last executing test programs: 10.90584099s ago: executing program 2 (id=726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0) sendfile(r3, r3, 0x0, 0xcf9b) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) 9.590204454s ago: executing program 2 (id=733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=ANY=[@ANYBLOB="50010000", @ANYRES16=r5, @ANYBLOB="00010e8f03ee54c66fca40453aec28d3d8150121c86d136831354d237c5707ffa1c79bb102", @ANYRES32=r7, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05030800d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x6000000) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x3032344d, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x80}]}}) chdir(&(0x7f0000000140)='./file0\x00') r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r10, &(0x7f0000002780)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) close(r11) 8.447358431s ago: executing program 0 (id=739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000080000000200088b2f01"], 0xfdef) 7.978225377s ago: executing program 0 (id=744): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8dffffff, &(0x7f0000001a80)=[{&(0x7f0000000380)='g', 0xfffffdef}], 0xa, 0x0, 0x0, 0x5000000}, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0xfea7) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfa64}) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd002}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b31, 0x10000000000004) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettaction={0x30, 0x32, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0x20040004) 7.969066894s ago: executing program 2 (id=745): io_setup(0x81, &(0x7f0000001440)=0x0) syz_io_uring_setup(0x5874, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000000), &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 6.76735303s ago: executing program 1 (id=747): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000023c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)=@ipv6_getroute={0x48, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x20, 0x10, 0x9, 0xfe, 0x3, 0xff, 0x7, 0x1300}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x1}}, @RTA_PRIORITY={0x8}, @RTA_PREF={0x5, 0x14, 0x4}, @RTA_PREF={0x5, 0x14, 0x1}, @RTA_IIF={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b0495619a60bf5d77e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d13", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x10000}}}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000010905000000000000000000000000003c0002000c0002800000010000000000140001"], 0x50}}, 0x0) 6.570563053s ago: executing program 0 (id=748): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffed8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x400, 0x8d, r0, 0x0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000c70f424712cfe5e036ed02001811000000000000ff0527cd54658768773709bca5b4798df406a4fd96eb858bdb4573601cd4ba70f202075801c3c3db3286e385a3fcb5fa3e2389e4281ee0bda3128695d3ee330b55d59610ff29395626abea7c17237a63fff0b9eb87c9541bdbe603b83fdf7d14e980422ba9a01e647aca3b20d7eff730d1118f9fef875862978bf5dd76f47345982e25d90e3123a984ed623a6e527f0f1d5d75c67c50d23c9f7bcb598d8b303fb31818d30f6da1c62906d8dee413ea37d49d155a714306fd9f595eaf9bc96515a6adb1dcd8ac20ce600bce28dfa02625", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000005e000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x8}, 0x90) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000140), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18070000040000000000b757700ffe6acbdc00000000000026006200000000009500007b0000000095340600040000009500000000000000"], 0x0, 0x4, 0x91, &(0x7f0000000240)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xff12, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x8, 0x0, 0x0}}, 0x5) fcntl$getflags(0xffffffffffffffff, 0x0) gettid() ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000580)={0x0, 0x2, "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"}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) setpriority(0x1, 0x0, 0x0) 5.820447396s ago: executing program 2 (id=750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad30355", 0x1a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0xffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x2, 0xe000) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000002a00090000000000000000000400002c450011802f"], 0x5c}, 0x1, 0x3000000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002000)=ANY=[@ANYBLOB=',\x00\x00\x00 \x00\x00\x00\x00\x00~'], 0x2c}}, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x0, 0x19, 0x0, 0x260, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x260, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r5}, 0x20) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x200}, &(0x7f0000000100), 0x0) 5.617096634s ago: executing program 4 (id=751): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_unlink_enter\x00'}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x19980330}, 0x0) 5.575907334s ago: executing program 1 (id=752): creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2d2c5f7ff52ba616, &(0x7f00000000c0)=0x5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000300), 0x4, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x8000) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0xffffffc1, 0x0, 0x0, "c42e03373ea9b7bff836bfb1c95c39a59cedb5"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x2}]}]}, 0x38}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb00000000160000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040021000000000000004800020065636228636970686572"], 0x154}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = io_uring_setup(0x7dfc, &(0x7f0000000100)) close(r6) clock_nanosleep(0x2, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000070000006a0a90ff0000000027000000000010009500000000000000181000008639369f554288e121e7e1479594bd86279600e9d86b86badb115d770e9f9373d833487e40631725e39078674dbf4d5c4778d646d325e315751450f0256f7dab30be2630a78d6bc01c55b75ffbead8448a5be71b71e422c0", @ANYRES32], 0x0, 0x0, 0x95, &(0x7f0000000180)=""/149}, 0x90) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000002c0)={0x35}) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/time_for_children\x00') finit_module(r4, &(0x7f00000003c0)='{!-\x00\xcb\xb7\xb6\x1d6\xe6\x13\xf3\xf1\xef\x8d$\x1b\xf3\x82\xaeu\x96H\xedT\xbe\x98\xca\xa9E\x96J\xc9bWF-\xe3\xb5e\x83\x1b\xc2zX\xdb\xd5\xd0\'\xa1{U\xcc\xd4W$G\xae\xd7h\xca^\x97\xcc\x80\xfa\xbf.\xfc>\x10\xc6A*\xd5\x90aS>HU\xeb\xdf\x0f\xd9\x92#\x04N\xc5\x9a \xc1s\xa8\xfb\xaa\v)1\xb3yY\b\x91R\x01\xa9\x97\x13\n\xf3\xd4\x1eqUPC!\xe3k\xfd\xa8\x82*p\xec\x12>N\xa1\xf5\x0e\xa9\x8ck\xb5\xf6\xb2j\xa5C\xd7\xd1\x04\xab\xb9\x9f', 0x2) 4.555335173s ago: executing program 0 (id=753): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000004c0), 0x4) 4.48128352s ago: executing program 4 (id=754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000080000000200088b2f01"], 0xfdef) 4.309746264s ago: executing program 3 (id=755): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0xfffe}], 0x2}, 0x0) 4.277684052s ago: executing program 2 (id=756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=ANY=[@ANYBLOB="50010000", @ANYRES16=r5, @ANYBLOB="00010e8f03ee54c66fca40453aec28d3d8150121c86d136831354d237c5707ffa1c79bb102", @ANYRES32=r7, @ANYBLOB="040008010a00060008021100000100000400bf001a007e00ea38dbce22cf6a4aeffcfba484d624270aca4cdc5910000004012a006804010405008325400081ffffffffffff09000000ffffffffffff0200000005000000080211000000630f0000bd060802110000007107ffff0001009b083c040101b39b75040100ff0f05b40588070a47ef5a307e44158e53e81019c9121ec1e723966446b4aae51b4d72a43e0cdd0f6b9b86575728eca4329c6c138f8a6f27299b0273d9dcc3a4a788f3ce44d6e25092b5c32b5be4de2e45b01d2e57d0c71b4f61bd0ec39f05853e956bed913f2d96c69fc14e84ae659fc7ce8edad624a0a24667b70e1ff58238d1006a27ea416f07773b1866a20a4401457f8c026b7bce42ce2796b907978948df04bc862bf05f25254f51d77b2224f240307d3b37bb20eb"], 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05030800d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x6000000) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x3032344d, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x80}]}}) chdir(&(0x7f0000000140)='./file0\x00') r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r10, &(0x7f0000002780)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) close(r11) 4.274957642s ago: executing program 0 (id=757): syz_io_uring_setup(0xf3d, &(0x7f0000000480), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x23, 0x5, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) 4.116631413s ago: executing program 4 (id=758): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8dffffff, &(0x7f0000001a80)=[{&(0x7f0000000380)='g', 0xfffffdef}], 0xa, 0x0, 0x0, 0x5000000}, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0xfea7) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfa64}) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd002}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b31, 0x10000000000004) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettaction={0x30, 0x32, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0x20040004) 4.108958047s ago: executing program 3 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0) sendfile(r3, r3, 0x0, 0xcf9b) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) 3.05340332s ago: executing program 3 (id=760): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000380)=""/145, 0x91, &(0x7f0000000440)=""/132, 0x3}}, 0x48) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x3, 0x80000001, 0x9, 0x7ecc, 0x4, 0x4}) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0xce20, @empty}, 0x10) listen(r3, 0x3) listen(r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r4, 0x0, r6) ioperm(0x0, 0x87, 0x3ff) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2.895836239s ago: executing program 0 (id=761): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x1) 2.294594987s ago: executing program 4 (id=762): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0x21, 0x2, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000001800), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x28}}, 0x0) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000000", @ANYBLOB], 0x38}, 0x0) 2.286867627s ago: executing program 1 (id=763): open(&(0x7f0000000000)='./file0\x00', 0x8e040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="e3", 0x1, 0xfffffffffffffffd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000740)={@id, 0x40, r1, '\x00', @a}) 1.256936383s ago: executing program 4 (id=764): socket$nl_generic(0x10, 0x3, 0x10) brk(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-'], 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) truncate(&(0x7f0000000200)='./file1\x00', 0x8800000) 1.185376174s ago: executing program 3 (id=765): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f00000005c0)={0x0, 0x5}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x2f8, 0x1d8, 0x2f8, 0xffffffff, 0xffffffff, 0x108, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'sit0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@loopback, @mcast2, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"b1b2"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) openat$nullb(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x230, 0x230, 0x440, 0x0, 0x440, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @empty, [], [], 'veth1_to_bond\x00', 'ip6tnl0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "9b33"}}, @common=@icmp6={{0x28}, {0x0, "922b"}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@local}}}, {{@ipv6={@private0, @empty, [], [], 'ip6gre0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) chdir(0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) writev(r4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xc2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x9362, 0x0) r6 = fsopen(&(0x7f0000000080)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 1.112360465s ago: executing program 1 (id=766): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="e8eec36c5167c37884928146a76753cae9c3ebdf3e647ac3fafee805f392a332cc78c71a964c0cfbfb3748f990aa5ea6989d7f4c932b500f09ce22f23559dfea0b1742a7a238f6a6a65fcf83c906c6079cf25fa6cbbd5e1b7b656d0d53ba2bef0d0e940017fb68644ea714e5fe384d55dfc761cd2704c7e1d2d82bf3e84788105154eb8a3641a925cf2c207801", 0x8d}], 0x1}}], 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a', @ANYRES16=r2], 0xd) 942.501544ms ago: executing program 3 (id=767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad30355", 0x1a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0xffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x2, 0xe000) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000002a00090000000000000000000400002c450011802f"], 0x5c}, 0x1, 0x3000000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002000)=ANY=[@ANYBLOB=',\x00\x00\x00 \x00\x00\x00\x00\x00~'], 0x2c}}, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x0, 0x19, 0x0, 0x260, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x260, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r5}, 0x20) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x200}, &(0x7f0000000100), 0x0) 848.444124ms ago: executing program 1 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000080000000200088b2f01"], 0xfdef) 665.621361ms ago: executing program 2 (id=769): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001300290a00000000000000000700", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x1, 0x40) write$binfmt_script(r5, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x23, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) memfd_create(&(0x7f00000000c0)='/dev/fuse\x00', 0x7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) 155.332886ms ago: executing program 4 (id=770): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x92, &(0x7f0000000180)="888c6e59fe492e21545c45ab4c546b49458e0233fb5867f3a3ae86b012b47f2914d815f4dd0bdbf5b41c4d8edb96e1753df731cd5b60fa2ecfc831154057009068cc62b0707a6f8b40a71c021806f57c6a4777", &(0x7f0000000200)=""/146, 0x1f, 0x0, 0xd, 0xe0, &(0x7f00000002c0)="0f50ba7d7785106d9f48e1e510", &(0x7f0000000300)="7ddf022cbca39007d419f72b85113c9226b26e7c92e4c99b0ea6bff66edfbe5c1bf756d471f4793b401a93abe8fc8c74f2dc4582161a854f8316ef1953683662025ea5c94f4c4fc989eca47819e1cfc9790d4245fba52930e5290aae3d84a1079b246b16474e14da0526917f1184d5defe75ccc974a1e438a174d3b8a31700084d38a2999e411d22173072d8349a60d11a0be517e22f947d939b6ef3ae82493368e102bcb39bf39dedcf76fb46c4d476136c4a87303f9be09c212ece955d9c19d27558223d6741d2d4352a261c5e350f767b33dbc89f50802edc896559f28f05", 0x3, 0x0, 0xff}, 0x50) chdir(&(0x7f0000000040)='./file0\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) ftruncate(r5, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x4, 0xd6, 0x5, 0xa}, {0x3, 0xfe, 0x0, 0x8}, {0x1, 0x1, 0x6, 0x2}, {0xc, 0x0, 0x3, 0x3}, {0x4, 0x6, 0x9, 0x3ff}, {0x6, 0x0, 0x2b, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={r7, 0x2, 0x1}) fcntl$addseals(r6, 0x409, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000000)=0x1aa, 