last executing test programs: 53.388469845s ago: executing program 0 (id=448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c004) openat$capi20(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r4, &(0x7f0000001fc0)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001200)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) 51.143075091s ago: executing program 0 (id=450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[], 0x0, 0x9}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x24, 0x8, 0x4, 0x2c2, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x745143, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0xfea7) copy_file_range(r7, &(0x7f00000001c0), r6, 0x0, 0xa78, 0x10000000000000) 46.145007515s ago: executing program 0 (id=455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) munlockall() read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)={0x0, 0x10000, 0x0, &(0x7f0000000080)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r3, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) socket(0xa, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 40.693296204s ago: executing program 0 (id=461): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x20}}, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d001034e90102030109021b0002060000000904a900005943bf000904"], 0x0) creat(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020}, 0x91) writev(r4, &(0x7f00000010c0), 0x0) io_uring_setup(0x5c01, &(0x7f0000000240)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaa08aaaaaaaa948d9317aa88"], 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000000012090212000100000000090400000080829900"], 0x0) 36.436211862s ago: executing program 0 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r2, 0x8010aa01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000740)='./file0\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}]}, 0x54}}, 0x0) 35.682478457s ago: executing program 0 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x0, @multicast1}, 0x10) ioperm(0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x9da9, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x1, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 35.235496777s ago: executing program 4 (id=470): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) munlockall() read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) rt_sigpending(0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x3f], [0x4, 0x0, 0x5]}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) write$UHID_DESTROY(r8, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)) 31.517073746s ago: executing program 1 (id=475): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x7, 0x5000}) r1 = openat(r0, &(0x7f0000000280)='./cgroup\x00', 0x105000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x0, 0x7800, 0x1878014f, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@generic={0x0, 0xd, "63975278283526ecd9ae24"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x9, [{@multicast1, 0x2}, {@broadcast}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000001b40)=""/234, 0xea, 0x0, &(0x7f0000000680)=""/91, 0x5b}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d00)={0x6, 0x3, &(0x7f0000001940)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x9, 0x1, 0xd0, 0x7ffffffffffffffb}], 0x0, 0x7, 0x1000, &(0x7f0000001c40)=""/4096, 0x41000, 0x54, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000002c40)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002c80)=[r0, r1], &(0x7f0000002cc0)=[{0x1, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x8}], 0x10, 0x2}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r3, 0x0) socket(0x24, 0x0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x60) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x3c) mmap(&(0x7f0000f6e000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0xadb89000) munlock(&(0x7f0000cad000/0x1000)=nil, 0x1000) munlock(&(0x7f0000a67000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a1e000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ab0000/0x3000)=nil) 31.091726501s ago: executing program 4 (id=477): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0xff, 0xde, 0xd04}) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 29.920478762s ago: executing program 4 (id=478): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x3) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r4, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b", 0x69, 0xc001, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) 29.496259751s ago: executing program 1 (id=480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[], 0x0, 0x9}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x24, 0x8, 0x4, 0x2c2, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x745143, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0xfea7) copy_file_range(r7, &(0x7f00000001c0), r6, 0x0, 0xa78, 0x10000000000000) 28.186659678s ago: executing program 1 (id=481): r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eN\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x5, 0x2010c62, 0x0, 0x3}}, 0x50) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) msgsnd(0x0, 0x0, 0x3f2, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) 26.859344294s ago: executing program 1 (id=483): socket$inet6(0xa, 0x2, 0x3a) socket$inet6(0xa, 0x0, 0x3a) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) poll(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x0, 0x4000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) socket$inet6(0xa, 0x5, 0xd3a00000) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x21}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$BLKTRACESTART(r6, 0x2201, 0x1000000000000) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x10000000, 0x0, "f85c00000000000000ff03000000000000000022e3d6bc3e8ec600000000000000243245011505195b9058b48900a60300003f00000000000800", "140dfa4105000005692e648a343879f3932320e1967864f84839f1d1bd9469481e8f349c5004000000732e1dd40a552be00a000080000000000000000050b500", "49a0b73ad4030cca9bac6c89ec2f03af3dc76b0b1700090000000000008000"}}) 26.856897169s ago: executing program 4 (id=484): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x8, 0xffff933c, 0x800001], [{0x35, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0xbca, 0x800}], 0xc}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r5 = dup2(r4, r4) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x980901}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f00000001c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000240)='/dev/video#\x00', 0x0, r6) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0) gettid() listen(0xffffffffffffffff, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0) 24.904801155s ago: executing program 1 (id=487): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000002c0)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) r6 = gettid() sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x8) write$FUSE_LK(r2, &(0x7f0000000140)={0x28, 0x0, r5, {{0x1, 0xb39, 0x2, r6}}}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e"], 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18030000000000000000000000000000c3020000500000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={0x0, 0xe0}, 0x20) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}}}, 0xb) 23.867030134s ago: executing