426.413:411): avc: denied { map } for pid=8288 comm="syz.3.433" path="socket:[24749]" dev="sockfs" ino=24749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.688375][ T29] audit: type=1400 audit(1725243426.473:412): avc: denied { read } for pid=8288 comm="syz.3.433" path="socket:[24749]" dev="sockfs" ino=24749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 537.012645][ T63] hsr_slave_0: left promiscuous mode [ 537.410307][ T63] hsr_slave_1: left promiscuous mode [ 537.442522][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.558303][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.596938][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.657215][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.768269][ T29] audit: type=1400 audit(1725243429.613:413): avc: denied { mounton } for pid=8323 comm="syz.4.439" path="/28/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 537.947855][ T63] veth1_macvtap: left promiscuous mode [ 537.953892][ T63] veth0_macvtap: left promiscuous mode [ 537.986859][ T63] veth1_vlan: left promiscuous mode [ 538.045421][ T63] veth0_vlan: left promiscuous mode [ 540.047990][ T56] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 540.067153][ T56] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 540.887600][ T56] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 541.772187][ T63] team0 (unregistering): Port device team_slave_1 removed [ 542.021568][ T63] team0 (unregistering): Port device team_slave_0 removed [ 543.784400][ T29] audit: type=1400 audit(1725243435.633:414): avc: denied { ioctl } for pid=8394 comm="syz.4.453" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 544.129177][ T56] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 544.146492][ T56] Bluetooth: hci2: Injecting HCI hardware error event [ 544.165767][ T5241] Bluetooth: hci2: hardware error 0x00 [ 544.261420][ T8400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8400 comm=syz.4.453 [ 544.276098][ T29] audit: type=1400 audit(1725243436.073:415): avc: denied { bind } for pid=8394 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.013004][ T56] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 545.023950][ T56] Bluetooth: hci1: Injecting HCI hardware error event [ 545.046572][ T56] Bluetooth: hci1: hardware error 0x00 [ 545.148338][ T5237] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 545.156731][ T5237] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 545.594962][ T5237] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 545.603788][ T5237] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 546.654305][ T5241] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 547.157158][ T8422] 9pnet_virtio: no channels available for device [ 547.164837][ T8422] netlink: 100 bytes leftover after parsing attributes in process `syz.3.459'. [ 547.198182][ T56] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 548.716239][ T8429] overlayfs: failed to resolve './file0': -2 [ 548.726838][ T5241] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 549.385009][ T56] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 549.393619][ T5237] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 549.403806][ T5237] Bluetooth: hci3: Injecting HCI hardware error event [ 549.411755][ T5237] Bluetooth: hci3: hardware error 0x00 [ 549.698894][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 550.398453][ T8442] serio: Serial port ptm0 [ 551.418601][ T56] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 551.488230][ T5237] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 551.739169][ T5241] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 551.946527][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.962539][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.982254][ T8190] bridge_slave_0: entered allmulticast mode [ 552.046520][ T8190] bridge_slave_0: entered promiscuous mode [ 552.116740][ T29] audit: type=1400 audit(1725243443.963:416): avc: denied { write } for pid=8439 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 552.261713][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.278817][ T8458] input: syz1 as /devices/virtual/input/input43 [ 552.322043][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.353030][ T8190] bridge_slave_1: entered allmulticast mode [ 552.418985][ T8190] bridge_slave_1: entered promiscuous mode [ 553.598460][ T5237] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 553.942691][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.059435][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.640977][ T8482] fuse: Bad value for 'fd' [ 555.658590][ T5237] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 555.702183][ T8190] team0: Port device team_slave_0 added [ 555.857873][ T8190] team0: Port device team_slave_1 added [ 557.132017][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.167584][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.230559][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.372648][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.425483][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.572770][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.765906][ T29] audit: type=1400 audit(1725243449.563:417): avc: denied { mount } for pid=8490 comm="syz.2.471" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 557.913454][ T8516] netlink: 173 bytes leftover after parsing attributes in process `syz.2.471'. [ 558.183288][ T8190] hsr_slave_0: entered promiscuous mode [ 558.237762][ T8190] hsr_slave_1: entered promiscuous mode [ 558.238271][ T29] audit: type=1400 audit(1725243450.083:418): avc: denied { getopt } for pid=8522 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.493711][ T8523] usb usb8: usbfs: process 8523 (syz.3.474) did not claim interface 0 before use [ 558.978137][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 559.373996][ T8] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 559.437672][ T8] usb 4-1: config 0 has no interface number 0 [ 559.546495][ T8] usb 4-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=22.e3 [ 559.603816][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.660694][ T8] usb 4-1: Product: syz [ 559.705680][ T8] usb 4-1: Manufacturer: syz [ 559.736113][ T8] usb 4-1: SerialNumber: syz [ 559.791792][ T8] usb 4-1: config 0 descriptor?? [ 559.871712][ T8] usb-storage 4-1:0.235: USB Mass Storage device detected [ 559.962757][ T8] usb-storage 4-1:0.235: Quirks match for vid 0421 pid 0492: 400 [ 562.268277][ T5306] usb 4-1: USB disconnect, device number 5 [ 563.347206][ T29] audit: type=1400 audit(1725243455.183:419): avc: denied { write } for pid=8573 comm="syz.3.482" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 563.867628][ T8190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 564.001937][ T8190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 564.026859][ T29] audit: type=1400 audit(1725243455.873:420): avc: denied { write } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.147318][ T8190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 564.190888][ T29] audit: type=1400 audit(1725243455.873:421): avc: denied { remove_name } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.249479][ T8190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 564.320606][ T29] audit: type=1400 audit(1725243455.873:422): avc: denied { add_name } for pid=4658 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.461459][ T29] audit: type=1326 audit(1725243456.313:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa70f79eb9 code=0x0 [ 565.258409][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.409943][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.478398][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.485692][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.669919][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.677242][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.031140][ T8190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 566.058652][ T8190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.458162][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.542196][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.247707][ T29] audit: type=1400 audit(1725243461.093:424): avc: denied { wake_alarm } for pid=8643 comm="syz.2.494" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.535541][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.054710][ T8190] veth0_vlan: entered promiscuous mode [ 570.975965][ T8190] veth1_vlan: entered promiscuous mode [ 571.348304][ T8190] veth0_macvtap: entered promiscuous mode [ 571.430944][ T8190] veth1_macvtap: entered promiscuous mode [ 571.611302][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.678224][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.714363][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.731516][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.793002][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.842208][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.857023][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.933089][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.034470][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.997106][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.135877][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.471149][ T8686] capability: warning: `syz.2.499' uses deprecated v2 capabilities in a way that may be insecure [ 573.674386][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.688136][ T29] audit: type=1400 audit(1725243465.313:425): avc: denied { create } for pid=8679 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 573.708630][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.708658][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.708702][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.708725][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.708750][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.711285][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.093804][ T8190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.155051][ T8190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.186404][ T8190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.260690][ T8190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.201726][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.492329][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.815469][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.885179][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.425713][ T29] audit: type=1400 audit(1725243469.253:426): avc: denied { map } for pid=8717 comm="syz.2.506" path="/dev/video4" dev="devtmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 582.813777][ T29] audit: type=1400 audit(1725243474.663:427): avc: granted { setsecparam } for pid=8754 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 583.254911][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.268171][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.299037][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.330237][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 583.430525][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 583.448924][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 584.683329][ T8278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.972674][ T8278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.256188][ T8278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.568794][ T5237] Bluetooth: hci4: command tx timeout [ 585.771721][ T8278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.738311][ T5237] Bluetooth: hci4: command tx timeout [ 588.709637][ T29] audit: type=1400 audit(1725243480.423:428): avc: denied { lock } for pid=8811 comm="syz.4.522" path="socket:[26745]" dev="sockfs" ino=26745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 589.134991][ T8816] dvmrp5: entered allmulticast mode [ 589.352717][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.522'. [ 589.579202][ T8278] bridge_slave_1: left allmulticast mode [ 589.579237][ T8278] bridge_slave_1: left promiscuous mode [ 589.579528][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.660219][ T8278] bridge_slave_0: left allmulticast mode [ 589.660255][ T8278] bridge_slave_0: left promiscuous mode [ 589.660586][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.753103][ T5241] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 589.754231][ T5241] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 589.818228][ T5241] Bluetooth: hci4: command tx timeout [ 591.889713][ T5241] Bluetooth: hci4: command tx timeout [ 592.748262][ T29] audit: type=1400 audit(1725243484.523:429): avc: denied { write } for pid=8846 comm="syz.4.526" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 593.814904][ T5241] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 594.769251][ T5241] Bluetooth: hci5: Injecting HCI hardware error event [ 594.777547][ T5241] Bluetooth: hci5: hardware error 0x00 [ 597.078742][ T5241] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 598.699226][ T8888] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 598.765716][ T8888] netlink: 'syz.4.533': attribute type 2 has an invalid length. [ 598.778479][ T8888] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 599.174251][ T5241] Bluetooth: hci5: Opcode 0x206c failed: -110 [ 599.274119][ T8278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.374034][ T8278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.445478][ T8278] bond0 (unregistering): Released all slaves [ 599.534875][ T8760] chnl_net:caif_netlink_parms(): no params data found [ 600.411115][ T8905] 9pnet_virtio: no channels available for device [ 601.258108][ T5241] Bluetooth: hci5: Opcode 0x2046 failed: -110 [ 602.007789][ T8915] Unsupported ieee802154 address type: 0 [ 602.649068][ T29] audit: type=1400 audit(1725243493.853:430): avc: denied { bind } for pid=8908 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 603.353071][ T8922] tipc: Started in network mode [ 603.358403][ T8922] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 603.367736][ T8922] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 603.376201][ T8922] tipc: Enabled bearer , priority 10 [ 603.631733][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.533053][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.578956][ T5281] tipc: Node number set to 1 [ 604.586079][ T8760] bridge_slave_0: entered allmulticast mode [ 604.639671][ T8760] bridge_slave_0: entered promiscuous mode [ 604.742211][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.774771][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.812668][ T8760] bridge_slave_1: entered allmulticast mode [ 604.845955][ T8760] bridge_slave_1: entered promiscuous mode [ 606.656908][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.672724][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.695292][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.723685][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.747315][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.759779][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 607.045893][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.204762][ T8278] hsr_slave_0: left promiscuous mode [ 607.233607][ T8278] hsr_slave_1: left promiscuous mode [ 