0x4) recvfrom$unix(r8, 0x0, 0x0, 0x161, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000140)={r7, 0x4, 0x8}) 79.570424ms ago: executing program 1 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 3 (id=772): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8dffffff, &(0x7f0000001a80)=[{&(0x7f0000000380)='g', 0xfffffdef}], 0xa, 0x0, 0x0, 0x5000000}, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0xfea7) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfa64}) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd002}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b31, 0x10000000000004) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettaction={0x30, 0x32, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0x20040004) kernel console output (not intermixed with test programs): 3481][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.349097][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.358750][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.366219][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.373600][ T5082] bridge_slave_0: entered allmulticast mode [ 70.380679][ T5082] bridge_slave_0: entered promiscuous mode [ 70.389122][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.396500][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.403823][ T5082] bridge_slave_1: entered allmulticast mode [ 70.410873][ T5082] bridge_slave_1: entered promiscuous mode [ 70.423264][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.436704][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.449343][ T5084] team0: Port device team_slave_0 added [ 70.523795][ T5084] team0: Port device team_slave_1 added [ 70.545257][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.552765][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.560141][ T5085] bridge_slave_0: entered allmulticast mode [ 70.568047][ T5085] bridge_slave_0: entered promiscuous mode [ 70.606761][ T5095] team0: Port device team_slave_0 added [ 70.617048][ T5095] team0: Port device team_slave_1 added [ 70.638018][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.645509][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.652981][ T5085] bridge_slave_1: entered allmulticast mode [ 70.660064][ T5085] bridge_slave_1: entered promiscuous mode [ 70.670945][ T5083] team0: Port device team_slave_0 added [ 70.680464][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.695177][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.758674][ T5083] team0: Port device team_slave_1 added [ 70.782816][ T5090] Bluetooth: hci1: command tx timeout [ 70.796678][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.804229][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.831038][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.844197][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.851206][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.877936][ T5090] Bluetooth: hci0: command tx timeout [ 70.883702][ T5096] Bluetooth: hci3: command tx timeout [ 70.889501][ T5096] Bluetooth: hci2: command tx timeout [ 70.889528][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.898132][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.913433][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.939428][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.950177][ T5096] Bluetooth: hci4: command tx timeout [ 70.961530][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.012690][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.019743][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.047037][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.071610][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.097103][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.104179][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.130674][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.146709][ T5082] team0: Port device team_slave_0 added [ 71.157012][ T5082] team0: Port device team_slave_1 added [ 71.188753][ T5085] team0: Port device team_slave_0 added [ 71.197989][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.205406][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.231539][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.303354][ T5085] team0: Port device team_slave_1 added [ 71.318219][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.325358][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.352561][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.384065][ T5084] hsr_slave_0: entered promiscuous mode [ 71.391013][ T5084] hsr_slave_1: entered promiscuous mode [ 71.428616][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.435661][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.462016][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.498240][ T5095] hsr_slave_0: entered promiscuous mode [ 71.506294][ T5095] hsr_slave_1: entered promiscuous mode [ 71.513377][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.521257][ T5095] Cannot create hsr debugfs directory [ 71.557226][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.567538][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.593985][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.607233][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.614399][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.641340][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.769202][ T5083] hsr_slave_0: entered promiscuous mode [ 71.776845][ T5083] hsr_slave_1: entered promiscuous mode [ 71.786516][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.794226][ T5083] Cannot create hsr debugfs directory [ 71.869707][ T5085] hsr_slave_0: entered promiscuous mode [ 71.876750][ T5085] hsr_slave_1: entered promiscuous mode [ 71.883770][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.891354][ T5085] Cannot create hsr debugfs directory [ 71.905916][ T5082] hsr_slave_0: entered promiscuous mode [ 71.915327][ T5082] hsr_slave_1: entered promiscuous mode [ 71.922260][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.929877][ T5082] Cannot create hsr debugfs directory [ 72.069983][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.076891][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.509162][ T5084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.542058][ T5084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.568034][ T5084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.599680][ T5084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.667834][ T5095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.692635][ T5095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.728217][ T5095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.745780][ T5095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.835351][ T5083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.850066][ T5083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.862634][ T5096] Bluetooth: hci1: command tx timeout [ 72.890868][ T5083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.921195][ T5083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.943974][ T5090] Bluetooth: hci0: command tx timeout [ 72.949413][ T5090] Bluetooth: hci3: command tx timeout [ 72.955732][ T5096] Bluetooth: hci2: command tx timeout [ 73.023676][ T5096] Bluetooth: hci4: command tx timeout [ 73.027806][ T5082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.078690][ T5082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.131301][ T5082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.156616][ T5085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.180691][ T5082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.205470][ T5085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.221538][ T5085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.253752][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.260697][ T5085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.358385][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.443235][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.450776][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.497768][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.505075][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.585327][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.616189][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.651190][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.679718][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.709474][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.741014][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.748177][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.804051][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.811168][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.828753][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.835934][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.849980][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.857313][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.887050][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.916842][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.924079][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.014774][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.022173][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.038609][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 74.038626][ T29] audit: type=1400 audit(1719434490.957:113): avc: denied { sys_module } for pid=5084 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.159190][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.236576][ T5083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.247174][ T5083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.328234][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.378699][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.411635][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.418909][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.508332][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.515674][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.739216][ T5085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.849249][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.938774][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.947674][ T5096] Bluetooth: hci1: command tx timeout [ 75.023429][ T5099] Bluetooth: hci0: command tx timeout [ 75.028968][ T5090] Bluetooth: hci3: command tx timeout [ 75.034486][ T5096] Bluetooth: hci2: command tx timeout [ 75.105651][ T5090] Bluetooth: hci4: command tx timeout [ 75.135182][ T5095] veth0_vlan: entered promiscuous mode [ 75.189646][ T5083] veth0_vlan: entered promiscuous mode [ 75.207274][ T5083] veth1_vlan: entered promiscuous mode [ 75.220497][ T5095] veth1_vlan: entered promiscuous mode [ 75.259428][ T5084] veth0_vlan: entered promiscuous mode [ 75.277936][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.318383][ T5084] veth1_vlan: entered promiscuous mode [ 75.357613][ T5095] veth0_macvtap: entered promiscuous mode [ 75.385826][ T5095] veth1_macvtap: entered promiscuous mode [ 75.408774][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.445679][ T5083] veth0_macvtap: entered promiscuous mode [ 75.487920][ T5083] veth1_macvtap: entered promiscuous mode [ 75.534815][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.555119][ T5082] veth0_vlan: entered promiscuous mode [ 75.563350][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.575098][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.588850][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.626690][ T5082] veth1_vlan: entered promiscuous mode [ 75.640096][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.658827][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.673018][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.684612][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.711356][ T5095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.720707][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.729826][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.738750][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755535][ T5085] veth0_vlan: entered promiscuous mode [ 75.764832][ T5084] veth0_macvtap: entered promiscuous mode [ 75.775262][ T5083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784201][ T5083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.793262][ T5083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.802693][ T5083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848736][ T5085] veth1_vlan: entered promiscuous mode [ 75.863319][ T5084] veth1_macvtap: entered promiscuous mode [ 75.914433][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.931630][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.942526][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.955540][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.969410][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.991459][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.003887][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.013801][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.024377][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.037558][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.061489][ T5084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.086770][ T5084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.100143][ T5084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.108963][ T5084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.137010][ T5082] veth0_macvtap: entered promiscuous mode [ 76.173740][ T5082] veth1_macvtap: entered promiscuous mode [ 76.271086][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.283921][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.295032][ T5085] veth0_macvtap: entered promiscuous mode [ 76.361374][ T5085] veth1_macvtap: entered promiscuous mode [ 76.385240][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.397287][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.409066][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.419898][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.430334][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.441000][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.453869][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.464184][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.485069][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.489585][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.506321][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.516600][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.527188][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.537048][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.548607][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.559848][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.576390][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.580228][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.601803][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.609281][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.609295][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.609310][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.609321][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.609334][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.609343][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.609356][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.611313][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.694296][ T5082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.704219][ T5082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.717877][ T5082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.726744][ T5082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.802169][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.813888][ T29] audit: type=1400 audit(1719434493.727:114): avc: denied { mounton } for pid=5083 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.831090][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.840854][ T29] audit: type=1400 audit(1719434493.737:115): avc: denied { mount } for pid=5083 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.854502][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.886552][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.896566][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.907357][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.917447][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.928638][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.946162][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.974987][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.987915][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.010279][ T5085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.021464][ T5085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.040269][ T5090] Bluetooth: hci1: command tx timeout [ 77.044088][ T29] audit: type=1400 audit(1719434493.957:116): avc: denied { read write } for pid=5083 comm="syz-executor" name="loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.049508][ T5085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.087889][ T5085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.102350][ T5090] Bluetooth: hci3: command tx timeout [ 77.107837][ T5090] Bluetooth: hci2: command tx timeout [ 77.113459][ T5096] Bluetooth: hci0: command tx timeout [ 77.134732][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.136855][ T29] audit: type=1400 audit(1719434493.997:117): avc: denied { open } for pid=5083 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.149444][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.182295][ T5090] Bluetooth: hci4: command tx timeout [ 77.202395][ T29] audit: type=1400 audit(1719434493.997:118): avc: denied { ioctl } for pid=5083 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.235164][ T29] audit: type=1400 audit(1719434494.107:119): avc: denied { create } for pid=5168 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.257899][ T29] audit: type=1400 audit(1719434494.107:120): avc: denied { map } for pid=5168 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.298719][ T29] audit: type=1400 audit(1719434494.107:121): avc: denied { read write } for pid=5168 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.326231][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.340396][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.637935][ T2417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.692538][ T2417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.490608][ T29] audit: type=1400 audit(1719434495.237:122): avc: denied { prog_load } for pid=5174 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.587302][ T2417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.655652][ T2417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.925422][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.938617][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.518581][ T5190] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 79.682522][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 79.682543][ T29] audit: type=1400 audit(1719434496.137:132): avc: denied { create } for pid=5178 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.841912][ T29] audit: type=1400 audit(1719434496.137:133): avc: denied { connect } for pid=5178 comm="syz.4.5" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.976047][ T29] audit: type=1400 audit(1719434496.137:134): avc: denied { write } for pid=5178 comm="syz.4.5" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.085019][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.126509][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.160594][ T29] audit: type=1400 audit(1719434496.717:135): avc: denied { mounton } for pid=5085 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.270380][ T29] audit: type=1400 audit(1719434497.157:136): avc: denied { setopt } for pid=5191 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.350395][ T29] audit: type=1400 audit(1719434497.167:137): avc: denied { ioctl } for pid=5191 comm="syz.2.8" path="socket:[7331]" dev="sockfs" ino=7331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.422906][ T29] audit: type=1400 audit(1719434497.167:138): avc: denied { write } for pid=5191 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.835393][ T29] audit: type=1400 audit(1719434498.757:139): avc: denied { create } for pid=5197 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.913195][ T29] audit: type=1400 audit(1719434498.797:140): avc: denied { read } for pid=5197 comm="syz.2.10" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.936397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.979823][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 82.313076][ T29] audit: type=1400 audit(1719434498.807:141): avc: denied { open } for pid=5197 comm="syz.2.10" path="/dev/iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.024153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.064414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 83.096008][ T5205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.335798][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.375764][ T5208] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 83.424353][ T5208] erspan1: entered promiscuous mode [ 83.441806][ T5208] erspan1: entered allmulticast mode [ 83.470512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.480581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.605112][ T5217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.413025][ T5223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.742663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.812217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.413144][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 85.413162][ T29] audit: type=1400 audit(1719434502.337:169): avc: denied { bind } for pid=5210 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.642161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.802477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.861068][ T29] audit: type=1400 audit(1719434502.777:170): avc: denied { create } for pid=5241 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.030292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.194568][ T29] audit: type=1400 audit(1719434502.827:171): avc: denied { setopt } for pid=5241 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.087211][ T5090] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 88.096595][ T5090] Bluetooth: hci1: Injecting HCI hardware error event [ 88.280209][ T785] cfg80211: failed to load regulatory.db [ 88.293750][ T5090] Bluetooth: hci1: hardware error 0x00 [ 88.450174][ T29] audit: type=1400 audit(1719434502.827:172): avc: denied { bind } for pid=5241 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.542759][ T5099] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 88.553057][ T5099] Bluetooth: hci3: Injecting HCI hardware error event [ 88.561356][ T5099] Bluetooth: hci3: hardware error 0x00 [ 88.618120][ T29] audit: type=1400 audit(1719434502.827:173): avc: denied { name_bind } for pid=5241 comm="syz.1.25" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.738127][ T29] audit: type=1400 audit(1719434502.827:174): avc: denied { node_bind } for pid=5241 comm="syz.1.25" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 88.981286][ T29] audit: type=1800 audit(1719434502.837:175): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.22" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 89.028447][ T29] audit: type=1400 audit(1719434502.897:176): avc: denied { write } for pid=5241 comm="syz.1.25" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.803095][ T29] audit: type=1400 audit(1719434502.897:177): avc: denied { connect } for pid=5241 comm="syz.1.25" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.824847][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.940779][ T29] audit: type=1400 audit(1719434502.897:178): avc: denied { name_connect } for pid=5241 comm="syz.1.25" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.154183][ T5272] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.236400][ T5275] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure [ 90.626330][ T5099] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 90.827677][ T5090] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 91.785892][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 91.785907][ T29] audit: type=1326 audit(1719434508.707:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602e375ae9 code=0x7fc00000 [ 92.010215][ T29] audit: type=1400 audit(1719434508.927:195): avc: denied { read write } for pid=5282 comm="syz.0.32" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.010260][ T29] audit: type=1400 audit(1719434508.927:196): avc: denied { open } for pid=5282 comm="syz.0.32" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.012390][ T29] audit: type=1400 audit(1719434508.937:197): avc: denied { write } for pid=5282 comm="syz.0.32" name="tcp" dev="proc" ino=4026533296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 92.105863][ T29] audit: type=1400 audit(1719434509.027:198): avc: denied { setopt } for pid=5282 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.106856][ T29] audit: type=1400 audit(1719434509.027:199): avc: denied { block_suspend } for pid=5282 comm="syz.0.32" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.149458][ T29] audit: type=1400 audit(1719434509.067:200): avc: denied { read } for pid=5282 comm="syz.0.32" path="socket:[7075]" dev="sockfs" ino=7075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.032854][ T5312] Zero length message leads to an empty skb [ 93.065402][ T29] audit: type=1400 audit(1719434509.987:201): avc: denied { unmount } for pid=5083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.191554][ T5315] netlink: 696 bytes leftover after parsing attributes in process `syz.4.42'. [ 93.202610][ T29] audit: type=1400 audit(1719434510.107:202): avc: denied { write } for pid=5314 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.291447][ T29] audit: type=1400 audit(1719434510.207:203): avc: denied { write } for pid=5317 comm="syz.0.41" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.330717][ T5319] vhci_hcd: invalid port number 0 [ 93.635735][ T5331] 9pnet_fd: Insufficient options for proto=fd [ 93.821619][ T5332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 94.150834][ T5339] netlink: 277 bytes leftover after parsing attributes in process `syz.0.48'. [ 95.226757][ T5343] mmap: syz.0.49 (5343) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.439682][ T5360] netlink: 696 bytes leftover after parsing attributes in process `syz.2.56'. [ 95.713478][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 95.933689][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 96.065931][ T5090] Bluetooth: hci0: command 0x080f tx timeout [ 96.632679][ T5382] 9pnet_fd: Insufficient options for proto=fd [ 97.119220][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 97.119237][ T29] audit: type=1326 audit(1719434514.037:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x7fc00000 [ 97.983108][ T29] audit: type=1804 audit(1719434514.897:218): pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.70" name="/root/syzkaller.OXk4lo/12/file0" dev="sda1" ino=1970 res=1 errno=0 [ 98.966576][ T29] audit: type=1804 audit(1719434515.887:219): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.70" name="/root/syzkaller.OXk4lo/12/file0" dev="sda1" ino=1970 res=1 errno=0 [ 98.977797][ T5408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.70'. [ 99.015819][ T5408] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 99.180297][ T29] audit: type=1400 audit(1719434516.097:220): avc: denied { create } for pid=5410 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.268744][ T29] audit: type=1400 audit(1719434516.137:221): avc: denied { setopt } for pid=5410 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.366818][ T29] audit: type=1400 audit(1719434516.227:222): avc: denied { bind } for pid=5409 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.516059][ T29] audit: type=1326 audit(1719434516.227:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.4.72" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x0 [ 99.626473][ T29] audit: type=1400 audit(1719434516.547:224): avc: denied { read } for pid=5409 comm="syz.4.72" path="socket:[8310]" dev="sockfs" ino=8310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.223910][ T29] audit: type=1400 audit(1719434517.067:225): avc: denied { create } for pid=5423 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.801986][ T29] audit: type=1400 audit(1719434517.107:226): avc: denied { getopt } for pid=5423 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.330480][ T5434] sysfs: cannot create duplicate filename '/class/ieee80211/!U' [ 101.544631][ T5434] CPU: 0 PID: 5434 Comm: syz.3.79 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 101.554630][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 101.564719][ T5434] Call Trace: [ 101.567990][ T5434] [ 101.570926][ T5434] dump_stack_lvl+0x16c/0x1f0 [ 101.575644][ T5434] sysfs_warn_dup+0x7f/0xa0 [ 101.580175][ T5434] sysfs_do_create_link_sd+0x124/0x140 [ 101.585666][ T5434] sysfs_create_link+0x61/0xc0 [ 101.590661][ T5434] device_add+0x62e/0x1a70 [ 101.595107][ T5434] ? __pfx_device_add+0x10/0x10 [ 101.600019][ T5434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.605924][ T5434] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 101.612006][ T5434] wiphy_register+0x2101/0x2d00 [ 101.616879][ T5434] ? __pfx_wiphy_register+0x10/0x10 [ 101.622077][ T5434] ieee80211_register_hw+0x2683/0x43b0 [ 101.627600][ T5434] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 101.633462][ T5434] ? lockdep_init_map_type+0x16d/0x7d0 [ 101.638970][ T5434] ? __asan_memset+0x23/0x50 [ 101.643604][ T5434] ? __hrtimer_init+0x106/0x2c0 [ 101.648493][ T5434] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 101.654279][ T5434] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 101.660432][ T5434] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 101.665771][ T5434] ? __asan_memcpy+0x3c/0x60 [ 101.670486][ T5434] hwsim_new_radio_nl+0xaf9/0x1240 [ 101.675727][ T5434] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 101.681313][ T5434] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 101.688744][ T5434] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 101.696175][ T5434] genl_family_rcv_msg_doit+0x202/0x2f0 [ 101.701766][ T5434] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 101.708050][ T5434] ? ns_capable+0xd7/0x110 [ 101.712585][ T5434] genl_rcv_msg+0x565/0x800 [ 101.717126][ T5434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.722196][ T5434] ? __pfx___lock_acquire+0x10/0x10 [ 101.727441][ T5434] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 101.733029][ T5434] netlink_rcv_skb+0x16b/0x440 [ 101.737825][ T5434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.742971][ T5434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.748293][ T5434] ? down_read+0xc9/0x330 [ 101.752658][ T5434] ? __pfx_down_read+0x10/0x10 [ 101.757458][ T5434] ? netlink_deliver_tap+0x1ae/0xd90 [ 101.762952][ T5434] genl_rcv+0x28/0x40 [ 101.767055][ T5434] netlink_unicast+0x542/0x820 [ 101.771853][ T5434] ? __pfx_netlink_unicast+0x10/0x10 [ 101.777174][ T5434] netlink_sendmsg+0x8b8/0xd70 [ 101.781975][ T5434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.787395][ T5434] ? __import_iovec+0x1fd/0x6e0 [ 101.792280][ T5434] ____sys_sendmsg+0xab5/0xc90 [ 101.797071][ T5434] ? copy_msghdr_from_user+0x10b/0x160 [ 101.802785][ T5434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.808105][ T5434] ? __pfx___lock_acquire+0x10/0x10 [ 101.813355][ T5434] ? try_to_wake_up+0xc08/0x13e0 [ 101.818368][ T5434] ___sys_sendmsg+0x135/0x1e0 [ 101.823092][ T5434] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.828388][ T5434] ? __pfx_futex_wake+0x10/0x10 [ 101.833386][ T5434] ? __fget_light+0x173/0x210 [ 101.838116][ T5434] __sys_sendmsg+0x117/0x1f0 [ 101.842837][ T5434] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.848005][ T5434] ? __x64_sys_futex+0x1e1/0x4c0 [ 101.853033][ T5434] do_syscall_64+0xcd/0x250 [ 101.857686][ T5434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.863633][ T5434] RIP: 0033:0x7f602e375ae9 [ 101.868088][ T5434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.887733][ T5434] RSP: 002b:00007f602f089048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.896183][ T5434] RAX: ffffffffffffffda RBX: 00007f602e503fa0 RCX: 00007f602e375ae9 [ 101.904251][ T5434] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 101.912353][ T5434] RBP: 00007f602e3f6746 R08: 0000000000000000 R09: 0000000000000000 [ 101.920711][ T5434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.928722][ T5434] R13: 000000000000000b R14: 00007f602e503fa0 R15: 00007ffe1d375a28 [ 101.937704][ T5434] [ 103.212863][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 103.212880][ T29] audit: type=1804 audit(1719434520.137:229): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.83" name="/root/syzkaller.Blf3me/13/file0" dev="sda1" ino=1971 res=1 errno=0 [ 103.242189][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.550168][ T5453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.83'. [ 103.562320][ T29] audit: type=1400 audit(1719434520.137:230): avc: denied { bind } for pid=5446 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.572717][ T5453] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 104.437684][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 104.494411][ T29] audit: type=1804 audit(1719434520.467:231): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.83" name="/root/syzkaller.Blf3me/13/file0" dev="sda1" ino=1971 res=1 errno=0 [ 104.658744][ T29] audit: type=1804 audit(1719434521.447:232): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.85" name="/root/syzkaller.OXk4lo/19/bus" dev="sda1" ino=1949 res=1 errno=0 [ 105.298343][ T29] audit: type=1400 audit(1719434522.167:233): avc: denied { create } for pid=5462 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.535963][ T29] audit: type=1400 audit(1719434522.177:234): avc: denied { write } for pid=5462 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.843392][ T29] audit: type=1400 audit(1719434522.177:235): avc: denied { nlmsg_read } for pid=5462 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.961625][ T29] audit: type=1400 audit(1719434522.187:236): avc: denied { read } for pid=5462 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 106.128009][ T29] audit: type=1400 audit(1719434522.967:237): avc: denied { accept } for pid=5476 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.217156][ T29] audit: type=1400 audit(1719434522.987:238): avc: denied { read } for pid=5476 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.462580][ T5482] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 106.699314][ T5496] mmap: syz.0.97 (5496): VmData 54239232 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 107.761630][ T5521] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 108.800144][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 108.800161][ T29] audit: type=1400 audit(1719434525.717:259): avc: denied { write } for pid=5502 comm="syz.3.102" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.911542][ T5528] debugfs: Directory '!U' with parent 'ieee80211' already present! [ 108.961714][ T29] audit: type=1400 audit(1719434525.877:260): avc: denied { name_bind } for pid=5529 comm="syz.1.111" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.943090][ T5090] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 112.952215][ T5090] Bluetooth: hci4: Injecting HCI hardware error event [ 112.967517][ T5099] Bluetooth: hci4: hardware error 0x00 [ 113.205124][ T785] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.650496][ T785] usb 5-1: Using ep0 maxpacket: 8 [ 113.692726][ T785] usb 5-1: config 32 has an invalid interface number: 77 but max is 1 [ 113.740725][ T785] usb 5-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 113.804526][ T785] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 114.383241][ T785] usb 5-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 114.396417][ T785] usb 5-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 114.407313][ T785] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 114.416697][ T785] usb 5-1: config 32 has no interface number 0 [ 114.423437][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 114.435003][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 114.446640][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 114.517556][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 114.606237][ T785] usb 5-1: config 32 interface 77 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 114.668969][ T785] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 114.754967][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 114.799620][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 114.854430][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 114.872662][ T5580] 9pnet_fd: Insufficient options for proto=fd [ 114.882235][ T785] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 114.902492][ T785] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 114.929950][ T785] usb 5-1: config 32 interface 77 has no altsetting 0 [ 114.951022][ T785] usb 5-1: Dual-Role OTG device on HNP port [ 114.965209][ T785] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 115.011619][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.037158][ T785] usb 5-1: Product: syz [ 115.041484][ T785] usb 5-1: Manufacturer: syz [ 115.075791][ T785] usb 5-1: SerialNumber: syz [ 115.102068][ T5099] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 115.757201][ T785] option 5-1:32.77: GSM modem (1-port) converter detected [ 115.884339][ T785] usb 5-1: USB disconnect, device number 2 [ 115.945208][ T785] option 5-1:32.77: device disconnected [ 116.186763][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 116.568840][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 118.942044][ T29] audit: type=1800 audit(1719434535.857:261): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.143" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 119.102088][ T29] audit: type=1400 audit(1719434536.017:262): avc: denied { write } for pid=5623 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.650633][ T5642] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.717713][ T29] audit: type=1400 audit(1719434536.637:263): avc: denied { create } for pid=5619 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.835608][ T29] audit: type=1400 audit(1719434536.697:264): avc: denied { setopt } for pid=5619 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.937878][ T29] audit: type=1326 audit(1719434536.797:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.4.148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x0 [ 120.916997][ T29] audit: type=1400 audit(1719434537.837:266): avc: denied { ioctl } for pid=5657 comm="syz.0.152" path="socket:[8958]" dev="sockfs" ino=8958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.052292][ T29] audit: type=1400 audit(1719434537.927:267): avc: denied { create } for pid=5657 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.466369][ T29] audit: type=1800 audit(1719434538.387:268): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.155" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 121.724746][ T29] audit: type=1400 audit(1719434538.647:269): avc: denied { read } for pid=5665 comm="syz.0.156" path="socket:[8170]" dev="sockfs" ino=8170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.470817][ T29] audit: type=1400 audit(1719434541.387:270): avc: denied { read } for pid=5693 comm="syz.3.165" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.583526][ T29] audit: type=1400 audit(1719434541.387:271): avc: denied { open } for pid=5693 comm="syz.3.165" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.706962][ T5710] syz.1.169 uses obsolete (PF_INET,SOCK_PACKET) [ 124.715047][ T29] audit: type=1400 audit(1719434541.617:272): avc: denied { bind } for pid=5707 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.761883][ T29] audit: type=1326 audit(1719434541.617:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.2.167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 124.835245][ T29] audit: type=1400 audit(1719434541.757:274): avc: denied { sys_module } for pid=5707 comm="syz.1.169" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 125.720220][ T29] audit: type=1804 audit(1719434542.637:275): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.175" name="/root/syzkaller.vKewel/32/bus" dev="sda1" ino=1951 res=1 errno=0 [ 127.149659][ T5760] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 127.498259][ T29] audit: type=1400 audit(1719434544.417:276): avc: denied { ioctl } for pid=5765 comm="syz.0.190" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.498772][ T5767] binder: 5765:5767 ioctl ae41 0 returned -22 [ 127.985805][ T5780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 128.632649][ T5135] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.396638][ T5135] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 129.436773][ T5135] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 129.450541][ T5135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.461197][ T5135] usb 3-1: config 0 has no interface number 0 [ 129.468637][ T5135] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.480326][ T5135] usb 3-1: config 0 interface 49 has no altsetting 0 [ 129.493223][ T5135] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 129.514462][ T5135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.526966][ T5135] usb 3-1: config 0 has no interface number 0 [ 129.533861][ T5135] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.546376][ T5135] usb 3-1: config 0 interface 49 has no altsetting 0 [ 129.576438][ T5135] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 129.591824][ T5135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.626111][ T5135] usb 3-1: config 0 has no interface number 0 [ 129.665295][ T5135] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.710597][ T5135] usb 3-1: config 0 interface 49 has no altsetting 0 [ 129.743536][ T5805] binder: 5804:5805 ioctl ae41 0 returned -22 [ 129.775587][ T5135] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 129.831097][ T5135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.860796][ T5135] usb 3-1: config 0 has no interface number 0 [ 129.877322][ T5135] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.894419][ T5135] usb 3-1: config 0 interface 49 has no altsetting 0 [ 130.057745][ T5807] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 130.196087][ T5135] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 130.220151][ T5135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.258710][ T5135] usb 3-1: config 0 has no interface number 0 [ 130.277360][ T5135] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.305600][ T5135] usb 3-1: config 0 interface 49 has no altsetting 0 [ 130.448762][ T5135] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 130.476700][ T5135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.496134][ T5135] usb 3-1: config 0 has no interface number 0 [ 130.511974][ T5135] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.199297][ T5135] usb 3-1: config 0 interface 49 has no altsetting 0 [ 131.244203][ T5135] usb 3-1: unable to read config index 6 descriptor/start: -71 [ 131.271868][ T5135] usb 3-1: can't read configurations, error -71 [ 131.376290][ T29] audit: type=1400 audit(1719434548.287:277): avc: denied { ioctl } for pid=5825 comm="syz.2.208" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 131.401075][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.018313][ T29] audit: type=1326 audit(1719434549.937:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5836 comm="syz.3.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602e375ae9 code=0x0 [ 133.099694][ T5848] binder: 5847:5848 ioctl ae41 0 returned -22 [ 133.141818][ T29] audit: type=1326 audit(1719434550.017:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.2.212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 133.627100][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.644073][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.241952][ T29] audit: type=1400 audit(1719434551.147:280): avc: denied { map } for pid=5862 comm="syz.0.218" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 134.341888][ T29] audit: type=1400 audit(1719434551.207:281): avc: denied { setopt } for pid=5862 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.524110][ T5883] syz.2.220 (pid 5883) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 136.643586][ T29] audit: type=1400 audit(1719434553.567:282): avc: denied { ioctl } for pid=5885 comm="syz.0.225" path="socket:[10468]" dev="sockfs" ino=10468 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.668343][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.882568][ T5887] UBIFS error (pid: 5887): cannot open "./file0", error -22 [ 138.372812][ T29] audit: type=1326 audit(1719434555.297:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.0.231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc975ae9 code=0x0 [ 139.083134][ T29] audit: type=1400 audit(1719434555.817:284): avc: denied { create } for pid=5910 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.910549][ T5916] warning: `syz.1.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.100973][ T5924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.108759][ T5924] IPv6: NLM_F_CREATE should be set when creating new route [ 140.188846][ T5922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.047211][ T29] audit: type=1804 audit(1719434560.967:285): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.245" name="/root/syzkaller.GFKcMG/43/bus" dev="sda1" ino=1949 res=1 errno=0 [ 145.328011][ T29] audit: type=1804 audit(1719434562.247:286): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.248" name="/root/syzkaller.Blf3me/57/file0" dev="sda1" ino=1952 res=1 errno=0 [ 145.470281][ T29] audit: type=1326 audit(1719434562.377:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 145.789770][ T5967] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 146.134020][ T5969] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 146.225539][ T5969] syz.4.252 (5969) used greatest stack depth: 21296 bytes left [ 148.275644][ T5975] sctp: [Deprecated]: syz.4.254 (pid 5975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.275644][ T5975] Use struct sctp_sack_info instead [ 149.444120][ T6001] binder: 5999:6001 ioctl ae41 0 returned -22 [ 149.606724][ T6001] hub 9-0:1.0: USB hub found [ 149.612353][ T6001] hub 9-0:1.0: 8 ports detected [ 150.018426][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.105611][ T29] audit: type=1400 audit(1719434567.017:288): avc: denied { unlink } for pid=6009 comm="syz.1.266" name="#1" dev="sda1" ino=1979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 151.101907][ T29] audit: type=1400 audit(1719434568.017:289): avc: denied { mount } for pid=6009 comm="syz.1.266" name="/" dev="overlay" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 151.212283][ T29] audit: type=1400 audit(1719434568.097:290): avc: denied { unmount } for pid=5083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.480965][ T29] audit: type=1400 audit(1719434569.397:291): avc: denied { ioctl } for pid=6032 comm="syz.2.274" path="/dev/uinput" dev="devtmpfs" ino=836 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.816411][ T6034] random: crng reseeded on system resumption [ 153.131939][ T29] audit: type=1400 audit(1719434569.737:292): avc: denied { read append } for pid=6030 comm="syz.3.273" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.197370][ T29] audit: type=1400 audit(1719434569.737:293): avc: denied { ioctl open } for pid=6030 comm="syz.3.273" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.266744][ T6039] binder: 6037:6039 ioctl ae41 0 returned -22 [ 153.438037][ T6039] hub 9-0:1.0: USB hub found [ 153.444611][ T6039] hub 9-0:1.0: 8 ports detected [ 153.560023][ T6043] debugfs: Directory '!U' with parent 'ieee80211' already present! [ 154.149531][ T29] audit: type=1400 audit(1719434571.067:294): avc: denied { read } for pid=6052 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.261248][ T6057] Bluetooth: MGMT ver 1.22 [ 154.282437][ T6057] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 154.306204][ T5099] Bluetooth: hci2: link tx timeout [ 154.312799][ T5099] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.324706][ T5099] Bluetooth: hci2: link tx timeout [ 154.330876][ T5099] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.339141][ T5099] Bluetooth: hci2: link tx timeout [ 154.344468][ T5099] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.355079][ T5099] Bluetooth: hci2: link tx timeout [ 154.360418][ T5099] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.887272][ T29] audit: type=1400 audit(1719434572.807:295): avc: denied { read } for pid=6072 comm="syz.3.286" path="socket:[10683]" dev="sockfs" ino=10683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.948744][ T29] audit: type=1400 audit(1719434572.867:296): avc: denied { read } for pid=6080 comm="syz.2.288" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.051875][ T29] audit: type=1400 audit(1719434572.867:297): avc: denied { open } for pid=6080 comm="syz.2.288" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.145296][ T29] audit: type=1400 audit(1719434572.867:298): avc: denied { shutdown } for pid=6080 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.270895][ T29] audit: type=1800 audit(1719434573.187:299): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.292" name="file0" dev="sda1" ino=1972 res=0 errno=0 [ 156.384955][ T5099] Bluetooth: hci2: command 0x0406 tx timeout [ 157.936824][ T5099] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 158.836772][ T5099] Bluetooth: hci2: Injecting HCI hardware error event [ 161.283010][ T29] audit: type=1326 audit(1719434578.197:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6085 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602e375ae9 code=0x7fc00000 [ 161.595380][ T5090] Bluetooth: hci2: hardware error 0x00 [ 161.873616][ T29] audit: type=1400 audit(1719434578.787:301): avc: denied { ioctl } for pid=6102 comm="syz.2.298" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10741 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.619104][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 163.762229][ T5090] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 166.169596][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 166.234521][ T29] audit: type=1326 audit(1719434583.157:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6130 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602e375ae9 code=0x7fc00000 [ 166.436433][ T6139] UBIFS error (pid: 6139): cannot open "./file0", error -22 [ 166.479121][ T6144] sctp: [Deprecated]: syz.0.307 (pid 6144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.479121][ T6144] Use struct sctp_sack_info instead [ 167.627007][ T29] audit: type=1400 audit(1719434584.537:303): avc: denied { create } for pid=6132 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.793220][ T29] audit: type=1400 audit(1719434584.547:304): avc: denied { bind } for pid=6132 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.822825][ T29] audit: type=1400 audit(1719434584.547:305): avc: denied { write } for pid=6132 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.493492][ T29] audit: type=1400 audit(1719434585.417:306): avc: denied { connect } for pid=6167 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.705165][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 173.901902][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 174.284935][ T29] audit: type=1326 audit(1719434591.197:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.4.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x0 [ 174.411627][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 174.424839][ T6226] sit0: entered allmulticast mode [ 175.013335][ T6226] sit0: entered promiscuous mode [ 176.525517][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 176.990668][ T29] audit: type=1400 audit(1719434593.847:308): avc: denied { mount } for pid=6247 comm="syz.0.348" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 178.351464][ T29] audit: type=1800 audit(1719434595.267:309): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.360" name="file0" dev="sda1" ino=1967 res=0 errno=0 [ 178.606415][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.360'. [ 178.710154][ T29] audit: type=1400 audit(1719434595.627:310): avc: denied { read write } for pid=6282 comm="syz.2.362" name="video0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 178.827251][ T29] audit: type=1400 audit(1719434595.657:311): avc: denied { open } for pid=6282 comm="syz.2.362" path="/dev/video0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 178.912530][ T6305] overlay: ./file0 is not a directory [ 178.951955][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 179.139903][ T25] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 179.162863][ T25] usb 2-1: config 0 has an invalid interface number: 49 but max is 8 [ 179.176386][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.186578][ T25] usb 2-1: config 0 has no interface number 0 [ 179.200075][ T25] usb 2-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.220054][ T25] usb 2-1: config 0 interface 49 has no altsetting 0 [ 179.228494][ T25] usb 2-1: config 0 has an invalid interface number: 49 but max is 8 [ 179.248418][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.274860][ T25] usb 2-1: config 0 has no interface number 0 [ 179.316622][ T25] usb 2-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.359380][ T25] usb 2-1: config 0 interface 49 has no altsetting 0 [ 179.392468][ T25] usb 2-1: config 0 has an invalid interface number: 49 but max is 8 [ 179.427517][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.457279][ T25] usb 2-1: config 0 has no interface number 0 [ 179.475105][ T25] usb 2-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.506581][ T25] usb 2-1: config 0 interface 49 has no altsetting 0 [ 179.516297][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 179.528504][ T25] usb 2-1: config 0 has an invalid interface number: 49 but max is 8 [ 179.539849][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.591237][ T25] usb 2-1: config 0 has no interface number 0 [ 179.740077][ T25] usb 2-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.751400][ T25] usb 2-1: config 0 interface 49 has no altsetting 0 [ 179.763030][ T25] usb 2-1: config 0 has an invalid interface number: 49 but max is 8 [ 179.771575][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.780683][ T25] usb 2-1: config 0 has no interface number 0 [ 179.798547][ T25] usb 2-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.852627][ T25] usb 2-1: config 0 interface 49 has no altsetting 0 [ 180.020331][ T25] usb 2-1: config 0 has an invalid interface number: 49 but max is 8 [ 180.046062][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.096869][ T25] usb 2-1: config 0 has no interface number 0 [ 181.103561][ T25] usb 2-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.183037][ T25] usb 2-1: config 0 interface 49 has no altsetting 0 [ 181.262676][ T25] usb 2-1: unable to read config index 6 descriptor/start: -71 [ 181.302297][ T25] usb 2-1: can't read configurations, error -71 [ 181.322345][ T6325] sctp: [Deprecated]: syz.4.374 (pid 6325) Use of int in maxseg socket option. [ 181.322345][ T6325] Use struct sctp_assoc_value instead [ 182.898423][ T6334] sched: RT throttling activated [ 186.650339][ T29] audit: type=1326 audit(1719434603.567:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 187.775158][ T6367] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [SP.]L3 index 0 [ 188.101111][ T29] audit: type=1400 audit(1719434605.017:313): avc: denied { read } for pid=6370 comm="syz.3.389" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.861855][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 194.149837][ T45] usb 2-1: device descriptor read/all, error -71 [ 194.369745][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 194.952500][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.959130][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.653618][ T29] audit: type=1800 audit(1719434612.577:314): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.392" name="file1" dev="sda1" ino=1962 res=0 errno=0 [ 195.972526][ T786] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 196.072036][ T5090] Bluetooth: hci0: command 0x080f tx timeout [ 196.201788][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 196.219927][ T786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.270175][ T786] usb 4-1: language id specifier not provided by device, defaulting to English [ 196.352504][ T786] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 196.381935][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.435642][ T786] usb 4-1: Product: syz [ 196.439979][ T786] usb 4-1: Manufacturer: 㓊첥눂㺷ᅯ⫦⮴儑끷눙 [ 196.491729][ T786] usb 4-1: SerialNumber: syz [ 196.534745][ T29] audit: type=1400 audit(1719434613.457:315): avc: denied { unmount } for pid=5084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 196.589670][ T786] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 196.674688][ T6407] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [SP.]L3 index 0 [ 196.805346][ T786] usb 4-1: USB disconnect, device number 2 [ 198.179992][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.198301][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.220612][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.243533][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.252611][ T5099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 198.261528][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.306466][ T29] audit: type=1400 audit(1719434615.227:316): avc: denied { mounton } for pid=6428 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 198.394881][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 198.634495][ T786] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 198.718866][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 198.725914][ T2870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.745689][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.764436][ T786] usb 3-1: config 0 has no interface number 0 [ 198.770623][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.783238][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 198.795640][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 198.810067][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.850094][ T786] usb 3-1: config 0 has no interface number 0 [ 198.876840][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.905838][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 198.926458][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 198.943173][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.966475][ T786] usb 3-1: config 0 has no interface number 0 [ 199.009578][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.048677][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 199.072714][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 199.090615][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.145459][ T2870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.168081][ T786] usb 3-1: config 0 has no interface number 0 [ 199.191091][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.240338][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 199.278336][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 