607.277865][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.333544][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.378983][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.397426][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.633048][ T8278] veth1_macvtap: left promiscuous mode [ 607.684194][ T8278] veth0_macvtap: left promiscuous mode [ 607.712364][ T8278] veth1_vlan: left promiscuous mode [ 607.727959][ T8278] veth0_vlan: left promiscuous mode [ 609.674926][ T5241] Bluetooth: hci0: command tx timeout [ 611.140100][ T8962] 9pnet_virtio: no channels available for device [ 611.740159][ T5237] Bluetooth: hci0: command tx timeout [ 611.854059][ T8964] 9pnet_virtio: no channels available for device [ 611.862876][ T8964] netlink: 100 bytes leftover after parsing attributes in process `syz.2.545'. [ 612.239000][ T8967] Device name cannot be null; rc = [-22] [ 613.465370][ T8278] team0 (unregistering): Port device team_slave_1 removed [ 613.653768][ T8278] team0 (unregistering): Port device team_slave_0 removed [ 613.808436][ T5237] Bluetooth: hci0: command tx timeout [ 615.251190][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.664839][ T8988] input: syz1 as /devices/virtual/input/input44 [ 615.718839][ T8760] team0: Port device team_slave_0 added [ 615.799263][ T8760] team0: Port device team_slave_1 added [ 615.825004][ T29] audit: type=1400 audit(1725243507.673:431): avc: denied { setopt } for pid=8990 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 615.888300][ T5237] Bluetooth: hci0: command tx timeout [ 616.172398][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.206463][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.321023][ T8760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.454390][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.480106][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.571519][ T8760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.936369][ T29] audit: type=1400 audit(1725243508.773:432): avc: denied { mount } for pid=8990 comm="syz.2.550" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 617.479773][ T29] audit: type=1400 audit(1725243509.333:433): avc: denied { read } for pid=9007 comm="syz.3.552" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 617.568488][ T29] audit: type=1400 audit(1725243509.333:434): avc: denied { open } for pid=9007 comm="syz.3.552" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 617.570112][ T8760] hsr_slave_0: entered promiscuous mode [ 617.611508][ T8760] hsr_slave_1: entered promiscuous mode [ 618.581644][ T29] audit: type=1400 audit(1725243509.763:435): avc: denied { ioctl } for pid=9007 comm="syz.3.552" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 618.623024][ T9014] netlink: 1832 bytes leftover after parsing attributes in process `syz.3.552'. [ 619.430892][ T29] audit: type=1400 audit(1725243511.283:436): avc: denied { unmount } for pid=7618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 619.984763][ T9034] 9pnet_virtio: no channels available for device [ 620.857802][ T8278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.139651][ T9049] netlink: 100 bytes leftover after parsing attributes in process `syz.2.559'. [ 622.433778][ T8278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.246529][ T8278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.513058][ T8278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.740492][ T8935] chnl_net:caif_netlink_parms(): no params data found [ 629.901747][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.908392][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.890110][ T29] audit: type=1326 audit(1725243523.723:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9110 comm="syz.3.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa70f79eb9 code=0x0 [ 632.058840][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 632.128728][ T8278] bridge_slave_1: left allmulticast mode [ 632.134437][ T8278] bridge_slave_1: left promiscuous mode [ 632.165930][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.202395][ T8278] bridge_slave_0: left allmulticast mode [ 632.220768][ T9120] Bluetooth: MGMT ver 1.23 [ 632.236258][ T8278] bridge_slave_0: left promiscuous mode [ 632.252894][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.111139][ T8278] dvmrp5 (unregistering): left allmulticast mode [ 633.547754][ T8278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.577948][ T8278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.613599][ T8278] bond0 (unregistering): Released all slaves [ 633.713640][ T9137] input: syz1 as /devices/virtual/input/input45 [ 633.832996][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.849451][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.883007][ T8935] bridge_slave_0: entered allmulticast mode [ 633.922813][ T8935] bridge_slave_0: entered promiscuous mode [ 634.198739][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.205946][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.218433][ T8935] bridge_slave_1: entered allmulticast mode [ 634.234400][ T8935] bridge_slave_1: entered promiscuous mode [ 634.476259][ T8935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.684494][ T8935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.987232][ T8935] team0: Port device team_slave_0 added [ 635.002978][ T8935] team0: Port device team_slave_1 added [ 635.320395][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.331564][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.368561][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.398949][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.405947][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.432859][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.684034][ T8760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 635.738360][ T9120] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.760369][ T9120] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 635.823059][ T9120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 635.823845][ T9140] input: syz1 as /devices/virtual/input/input46 [ 635.849117][ T9120] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 635.860240][ T8760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 635.910812][ T8760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 636.027621][ T8935] hsr_slave_0: entered promiscuous mode [ 636.050344][ T8935] hsr_slave_1: entered promiscuous mode [ 636.072522][ T8935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.095084][ T8935] Cannot create hsr debugfs directory [ 636.145055][ T8760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 637.402903][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.524678][ T8760] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.607934][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.615172][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.666609][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.673820][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.829789][ T8935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.854623][ T8935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 637.996647][ T8935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.023105][ T8760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.099962][ T8935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.646779][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.081463][ T8935] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.355188][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.362479][ T8277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.487424][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.494765][ T8277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.566693][ T8935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.769819][ T29] audit: type=1400 audit(1725243533.623:438): avc: denied { bind } for pid=9183 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 641.854643][ T29] audit: type=1400 audit(1725243533.693:439): avc: denied { write } for pid=9183 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 641.907211][ T8935] veth0_vlan: entered promiscuous mode [ 641.991890][ T8935] veth1_vlan: entered promiscuous mode [ 642.046903][ T8935] veth0_macvtap: entered promiscuous mode [ 642.121913][ T8935] veth1_macvtap: entered promiscuous mode [ 642.231697][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.250132][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.289389][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.322143][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.386340][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.418124][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.464973][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.535677][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.610252][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.675217][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.725593][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.745843][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.768591][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.806482][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.838041][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.888615][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.909268][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.945322][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.991765][ T8935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.028119][ T8935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.058258][ T8935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.077736][ T8935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.313356][ T9245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.344207][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.350656][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.775331][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.781895][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.088525][ T30] INFO: task kworker/0:4:5282 blocked for more than 143 seconds. [ 777.096401][ T30] Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0 [ 777.104524][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 777.113513][ T30] task:kworker/0:4 state:D stack:23008 pid:5282 tgid:5282 ppid:2 flags:0x00004000 [ 777.123810][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 777.130598][ T30] Call Trace: [ 777.133880][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 777.136819][ T30] __schedule+0xe37/0x5490 [ 777.141580][ T30] ? __pfx_mark_lock+0x10/0x10 [ 777.146418][ T30] ? __pfx___schedule+0x10/0x10 [ 777.151400][ T30] ? schedule+0x298/0x350 [ 777.155783][ T30] ? __pfx_lock_release+0x10/0x10 [ 777.160968][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.166248][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 777.172083][ T30] schedule+0xe7/0x350 [ 777.176227][ T30] schedule_preempt_disabled+0x13/0x30 [ 777.182305][ T30] __mutex_lock+0x5b8/0x9c0 [ 777.186873][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 777.218033][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 777.223159][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 777.244282][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 777.260839][ T30] process_one_work+0x9c5/0x1b40 [ 777.265887][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 777.271639][ T30] ? __pfx_process_one_work+0x10/0x10 [ 777.277092][ T30] ? assign_work+0x1a0/0x250 [ 777.282306][ T30] worker_thread+0x6c8/0xed0 [ 777.286998][ T30] ? __pfx_worker_thread+0x10/0x10 [ 777.292792][ T30] kthread+0x2c1/0x3a0 [ 777.296939][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.308642][ T30] ? __pfx_kthread+0x10/0x10 [ 777.313316][ T30] ret_from_fork+0x45/0x80 [ 777.317760][ T30] ? __pfx_kthread+0x10/0x10 [ 777.322431][ T30] ret_from_fork_asm+0x1a/0x30 [ 777.327253][ T30] [ 777.330381][ T30] INFO: task syz.4.568:9105 blocked for more than 143 seconds. [ 777.339185][ T30] Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0 [ 777.346866][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 777.355634][ T30] task:syz.4.568 state:D stack:25952 pid:9105 tgid:9104 ppid:7317 flags:0x00004006 [ 777.367010][ T30] Call Trace: [ 777.371853][ T30] [ 777.374816][ T30] __schedule+0xe37/0x5490 [ 777.379312][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 777.384569][ T30] ? __pfx___schedule+0x10/0x10 [ 777.389517][ T30] ? schedule+0x298/0x350 [ 777.393895][ T30] ? __pfx_lock_release+0x10/0x10 [ 777.399009][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 777.403736][ T30] ? __mutex_trylock_common+0x78/0x250 [ 777.409467][ T30] schedule+0xe7/0x350 [ 777.413730][ T30] schedule_preempt_disabled+0x13/0x30 [ 777.419606][ T30] __mutex_lock+0x5b8/0x9c0 [ 777.424188][ T30] ? rfkill_unregister+0xde/0x2c0 [ 777.429428][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 777.434519][ T30] ? device_del+0x6b6/0x9f0 [ 777.439160][ T30] ? __pfx_device_del+0x10/0x10 [ 777.444070][ T30] ? rfkill_unregister+0xde/0x2c0 [ 777.449730][ T30] rfkill_unregister+0xde/0x2c0 [ 777.454656][ T30] nfc_unregister_device+0x94/0x330 [ 777.460281][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 777.466076][ T30] virtual_ncidev_close+0x51/0xb0 [ 777.471322][ T30] __fput+0x408/0xbb0 [ 777.475376][ T30] task_work_run+0x14e/0x250 [ 777.483108][ T30] ? __pfx_task_work_run+0x10/0x10 [ 777.488423][ T30] get_signal+0x1ca/0x2770 [ 777.492994][ T30] ? __pfx_get_signal+0x10/0x10 [ 777.497889][ T30] ? kick_process+0xf6/0x1b0 [ 777.502573][ T30] ? task_work_add+0x1d6/0x370 [ 777.507398][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 777.513011][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 777.519278][ T30] ? ksys_read+0x1ab/0x260 [ 777.523736][ T30] ? __pfx_ksys_read+0x10/0x10 [ 777.528609][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 777.534283][ T30] do_syscall_64+0xda/0x250 [ 777.539143][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.545084][ T30] RIP: 0033:0x7f8676d79eb9 [ 777.549603][ T30] RSP: 002b:00007f8677bdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.558104][ T30] RAX: fffffffffffffff2 RBX: 00007f8676f15f80 RCX: 00007f8676d79eb9 [ 777.566123][ T30] RDX: 0000000000000064 RSI: 0000000020000500 RDI: 0000000000000003 [ 777.574383][ T30] RBP: 00007f8676de793e R08: 0000000000000000 R09: 0000000000000000 [ 777.582458][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.590783][ T30] R13: 0000000000000000 R14: 00007f8676f15f80 R15: 00007ffe695f8818 [ 777.599108][ T30] [ 777.602220][ T30] [ 777.602220][ T30] Showing all locks held in the system: [ 777.610693][ T30] 1 lock held by khungtaskd/30: [ 777.615561][ T30] #0: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 777.625543][ T30] 2 locks held by getty/4980: [ 777.631913][ T30] #0: ffff8880309aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 777.641819][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 777.652137][ T30] 3 locks held by kworker/0:4/5282: [ 777.657344][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 777.667891][ T30] #1: ffffc900043d7d80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 777.684001][ T30] #2: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 777.695563][ T30] 4 locks held by kworker/u8:12/8278: [ 777.701015][ T30] #0: ffff88801bae3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 