199.293968][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.304628][ T786] usb 3-1: config 0 has no interface number 0 [ 199.314361][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.333288][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 199.345067][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 199.363307][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.372777][ T786] usb 3-1: config 0 has no interface number 0 [ 199.378942][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.392751][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 199.403651][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 199.411296][ T2870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.422452][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.422517][ T786] usb 3-1: config 0 has no interface number 0 [ 199.422572][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.422606][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 199.457914][ T786] usb 3-1: config 0 has an invalid interface number: 49 but max is 8 [ 199.473568][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.524471][ T786] usb 3-1: config 0 has no interface number 0 [ 199.571352][ T786] usb 3-1: config 0 interface 49 altsetting 87 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.622648][ T786] usb 3-1: config 0 interface 49 has no altsetting 0 [ 199.640801][ T786] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 199.670994][ T786] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 199.703856][ T29] audit: type=1400 audit(1719434616.627:317): avc: denied { create } for pid=6446 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 199.707473][ T786] usb 3-1: Product: syz [ 199.728872][ T786] usb 3-1: Manufacturer: syz [ 199.738014][ T786] usb 3-1: SerialNumber: syz [ 199.827470][ T786] usb 3-1: config 0 descriptor?? [ 199.927370][ T2870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.942624][ T786] yurex 3-1:0.49: USB YUREX device now attached to Yurex #0 [ 200.032976][ T786] usb 3-1: USB disconnect, device number 4 [ 200.220416][ T6454] random: crng reseeded on system resumption [ 200.334003][ T5090] Bluetooth: hci5: command tx timeout [ 200.352067][ T786] yurex 3-1:0.49: USB YUREX #0 now disconnected [ 201.140846][ T6428] chnl_net:caif_netlink_parms(): no params data found [ 201.445244][ T2870] bridge_slave_1: left allmulticast mode [ 201.451297][ T2870] bridge_slave_1: left promiscuous mode [ 201.482389][ T2870] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.560638][ T6473] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.417'. [ 201.578165][ T2870] bridge_slave_0: left allmulticast mode [ 201.597684][ T2870] bridge_slave_0: left promiscuous mode [ 201.610562][ T6473] openvswitch: netlink: Flow key attribute not present in set flow. [ 201.624249][ T2870] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.771164][ T29] audit: type=1800 audit(1719434618.687:318): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.416" name="file1" dev="sda1" ino=1973 res=0 errno=0 [ 202.072612][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.301801][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 202.332757][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.382027][ T5090] Bluetooth: hci5: command tx timeout [ 202.440781][ T45] usb 2-1: language id specifier not provided by device, defaulting to English [ 202.484640][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 202.511752][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.519802][ T45] usb 2-1: Product: syz [ 202.573229][ T45] usb 2-1: Manufacturer: 㓊첥눂㺷ᅯ⫦⮴儑끷눙 [ 202.580512][ T45] usb 2-1: SerialNumber: syz [ 202.634478][ T45] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 204.461973][ T5090] Bluetooth: hci5: command tx timeout [ 204.655357][ T2870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.752039][ T2870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.827686][ T2870] bond0 (unregistering): Released all slaves [ 205.292422][ T5179] usb 2-1: USB disconnect, device number 6 [ 205.404531][ T29] audit: type=1400 audit(1719434622.287:319): avc: denied { search } for pid=4750 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.775604][ T29] audit: type=1804 audit(1719434622.697:320): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.426" name="/root/syzkaller.dLilON/93/bus" dev="sda1" ino=1967 res=1 errno=0 [ 206.496614][ T29] audit: type=1400 audit(1719434623.417:321): avc: denied { read } for pid=6512 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.551503][ T5090] Bluetooth: hci5: command tx timeout [ 206.645762][ T29] audit: type=1400 audit(1719434623.447:322): avc: denied { open } for pid=6512 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.760185][ T29] audit: type=1400 audit(1719434623.447:323): avc: denied { getattr } for pid=6512 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.860060][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.880778][ T29] audit: type=1400 audit(1719434623.797:324): avc: denied { getopt } for pid=6516 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.909363][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.925206][ T6428] bridge_slave_0: entered allmulticast mode [ 206.946094][ T6428] bridge_slave_0: entered promiscuous mode [ 206.954159][ T29] audit: type=1400 audit(1719434623.797:325): avc: denied { ioctl } for pid=6516 comm="syz.2.428" path="socket:[12590]" dev="sockfs" ino=12590 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.005744][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.036073][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.078804][ T6428] bridge_slave_1: entered allmulticast mode [ 207.109827][ T6428] bridge_slave_1: entered promiscuous mode [ 207.368556][ T29] audit: type=1400 audit(1719434624.277:326): avc: denied { write } for pid=6502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.496839][ T29] audit: type=1400 audit(1719434624.277:327): avc: denied { add_name } for pid=6502 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.803248][ T29] audit: type=1400 audit(1719434624.697:328): avc: denied { remove_name } for pid=6536 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.957863][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.049979][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.061901][ T2870] hsr_slave_0: left promiscuous mode [ 209.128384][ T2870] hsr_slave_1: left promiscuous mode [ 209.220154][ T2870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.236856][ T2870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.286269][ T29] audit: type=1400 audit(1719434626.207:329): avc: denied { mount } for pid=6554 comm="syz.3.440" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 209.286400][ T2870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.331223][ T6555] devtmpfs: Too few inodes for current use [ 209.388572][ T2870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.396754][ T29] audit: type=1400 audit(1719434626.247:330): avc: denied { remount } for pid=6554 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 209.521894][ T2870] veth1_macvtap: left promiscuous mode [ 209.523058][ T29] audit: type=1400 audit(1719434626.437:331): avc: denied { listen } for pid=6561 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.529989][ T2870] veth0_macvtap: left promiscuous mode [ 209.567782][ T29] audit: type=1400 audit(1719434626.477:332): avc: denied { setopt } for pid=6561 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.609048][ T29] audit: type=1400 audit(1719434626.477:333): avc: denied { accept } for pid=6561 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.644831][ T6566] fuse: Unknown parameter 'fd0x000000000000000500000000000000000000' [ 209.673163][ T2870] veth1_vlan: left promiscuous mode [ 209.696086][ T2870] veth0_vlan: left promiscuous mode [ 210.520800][ T6583] sctp: [Deprecated]: syz.4.446 (pid 6583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.520800][ T6583] Use struct sctp_sack_info instead [ 211.888615][ T6595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6595 comm=syz.2.448 [ 211.965426][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 211.965445][ T29] audit: type=1400 audit(1719434628.877:336): avc: denied { audit_write } for pid=6590 comm="syz.2.448" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 212.486569][ T2870] team0 (unregistering): Port device team_slave_1 removed [ 212.587250][ T2870] team0 (unregistering): Port device team_slave_0 removed [ 213.447297][ T6428] team0: Port device team_slave_0 added [ 213.484188][ T6428] team0: Port device team_slave_1 added [ 213.491568][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.443'. [ 213.797534][ T6614] fuse: Unknown parameter 'fd0x000000000000000500000000000000000000' [ 213.806091][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.832120][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.932225][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.008375][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.061566][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.224011][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.266180][ T29] audit: type=1400 audit(1719434631.187:337): avc: denied { write } for pid=6619 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.516304][ T6428] hsr_slave_0: entered promiscuous mode [ 214.561230][ T6428] hsr_slave_1: entered promiscuous mode [ 214.593166][ T6428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.600785][ T6428] Cannot create hsr debugfs directory [ 214.721234][ T29] audit: type=1400 audit(1719434631.637:338): avc: denied { map } for pid=6631 comm="syz.4.461" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.797917][ T29] audit: type=1400 audit(1719434631.637:339): avc: denied { execute } for pid=6631 comm="syz.4.461" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.839439][ T29] audit: type=1400 audit(1719434631.717:340): avc: denied { ioctl } for pid=6631 comm="syz.4.461" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.206007][ T29] audit: type=1800 audit(1719434632.107:341): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.465" name="file0" dev="sda1" ino=1973 res=0 errno=0 [ 215.450849][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'. [ 215.609331][ T6660] random: crng reseeded on system resumption [ 215.779999][ T6654] sctp: [Deprecated]: syz.1.464 (pid 6654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.779999][ T6654] Use struct sctp_sack_info instead [ 216.828159][ T6428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.870958][ T6428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.994800][ T6428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.120276][ T6428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.195765][ T29] audit: type=1400 audit(1719434634.117:342): avc: denied { ioctl } for pid=6683 comm="syz.3.472" path="/dev/video0" dev="devtmpfs" ino=848 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.770301][ T6699] binder: 6698:6699 ioctl ae41 0 returned -22 [ 217.993520][ T6700] hub 9-0:1.0: USB hub found [ 217.998421][ T6700] hub 9-0:1.0: 8 ports detected [ 218.020549][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.140840][ T6428] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.189895][ T6708] capability: warning: `syz.2.479' uses 32-bit capabilities (legacy support in use) [ 218.669391][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.677297][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.744620][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.751907][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.781447][ T6709] random: crng reseeded on system resumption [ 219.318309][ T6428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.082588][ T29] audit: type=1400 audit(1719434637.997:343): avc: denied { create } for pid=6748 comm="syz.2.489" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 221.139248][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.217471][ T29] audit: type=1400 audit(1719434638.117:344): avc: denied { link } for pid=6748 comm="syz.2.489" name="file1" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 221.312682][ T29] audit: type=1400 audit(1719434638.187:345): avc: denied { write } for pid=6755 comm="syz.3.492" name="mdstat" dev="proc" ino=4026532010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 221.446614][ T6428] veth0_vlan: entered promiscuous mode [ 221.496131][ T6428] veth1_vlan: entered promiscuous mode [ 221.668751][ T6428] veth0_macvtap: entered promiscuous mode [ 222.008972][ T6770] random: crng reseeded on system resumption [ 222.339268][ T6428] veth1_macvtap: entered promiscuous mode [ 222.450014][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.626422][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.672906][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.718134][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.774228][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.801789][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.842525][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.912647][ T6785] devtmpfs: Too few inodes for current use [ 222.957192][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.014475][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.060065][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.102646][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.128364][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.211839][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.240870][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.405921][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.436772][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.475691][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.526349][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.620570][ T6428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.709132][ T6428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.732344][ T6428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.742159][ T6428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.135111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.190481][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.454525][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.484989][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.879721][ T29] audit: type=1326 audit(1719434642.787:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6853 comm="syz.1.515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240b175ae9 code=0x0 [ 226.038805][ T29] audit: type=1400 audit(1719434642.957:347): avc: denied { execute } for pid=6866 comm="syz.2.520" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 226.712885][ T29] audit: type=1400 audit(1719434643.627:348): avc: denied { getopt } for pid=6875 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 228.327931][ T6905] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 228.367934][ T29] audit: type=1326 audit(1719434645.287:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 228.445155][ T29] audit: type=1800 audit(1719434645.337:350): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.535" name="file1" dev="sda1" ino=1977 res=0 errno=0 [ 228.526482][ T29] audit: type=1326 audit(1719434645.407:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.3.