777.711501][ T30] #1: ffffc900035dfd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 777.721535][ T30] #2: ffffffff8fa1fbd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbb0 [ 777.731223][ T30] #3: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 777.743291][ T30] 1 lock held by syz-executor/8760: [ 777.748586][ T30] #0: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 777.758878][ T30] 2 locks held by syz-executor/8935: [ 777.764185][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 777.772717][ T30] #1: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13b/0x750 [ 777.785287][ T30] 2 locks held by syz.4.568/9105: [ 777.790469][ T30] #0: ffff8880615d2100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 [ 777.800375][ T30] #1: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 777.811058][ T30] 2 locks held by syz.3.569/9120: [ 777.816120][ T30] #0: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x16e/0x570 [ 777.826334][ T30] #1: ffff8880615d2100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2e0 [ 777.835450][ T30] 2 locks held by syz-executor/9187: [ 777.840834][ T30] #0: ffff88805c3fa918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bd/0x480 [ 777.851577][ T30] #1: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 777.862005][ T30] 2 locks held by syz-executor/9209: [ 777.867320][ T30] #0: ffff888077a11118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bd/0x480 [ 777.876912][ T30] #1: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 777.887300][ T30] 2 locks held by syz-executor/9210: [ 777.892680][ T30] #0: ffff88807ac74118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bd/0x480 [ 777.902230][ T30] #1: ffffffff8fec18a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 777.912278][ T30] 1 lock held by syz.2.580/9242: [ 777.917241][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 777.926587][ T30] 1 lock held by syz-executor/9324: [ 777.931893][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 777.940781][ T30] 1 lock held by syz-executor/9326: [ 777.946017][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 777.954635][ T30] 1 lock held by syz-executor/9332: [ 777.959939][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 777.969830][ T30] 1 lock held by syz-executor/9334: [ 777.975068][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 777.983632][ T30] 1 lock held by syz-executor/9336: [ 777.988876][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 777.997398][ T30] 1 lock held by syz-executor/9338: [ 778.005514][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 778.014279][ T30] 1 lock held by syz-executor/9340: [ 778.019698][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 778.031642][ T30] 1 lock held by syz-executor/9342: [ 778.036862][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 778.045424][ T30] 1 lock held by syz-executor/9344: [ 778.050716][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 778.059392][ T30] 1 lock held by syz-executor/9346: [ 778.064614][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 778.073176][ T30] 1 lock held by syz-executor/9348: [ 778.078450][ T30] #0: ffffffff8e9f6828 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 778.087031][ T30] [ 778.089459][ T30] ============================================= [ 778.089459][ T30] [ 778.097887][ T30] NMI backtrace for cpu 1 [ 778.102209][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0 [ 778.112720][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 778.122844][ T30] Call Trace: [ 778.126126][ T30] [ 778.129065][ T30] dump_stack_lvl+0x116/0x1f0 [ 778.133794][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 778.138883][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 778.144916][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 778.150952][ T30] watchdog+0xf0c/0x1240 [ 778.155228][ T30] ? __pfx_watchdog+0x10/0x10 [ 778.159922][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 778.165170][ T30] ? __kthread_parkme+0x148/0x220 [ 778.170307][ T30] ? __pfx_watchdog+0x10/0x10 [ 778.175013][ T30] kthread+0x2c1/0x3a0 [ 778.179103][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.184339][ T30] ? __pfx_kthread+0x10/0x10 [ 778.188968][ T30] ret_from_fork+0x45/0x80 [ 778.193424][ T30] ? __pfx_kthread+0x10/0x10 [ 778.198043][ T30] ret_from_fork_asm+0x1a/0x30 [ 778.202877][ T30] [ 778.206176][ T30] Sending NMI from CPU 1 to CPUs 0: [ 778.211473][ C0] NMI backtrace for cpu 0 [ 778.211486][ C0] CPU: 0 UID: 0 PID: 1121 Comm: kworker/u8:7 Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0 [ 778.211516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 778.211533][ C0] Workqueue: events_unbound toggle_allocation_gate [ 778.211571][ C0] RIP: 0010:kasan_check_range+0x10e/0x1a0 [ 778.211602][ C0] Code: 00 7c 0b 44 89 c2 e8 a1 ea ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 <80> 38 00 74 f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c [ 778.211644][ C0] RSP: 0018:ffffc900044d7620 EFLAGS: 00000086 [ 778.211662][ C0] RAX: fffffbfff2d244e0 RBX: fffffbfff2d244e1 RCX: ffffffff8168c94e [ 778.211681][ C0] RDX: fffffbfff2d244e1 