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602e375ae9 code=0x0 [ 229.155523][ T6913] pim6reg: entered allmulticast mode [ 229.166836][ T6913] pim6reg: left allmulticast mode [ 229.425176][ T29] audit: type=1400 audit(1719434646.347:352): avc: denied { create } for pid=6920 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.588647][ T6925] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 229.644946][ T6925] team0: Device ipvlan1 failed to register rx_handler [ 232.050845][ T6940] 9pnet_fd: Insufficient options for proto=fd [ 232.104326][ T29] audit: type=1326 audit(1719434649.027:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602e375ae9 code=0x0 [ 232.113866][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 233.281222][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.398719][ T29] audit: type=1800 audit(1719434650.317:354): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.555" name="file1" dev="sda1" ino=1976 res=0 errno=0 [ 234.900424][ T6981] pim6reg: entered allmulticast mode [ 235.543596][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 236.078341][ T6964] pim6reg: left allmulticast mode [ 238.097530][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 238.762777][ T29] audit: type=1400 audit(1719434655.677:355): avc: denied { getopt } for pid=7021 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.802627][ T29] audit: type=1400 audit(1719434655.707:356): avc: denied { set_context_mgr } for pid=7021 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 238.871687][ T29] audit: type=1400 audit(1719434655.787:357): avc: denied { rename } for pid=4518 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.951820][ T29] audit: type=1400 audit(1719434655.787:358): avc: denied { unlink } for pid=4518 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.035114][ T29] audit: type=1400 audit(1719434655.787:359): avc: denied { create } for pid=4518 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.199317][ T29] audit: type=1800 audit(1719434656.097:360): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.574" name="file0" dev="sda1" ino=1979 res=0 errno=0 [ 239.222987][ T7035] Bluetooth: MGMT ver 1.22 [ 239.231310][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 239.830601][ T29] audit: type=1800 audit(1719434656.747:361): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.578" name="file1" dev="sda1" ino=1975 res=0 errno=0 [ 240.558790][ T7054] pim6reg: entered allmulticast mode [ 241.933722][ T7067] 9pnet_fd: Insufficient options for proto=fd [ 242.108585][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 242.244531][ T7075] pim6reg: entered allmulticast mode [ 242.462693][ T29] audit: type=1326 audit(1719434659.367:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 243.475455][ T7096] bpf: Bad value for 'context' [ 243.516878][ T29] audit: type=1326 audit(1719434660.437:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.3.593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602e375ae9 code=0x0 [ 243.550782][ T29] audit: type=1804 audit(1719434660.467:364): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.595" name="/root/syzkaller.loUz2X/19/file0" dev="sda1" ino=1974 res=1 errno=0 [ 243.681020][ T7107] netlink: 72 bytes leftover after parsing attributes in process `syz.0.595'. [ 243.718581][ T7107] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 244.289144][ T7126] UBIFS error (pid: 7126): cannot open "./file0", error -22 [ 245.796925][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 245.796944][ T29] audit: type=1400 audit(1719434662.707:370): avc: denied { read } for pid=7133 comm="syz.0.604" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 245.916763][ T29] audit: type=1400 audit(1719434662.797:371): avc: denied { open } for pid=7133 comm="syz.0.604" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 246.652153][ T7149] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 246.663739][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.608'. [ 246.719904][ T7151] geneve3: entered promiscuous mode [ 246.738063][ T7151] geneve3: entered allmulticast mode [ 246.940629][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 246.982932][ T7156] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 247.063843][ T7156] team0: Device ipvlan1 failed to register rx_handler [ 248.628545][ T29] audit: type=1400 audit(1719434665.337:372): avc: denied { read } for pid=7167 comm="syz.1.613" name="qat_adf_ctl" dev="devtmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.167137][ T29] audit: type=1400 audit(1719434665.337:373): avc: denied { open } for pid=7167 comm="syz.1.613" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.241785][ T29] audit: type=1400 audit(1719434665.347:374): avc: denied { ioctl } for pid=7167 comm="syz.1.613" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1082 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.591806][ T29] audit: type=1400 audit(1719434666.497:375): avc: denied { write } for pid=7185 comm="syz.0.617" name="udmabuf" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.776636][ T7190] tap0: tun_chr_ioctl cmd 1074025672 [ 249.804260][ T7190] tap0: ignored: set checksum enabled [ 250.228902][ T7202] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 250.408354][ T7202] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 250.475102][ T7202] team0: Device ipvlan1 failed to register rx_handler [ 250.489814][ T29] audit: type=1400 audit(1719434667.407:376): avc: denied { mount } for pid=7205 comm="syz.3.624" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 251.051768][ T29] audit: type=1326 audit(1719434667.957:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.2.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 251.188936][ T29] audit: type=1400 audit(1719434668.107:378): avc: denied { mounton } for pid=7211 comm="syz.0.627" path="/root/syzkaller.loUz2X/26/file0" dev="sda1" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 252.128280][ T7228] bpf: Bad value for 'context' [ 252.153931][ T29] audit: type=1326 audit(1719434669.067:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.4.634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x0 [ 252.383130][ T5090] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 252.403721][ T5090] Bluetooth: hci5: Injecting HCI hardware error event [ 252.414952][ T5099] Bluetooth: hci5: hardware error 0x00 [ 252.774930][ T29] audit: type=1804 audit(1719434669.697:380): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.637" name="/" dev="pidfs" ino=7540 res=1 errno=0 [ 254.345676][ T7256] nbd: socks must be embedded in a SOCK_ITEM attr [ 254.386590][ T29] audit: type=1326 audit(1719434671.297:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a6375ae9 code=0x0 [ 254.415831][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 254.635010][ T5099] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 255.667688][ T7281] binder: 7278:7281 ioctl ae41 0 returned -22 [ 257.772497][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.778924][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.455675][ T29] audit: type=1326 audit(1719434676.377:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x0 [ 259.793657][ T29] audit: type=1400 audit(1719434676.697:383): avc: denied { map } for pid=7316 comm="syz.3.661" path="socket:[15042]" dev="sockfs" ino=15042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 259.931848][ T29] audit: type=1400 audit(1719434676.697:384): avc: denied { read } for pid=7316 comm="syz.3.661" path="socket:[15042]" dev="sockfs" ino=15042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.216961][ T7325] binder: 7323:7325 ioctl ae41 0 returned -22 [ 262.621437][ T7342] overlay: ./file0 is not a directory [ 262.646199][ T7341] nbd: socks must be embedded in a SOCK_ITEM attr [ 262.664989][ T29] audit: type=1326 audit(1719434679.577:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x0 [ 262.765943][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 263.008309][ T7349] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 263.111477][ T29] audit: type=1326 audit(1719434679.997:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7348 comm="syz.1.671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240b175ae9 code=0x0 [ 263.207002][ T29] audit: type=1326 audit(1719434680.117:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.0.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff6575ae9 code=0x0 [ 265.560514][ T7388] TCP segment has incorrect auth options set for [fe80::bb].0->[fe80::aa].20002 [] [ 265.969461][ T7404] overlayfs: failed to resolve './file0': -2 [ 267.581119][ T29] audit: type=1107 audit(1719434684.497:388): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='O' [ 267.653225][ T7414] UBIFS error (pid: 7414): cannot open "./file0", error -22 [ 267.851763][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 268.101935][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 268.120859][ T45] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 268.160856][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.286326][ T45] usb 1-1: config 0 descriptor?? [ 268.301938][ T5139] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 268.330588][ T45] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 268.435859][ T45] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 268.526490][ T5139] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.593314][ T5139] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.649593][ T5139] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.698262][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.753294][ T7421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 268.772054][ T786] usb 1-1: USB disconnect, device number 2 [ 268.778904][ T786] ftdi_sio 1-1:0.0: device disconnected [ 269.227678][ T5139] usb 3-1: USB disconnect, device number 5 [ 269.891872][ T7430] udevd[7430]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.013430][ T7439] sctp: [Deprecated]: syz.1.702 (pid 7439) Use of int in max_burst socket option. [ 270.013430][ T7439] Use struct sctp_assoc_value instead [ 270.344046][ T7446] overlayfs: failed to resolve './file0': -2 [ 271.663581][ T7456] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 273.682141][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 274.447950][ T29] audit: type=1400 audit(1719434690.547:389): avc: denied { bind } for pid=7476 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.532415][ T29] audit: type=1400 audit(1719434690.547:390): avc: denied { listen } for pid=7476 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.607662][ T29] audit: type=1400 audit(1719434690.547:391): avc: denied { setopt } for pid=7476 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.700054][ T29] audit: type=1400 audit(1719434691.397:392): avc: denied { connect } for pid=7476 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.780063][ T29] audit: type=1400 audit(1719434691.447:393): avc: denied { write } for pid=7476 comm="syz.1.717" path="socket:[15339]" dev="sockfs" ino=15339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.921780][ T29] audit: type=1400 audit(1719434691.447:394): avc: denied { accept } for pid=7476 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.999068][ T7501] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 275.012178][ T29] audit: type=1326 audit(1719434691.937:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.1.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240b175ae9 code=0x0 [ 275.146378][ T29] audit: type=1400 audit(1719434692.067:396): avc: denied { setopt } for pid=7508 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 276.404930][ T29] audit: type=1326 audit(1719434693.317:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.0.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff6575ae9 code=0x0 [ 276.414578][ T7515] nbd: socks must be embedded in a SOCK_ITEM attr [ 276.495914][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.731'. [ 276.515152][ T29] audit: type=1800 audit(1719434693.387:398): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.733" name="file1" dev="sda1" ino=1969 res=0 errno=0 [ 280.012419][ T7559] netlink: 'syz.1.747': attribute type 2 has an invalid length. [ 280.020577][ T7559] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 280.028463][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'. [ 280.519067][ T7573] sysfs: cannot create duplicate filename '/class/ieee80211/!U' [ 280.527273][ T7573] CPU: 1 PID: 7573 Comm: syz.2.750 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 280.537279][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 280.547438][ T7573] Call Trace: [ 280.550795][ T7573] [ 280.553735][ T7573] dump_stack_lvl+0x16c/0x1f0 [ 280.558443][ T7573] sysfs_warn_dup+0x7f/0xa0 [ 280.563001][ T7573] sysfs_do_create_link_sd+0x124/0x140 [ 280.568471][ T7573] sysfs_create_link+0x61/0xc0 [ 280.573244][ T7573] device_add+0x62e/0x1a70 [ 280.577753][ T7573] ? __pfx_device_add+0x10/0x10 [ 280.582605][ T7573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.588606][ T7573] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 280.594682][ T7573] wiphy_register+0x2101/0x2d00 [ 280.599535][ T7573] ? __pfx_wiphy_register+0x10/0x10 [ 280.604752][ T7573] ieee80211_register_hw+0x2683/0x43b0 [ 280.610245][ T7573] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 280.616116][ T7573] ? __asan_memset+0x23/0x50 [ 280.620744][ T7573] ? __hrtimer_init+0x106/0x2c0 [ 280.625618][ T7573] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 280.631370][ T7573] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 280.637445][ T7573] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 280.642759][ T7573] ? __asan_memcpy+0x3c/0x60 [ 280.647374][ T7573] hwsim_new_radio_nl+0xaf9/0x1240 [ 280.652514][ T7573] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 280.658082][ T7573] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 280.665636][ T7573] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 280.673022][ T7573] genl_family_rcv_msg_doit+0x202/0x2f0 [ 280.678584][ T7573] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 280.684660][ T7573] ? ns_capable+0xd7/0x110 [ 280.689159][ T7573] genl_rcv_msg+0x565/0x800 [ 280.693674][ T7573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.698717][ T7573] ? __pfx___lock_acquire+0x10/0x10 [ 280.703988][ T7573] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 280.709549][ T7573] netlink_rcv_skb+0x16b/0x440 [ 280.714338][ T7573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.719379][ T7573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.724671][ T7573] ? down_read+0xc9/0x330 [ 280.729007][ T7573] ? __pfx_down_read+0x10/0x10 [ 280.733810][ T7573] ? rcu_is_watching+0x12/0xc0 [ 280.738569][ T7573] genl_rcv+0x28/0x40 [ 280.742556][ T7573] netlink_unicast+0x542/0x820 [ 280.747331][ T7573] ? __pfx_netlink_unicast+0x10/0x10 [ 280.752635][ T7573] netlink_sendmsg+0x8b8/0xd70 [ 280.757417][ T7573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.762784][ T7573] ? __import_iovec+0x1fd/0x6e0 [ 280.767632][ T7573] ____sys_sendmsg+0xab5/0xc90 [ 280.772420][ T7573] ? copy_msghdr_from_user+0x10b/0x160 [ 280.777880][ T7573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.783184][ T7573] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 280.790017][ T7573] ___sys_sendmsg+0x135/0x1e0 [ 280.794732][ T7573] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.799941][ T7573] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 280.805751][ T7573] ? lockdep_hardirqs_on+0x7c/0x110 [ 280.811116][ T7573] ? __fget_light+0x173/0x210 [ 280.815793][ T7573] __sys_sendmsg+0x117/0x1f0 [ 280.820402][ T7573] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.825551][ T7573] ? __x64_sys_futex+0x1e1/0x4c0 [ 280.830502][ T7573] do_syscall_64+0xcd/0x250 [ 280.835015][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.841002][ T7573] RIP: 0033:0x7fe1a6375ae9 [ 280.845442][ T7573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.865082][ T7573] RSP: 002b:00007fe1a71ab048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.873492][ T7573] RAX: ffffffffffffffda RBX: 00007fe1a6504070 RCX: 00007fe1a6375ae9 [ 280.881563][ T7573] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 280.889557][ T7573] RBP: 00007fe1a63f6746 R08: 0000000000000000 R09: 0000000000000000 [ 280.897546][ T7573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.905522][ T7573] R13: 000000000000006e R14: 00007fe1a6504070 R15: 00007ffca9dccea8 [ 280.913502][ T7573] [ 281.335625][ T29] audit: type=1400 audit(1719434697.457:399): avc: denied { ioctl } for pid=7567 comm="syz.0.748" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 281.467285][ T29] audit: type=1400 audit(1719434697.457:400): avc: denied { setopt } for pid=7567 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 281.514256][ T7575] nbd: socks must be embedded in a SOCK_ITEM attr [ 281.528915][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'. [ 281.797535][ T29] audit: type=1800 audit(1719434698.717:401): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.756" name="file1" dev="sda1" ino=1953 res=0 errno=0 [ 281.881700][ T29] audit: type=1804 audit(1719434698.737:402): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.757" name="/root/syzkaller.loUz2X/47/bus" dev="sda1" ino=1954 res=1 errno=0 [ 283.859463][ T29] audit: type=1800 audit(1719434700.777:403): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.763" name="file0" dev="sda1" ino=1978 res=0 errno=0 [ 284.681760][ T29] audit: type=1400 audit(1719434700.907:404): avc: denied { write } for pid=7604 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.307875][ T7624] sysfs: cannot create duplicate filename '/class/ieee80211/!U' [ 285.315867][ T7624] CPU: 1 PID: 7624 Comm: syz.3.767 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 285.325880][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.335935][ T7624] Call Trace: [ 285.339293][ T7624] [ 285.342240][ T7624] dump_stack_lvl+0x16c/0x1f0 [ 285.347044][ T7624] sysfs_warn_dup+0x7f/0xa0 [ 285.351610][ T7624] sysfs_do_create_link_sd+0x124/0x140 [ 285.357357][ T7624] sysfs_create_link+0x61/0xc0 [ 285.362164][ T7624] device_add+0x62e/0x1a70 [ 285.366604][ T7624] ? __pfx_device_add+0x10/0x10 [ 285.371473][ T7624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 285.377372][ T7624] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 285.383460][ T7624] wiphy_register+0x2101/0x2d00 [ 285.388318][ T7624] ? __pfx_wiphy_register+0x10/0x10 [ 285.393521][ T7624] ieee80211_register_hw+0x2683/0x43b0 [ 285.398990][ T7624] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 285.404921][ T7624] ? __asan_memset+0x23/0x50 [ 285.409521][ T7624] ? __hrtimer_init+0x106/0x2c0 [ 285.414392][ T7624] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 285.420137][ T7624] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 285.426219][ T7624] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 285.431514][ T7624] ? __asan_memcpy+0x3c/0x60 [ 285.436112][ T7624] hwsim_new_radio_nl+0xaf9/0x1240 [ 285.441233][ T7624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 285.446899][ T7624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 285.454281][ T7624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 285.461666][ T7624] genl_family_rcv_msg_doit+0x202/0x2f0 [ 285.467238][ T7624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.473407][ T7624] ? ns_capable+0xd7/0x110 [ 285.477830][ T7624] genl_rcv_msg+0x565/0x800 [ 285.482446][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.487480][ T7624] ? __pfx___lock_acquire+0x10/0x10 [ 285.492688][ T7624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 285.498253][ T7624] netlink_rcv_skb+0x16b/0x440 [ 285.503035][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.508268][ T7624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.513586][ T7624] ? down_read+0xc9/0x330 [ 285.517930][ T7624] ? __pfx_down_read+0x10/0x10 [ 285.522703][ T7624] ? netlink_deliver_tap+0x1ae/0xd90 [ 285.528000][ T7624] genl_rcv+0x28/0x40 [ 285.531993][ T7624] netlink_unicast+0x542/0x820 [ 285.536772][ T7624] ? __pfx_netlink_unicast+0x10/0x10 [ 285.542065][ T7624] netlink_sendmsg+0x8b8/0xd70 [ 285.546861][ T7624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.552257][ T7624] ? __import_iovec+0x1fd/0x6e0 [ 285.557120][ T7624] ____sys_sendmsg+0xab5/0xc90 [ 285.561887][ T7624] ? copy_msghdr_from_user+0x10b/0x160 [ 285.567356][ T7624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.572644][ T7624] ? __pfx___lock_acquire+0x10/0x10 [ 285.577856][ T7624] ___sys_sendmsg+0x135/0x1e0 [ 285.582544][ T7624] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.587752][ T7624] ? __fget_light+0x173/0x210 [ 285.592441][ T7624] __sys_sendmsg+0x117/0x1f0 [ 285.597044][ T7624] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.602249][ T7624] ? __pfx___schedule+0x10/0x10 [ 285.607276][ T7624] ? handle_softirqs+0x5be/0x8f0 [ 285.612232][ T7624] do_syscall_64+0xcd/0x250 [ 285.616767][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.622683][ T7624] RIP: 0033:0x7f602e375ae9 [ 285.627104][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.646734][ T7624] RSP: 002b:00007f602f068048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.655167][ T7624] RAX: ffffffffffffffda RBX: 00007f602e504070 RCX: 00007f602e375ae9 [ 285.663231][ T7624] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 285.671204][ T7624] RBP: 00007f602e3f6746 R08: 0000000000000000 R09: 0000000000000000 [ 285.679176][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.687148][ T7624] R13: 000000000000006e R14: 00007f602e504070 R15: 00007ffe1d375a28 [ 285.695121][ T7624] [ 285.970581][ T7629] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 286.018372][ T29] audit: type=1326 audit(1719434702.937:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c5175ae9 code=0x0 [ 286.061119][ C0] [ 286.063485][ C0] ================================ [ 286.068843][ C0] WARNING: inconsistent lock state [ 286.073938][ C0] 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 Not tainted [ 286.081033][ C0] -------------------------------- [ 286.086125][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 286.092958][ C0] syz.3.772/7633 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 286.099198][ C0] ffff8880b9238a80 (lock#12){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 286.109579][ C0] {HARDIRQ-ON-W} state was registered at: [ 286.115295][ C0] lock_acquire+0x1b1/0x560 [ 286.119897][ C0] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 286.126600][ C0] lock_mm_and_find_vma+0xeb/0x6a0 [ 286.131802][ C0] do_user_addr_fault+0x29c/0xe50 [ 286.136915][ C0] exc_page_fault+0x5c/0xc0 [ 286.141502][ C0] asm_exc_page_fault+0x26/0x30 [ 286.146448][ C0] rep_movs_alternative+0x33/0x70 [ 286.151563][ C0] _copy_to_user+0xac/0xc0 [ 286.156073][ C0] msr_read+0x155/0x250 [ 286.160308][ C0] vfs_read+0x1d4/0xbd0 [ 286.164576][ C0] ksys_read+0x12f/0x260 [ 286.168906][ C0] do_syscall_64+0xcd/0x250 [ 286.173513][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.179522][ C0] irq event stamp: 26 [ 286.183543][ C0] hardirqs last enabled at (25): [] do_user_addr_fault+0x192/0xe50 [ 286.193181][ C0] hardirqs last disabled at (26): [] sysvec_call_function_single+0xe/0xb0 [ 286.203420][ C0] softirqs last enabled at (0): [] copy_process+0x222a/0x8f10 [ 286.212622][ C0] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 286.219730][ C0] [ 286.219730][ C0] other info that might help us debug this: [ 286.227779][ C0] Possible unsafe locking scenario: [ 286.227779][ C0] [ 286.235215][ C0] CPU0 [ 286.238574][ C0] ---- [ 286.241905][ C0] lock(lock#12); [ 286.245625][ C0] [ 286.249065][ C0] lock(lock#12); [ 286.252976][ C0] [ 286.252976][ C0] *** DEADLOCK *** [ 286.252976][ C0] [ 286.261193][ C0] 5 locks held by syz.3.772/7633: [ 286.266222][ C0] #0: ffff88806699b4a8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x1e2/0x8f0 [ 286.276501][ C0] #1: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x42/0x540 [ 286.286010][ C0] #2: ffff88807ca73078 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0xf1/0x300 [ 286.296572][ C0] #3: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 286.306009][ C0] #4: ffff88807cb04418 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x1e8/0x7c0 [ 286.316817][ C0] [ 286.316817][ C0] stack backtrace: [ 286.322694][ C0] CPU: 0 PID: 7633 Comm: syz.3.772 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 286.332675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.342811][ C0] Call Trace: [ 286.346105][ C0] [ 286.348943][ C0] dump_stack_lvl+0x116/0x1f0 [ 286.353622][ C0] mark_lock+0x923/0xc60 [ 286.357912][ C0] ? __pfx_mark_lock+0x10/0x10 [ 286.362699][ C0] ? mark_lock+0xb5/0xc60 [ 286.367037][ C0] ? __orc_find+0x104/0x130 [ 286.371546][ C0] ? __pfx_mark_lock+0x10/0x10 [ 286.376316][ C0] ? __pfx_mark_lock+0x10/0x10 [ 286.381085][ C0] ? hlock_class+0x4e/0x130 [ 286.385592][ C0] ? __lock_acquire+0xc5d/0x3b30 [ 286.390535][ C0] __lock_acquire+0x1359/0x3b30 [ 286.395398][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 286.400605][ C0] ? lock_acquire+0x1b1/0x560 [ 286.405295][ C0] lock_acquire+0x1b1/0x560 [ 286.409809][ C0] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 286.416583][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 286.421619][ C0] ? kvm_guest_state+0xfa/0x160 [ 286.426497][ C0] ? perf_callchain_user+0x7ec/0xa20 [ 286.431793][ C0] ? down_read_trylock+0x1ed/0x3f0 [ 286.436901][ C0] ? stack_map_get_build_id_offset+0x1e8/0x7c0 [ 286.443056][ C0] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 286.449655][ C0] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 286.456429][ C0] ? __pfx_get_perf_callchain+0x10/0x10 [ 286.462161][ C0] stack_map_get_build_id_offset+0x5d9/0x7c0 [ 286.468198][ C0] ? hlock_class+0x4e/0x130 [ 286.472704][ C0] ? mark_lock+0xb5/0xc60 [ 286.477040][ C0] __bpf_get_stack+0x6bf/0x700 [ 286.481841][ C0] ? __pfx___bpf_get_stack+0x10/0x10 [ 286.487127][ C0] bpf_get_stack_raw_tp+0x124/0x160 [ 286.492332][ C0] ? __pfx_bpf_get_stack_raw_tp+0x10/0x10 [ 286.498054][ C0] ___bpf_prog_run+0x3e51/0xabd0 [ 286.502992][ C0] __bpf_prog_run32+0xc1/0x100 [ 286.507758][ C0] ? __pfx___bpf_prog_run32+0x10/0x10 [ 286.513134][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 286.518253][ C0] ? lock_acquire+0x1b1/0x560 [ 286.522958][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 286.528182][ C0] bpf_trace_run2+0x231/0x590 [ 286.532884][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 286.538096][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 286.543291][ C0] __bpf_trace_tlb_flush+0xd2/0x110 [ 286.548493][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 286.554302][ C0] ? flush_tlb_func+0x3d2/0x600 [ 286.559147][ C0] trace_tlb_flush+0xf3/0x170 [ 286.563819][ C0] __flush_smp_call_function_queue+0x27a/0x8c0 [ 286.569975][ C0] __sysvec_call_function_single+0x8c/0x410 [ 286.575873][ C0] sysvec_call_function_single+0x90/0xb0 [ 286.581507][ C0] [ 286.584430][ C0] [ 286.587350][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 286.593342][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x436/0xcc0 [ 286.600192][ C0] Code: 00 01 00 00 66 89 8c 24 90 00 00 00 41 0f b6 07 44 38 e0 7f 08 84 c0 0f 85 26 07 00 00 0f b6 03 84 c0 0f 84 b0 00 00 00 f3 90 <41> 83 ed 01 75 cf 48 b8 00 00 00 00 00 fc ff df 48 8b 74 24 20 48 [ 286.619801][ C0] RSP: 0000:ffffc90003107a88 EFLAGS: 00000202 [ 286.625874][ C0] RAX: 0000000000000001 RBX: ffff88807ca73060 RCX: 0000000000000100 [ 286.633849][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807ca73062 [ 286.642016][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffed100f94e60c [ 286.650087][ C0] R10: ffff88807ca73063 R11: 0000000000000002 R12: 0000000000000000 [ 286.658054][ C0] R13: 0000000000007f45 R14: ffff8880b923fa40 R15: ffffed100f94e60c [ 286.666049][ C0] ? __pv_queued_spin_lock_slowpath+0x311/0xcc0 [ 286.672385][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 286.677595][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 286.684185][ C0] ? zap_class+0x220/0x9a0 [ 286.688604][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 286.693727][ C0] do_raw_spin_lock+0x210/0x2c0 [ 286.698581][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.703956][ C0] ? rcu_is_watching+0x12/0xc0 [ 286.708717][ C0] __pte_offset_map_lock+0xf1/0x300 [ 286.713935][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 286.719749][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 286.725128][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 286.730333][ C0] __handle_mm_fault+0x26c8/0x5410 [ 286.735489][ C0] ? down_read_trylock+0x1ed/0x3f0 [ 286.740609][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 286.745814][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 286.751285][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 286.756861][ C0] handle_mm_fault+0x476/0xa00 [ 286.761720][ C0] do_user_addr_fault+0x426/0xe50 [ 286.766758][ C0] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 286.772837][ C0] exc_page_fault+0x5c/0xc0 [ 286.777343][ C0] asm_exc_page_fault+0x26/0x30 [ 286.782203][ C0] RIP: 0033:0x7f602e246897 [ 286.786700][ C0] Code: b9 40 42 0f 00 ba 81 00 00 00 4c 89 e6 41 c7 04 24 01 00 00 00 bf ca 00 00 00 31 c0 e8 42 f2 12 00 eb c1 0f b6 35 31 ee de 00 <8b> bf 98 00 00 00 31 d2 e8 ec 6b ff ff eb 83 48 8d 3d 76 dd 19 00 [ 286.806499][ C0] RSP: 002b:00007f602f089100 EFLAGS: 00010202 [ 286.812585][ C0] RAX: 0000000000000001 RBX: 00007f602f0896c0 RCX: 00007f602e32c656 [ 286.820990][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f602e503fa0 [ 286.828953][ C0] RBP: 00007f602e503fa0 R08: 0000000000000000 R09: 00007ffe1d375a27 [ 286.836935][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: ffffffffffffffa8 [ 286.844907][ C0] R13: 000000000000000b R14: 00007ffe1d375940 R15: 00007ffe1d375a28 [ 286.853051][ C0]