RSI: 0000000000000008 RDI: ffffffff96922700 [ 778.211698][ C0] RBP: fffffbfff2d244e0 R08: 0000000000000000 R09: fffffbfff2d244e0 [ 778.211715][ C0] R10: ffffffff96922707 R11: 0000000000000000 R12: dffffc0000000000 [ 778.211732][ C0] R13: ffff888027c347d0 R14: 0000000000000002 R15: ffff888027c33c00 [ 778.211750][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 778.211775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.211794][ C0] CR2: 00007f6d5fe86917 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 778.211811][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 778.211826][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 778.211843][ C0] Call Trace: [ 778.211851][ C0] [ 778.211859][ C0] ? show_regs+0x8c/0xa0 [ 778.211899][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 778.211937][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 778.211974][ C0] ? nmi_handle+0x1a9/0x5c0 [ 778.211998][ C0] ? kasan_check_range+0x10e/0x1a0 [ 778.212032][ C0] ? default_do_nmi+0x6a/0x160 [ 778.212072][ C0] ? exc_nmi+0x170/0x1e0 [ 778.212097][ C0] ? end_repeat_nmi+0xf/0x53 [ 778.212127][ C0] ? hlock_class+0x4e/0x130 [ 778.212155][ C0] ? kasan_check_range+0x10e/0x1a0 [ 778.212182][ C0] ? kasan_check_range+0x10e/0x1a0 [ 778.212212][ C0] ? kasan_check_range+0x10e/0x1a0 [ 778.212239][ C0] [ 778.212247][ C0] [ 778.212255][ C0] hlock_class+0x4e/0x130 [ 778.212282][ C0] __lock_acquire+0x142f/0x3cb0 [ 778.212323][ C0] ? mark_lock+0xb5/0xc60 [ 778.212356][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 778.212390][ C0] ? hlock_class+0x4e/0x130 [ 778.212421][ C0] lock_acquire+0x1b1/0x560 [ 778.212456][ C0] ? __pte_offset_map_lock+0xf1/0x300 [ 778.212496][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 778.212531][ C0] ? hlock_class+0x4e/0x130 [ 778.212556][ C0] ? mark_lock+0xb5/0xc60 [ 778.212590][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 778.212615][ C0] ? rcu_is_watching+0x12/0xc0 [ 778.212654][ C0] _raw_spin_lock+0x2e/0x40 [ 778.212683][ C0] ? __pte_offset_map_lock+0xf1/0x300 [ 778.212737][ C0] __pte_offset_map_lock+0xf1/0x300 [ 778.212784][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 778.212830][ C0] __get_locked_pte+0x79/0xc0 [ 778.212873][ C0] ? __kmalloc_cache_noprof+0x80/0x300 [ 778.212914][ C0] __text_poke+0x224/0xca0 [ 778.212944][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 778.212978][ C0] ? __pfx___text_poke+0x10/0x10 [ 778.213009][ C0] ? __kmalloc_cache_noprof+0x80/0x300 [ 778.213057][ C0] text_poke_bp_batch+0x493/0x760 [ 778.213091][ C0] ? __kmalloc_node_track_caller_noprof+0xe5/0x430 [ 778.213120][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 778.213153][ C0] ? __jump_label_patch+0x1db/0x400 [ 778.213190][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 778.213232][ C0] text_poke_finish+0x30/0x40 [ 778.213264][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 778.213302][ C0] jump_label_update+0x1d7/0x400 [ 778.213344][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 778.213387][ C0] static_key_enable+0x1a/0x20 [ 778.213426][ C0] toggle_allocation_gate+0xf8/0x250 [ 778.213468][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 778.213517][ C0] process_one_work+0x9c5/0x1b40 [ 778.213565][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 778.213604][ C0] ? __pfx_process_one_work+0x10/0x10 [ 778.213650][ C0] ? assign_work+0x1a0/0x250 [ 778.213689][ C0] worker_thread+0x6c8/0xed0 [ 778.213736][ C0] ? __kthread_parkme+0x148/0x220 [ 778.213768][ C0] ? __pfx_worker_thread+0x10/0x10 [ 778.213811][ C0] kthread+0x2c1/0x3a0 [ 778.213839][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.213872][ C0] ? __pfx_kthread+0x10/0x10 [ 778.213903][ C0] ret_from_fork+0x45/0x80 [ 778.213942][ C0] ? __pfx_kthread+0x10/0x10 [ 778.213971][ C0] ret_from_fork_asm+0x1a/0x30 [ 778.214018][ C0] [ 778.217407][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 778.217425][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0 [ 778.217462][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 778.217480][ T30] Call Trace: [ 778.217491][ T30] [ 778.217503][ T30] dump_stack_lvl+0x3d/0x1f0 [ 778.217541][ T30] panic+0x6dc/0x7c0 [ 778.217599][ T30] ? __pfx_panic+0x10/0x10 [ 778.217640][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 778.217675][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 778.217717][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 778.217749][ T30] ? watchdog+0xd76/0x1240 [ 778.217783][ T30] ? watchdog+0xd69/0x1240 [ 778.217817][ T30] watchdog+0xd87/0x1240 [ 778.217852][ T30] ? __pfx_watchdog+0x10/0x10 [ 778.217878][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 778.217921][ T30] ? __kthread_parkme+0x148/0x220 [ 778.217986][ T30] ? __pfx_watchdog+0x10/0x10 [ 778.218017][ T30] kthread+0x2c1/0x3a0 [ 778.218051][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.218092][ T30] ? __pfx_kthread+0x10/0x10 [ 778.218129][ T30] ret_from_fork+0x45/0x80 [ 778.218175][ T30] ? __pfx_kthread+0x10/0x10 [ 778.218217][ T30] ret_from_fork_asm+0x1a/0x30 [ 778.218279][ T30] [ 778.218850][ T30] Kernel Offset: disabled [ 778.795135][ T30] Rebooting in 86400 seconds..