program 4 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000006c0)=0xffff) write$cgroup_devices(r0, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000180)='smaps\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x31) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0x27}}, 0x14}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x34}]}) 18.452105156s ago: executing program 1 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r3, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400000000000002000000200004801c0001800b00010072656a65637400000c00028008000140000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a0000"], 0x74}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="61050905e504060605010a3d56332f077cecf90ab915e101260d"], 0x1a) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) shutdown(r11, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r12}, 0x10) ioctl$USBDEVFS_GETDRIVER(r10, 0x41045508, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) 18.131998099s ago: executing program 4 (id=496): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendto$inet(r3, &(0x7f0000001440)="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", 0x77f, 0x2004c890, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = syz_io_uring_setup(0x7279, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 13.003312306s ago: executing program 3 (id=502): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0xc0045009, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00', &(0x7f0000000380)=@ethtool_test={0x41}}) r7 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0', [{0x20, '-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xd1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa67q\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU'}]}, 0x11a) close_range(r7, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 10.730769541s ago: executing program 3 (id=504): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfea7) sendfile(r6, r7, &(0x7f0000000000), 0x11) ioctl$BLKBSZGET(r7, 0x80081270, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x28, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="272eee862efeda61316ceff1a08b1730", 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 9.531145455s ago: executing program 3 (id=505): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x200001}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x20000040) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4}, 0x0) timer_settime(0x0, 0x5, 0x0, 0x0) 9.355975696s ago: executing program 2 (id=506): r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eN\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x5, 0x2010c62, 0x0, 0x3}}, 0x50) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) msgsnd(0x0, 0x0, 0x3f2, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) 7.791174051s ago: executing program 3 (id=507): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000540)={0xe6, 0x1, 0x1, 0x2e, 0x15, "2cbf153f49d8961e43c30ea847cb1edd85bd5e"}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000024c0), 0x0, 0x4008000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000340)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) 7.590237168s ago: executing program 2 (id=511): io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x9f24}) unlink(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0x1000, 0x6}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x3c, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f00000001c0)={0x0, 0x8a, 0x0, {r4}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$9p(r6, 0x0, 0x2) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r7, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x0, r7, 0x0, &(0x7f0000ff7000/0x1000)=nil, 0x1000}) 6.823137215s ago: executing program 2 (id=512): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_uring_setup(0x497c, &(0x7f00000001c0)) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@routing], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000280)=[r6], &(0x7f00000002c0)}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_test={0xf}}) 5.753047378s ago: executing program 3 (id=513): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setresuid(0xee00, 0x0, 0x0) r3 = getuid() setresuid(0xffffffffffffffff, r3, 0x0) get_robust_list(r0, &(0x7f0000000480)=0x0, &(0x7f0000000540)) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) tkill(0x0, 0x22) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0, 0xa9, 0x0, &(0x7f0000000580)=""/169, 0x7f, 0x0, 0x5c, 0x0, &(0x7f0000000780)="0f6bc5fda0807aafeb3a0609698ffa2300be627b84f75ea36c79c9ba1af24a138f438c808cf3f6443f430110f55dece8f9bf7234343012a64f940420baf8b34c17e292ca29670e68f9172ce0d0e90cf2b8215ffd8ff2ef6e6b5ffa04", &(0x7f0000000500), 0x0, 0x0, 0xff}, 0x50) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.658757268s ago: executing program 2 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) prctl$PR_MCE_KILL(0x43724f53, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@local, @rand_addr, 0x0}, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x18000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203, 0x0, 0x0, '\x00', r5, 0x26, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040ef0ed0720000000000010902240001000000000904d0a7d33d00000009210000000122000009058103000000000083c0fce15597965b1675ffb06012ed30be9951ba"], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "7e94"}, @global=@item_012={0x1, 0x1, 0x2, 'M'}]}}, 0x0}, 0x0) 3.377587518s ago: executing program 3 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x13, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f00000001c0)=""/4068, 0xfe4) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000b4000040"]) socket$alg(0x26, 0x5, 0x0) 1.209642097s ago: executing program 2 (id=516): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0xffff7fff, 0x8, 0x8, 0x1111, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x0, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x3, 0x3, 0x0, 0x9}, {0x9, 0xf8, 0x0, 0x7}, {0x5, 0x4, 0xf, 0x5}]}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea1101650005000000", 0x29}], 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x26, @empty, @rand_addr=' \x01\x00', 0x7d0, 0x700, 0xfffffeff, 0x5}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x13}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'raw\x00', 0x0, [0x6, 0xdb4, 0x1000, 0xb28, 0x6]}, &(0x7f0000000140)=0x54) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x5) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) kernel console output (not intermixed with test programs): tlink_parms(): no params data found [ 286.216333][ T6742] Invalid option length (402) for dns_resolver key [ 287.092740][ T6742] warning: `syz.1.226' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 287.294007][ T29] audit: type=1400 audit(1724909268.400:479): avc: denied { write } for pid=6747 comm="syz.0.227" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.404376][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.447950][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.497748][ T6695] bridge_slave_0: entered allmulticast mode [ 287.521327][ T29] audit: type=1400 audit(1724909268.630:480): avc: denied { map } for pid=6747 comm="syz.0.227" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.551008][ T6695] bridge_slave_0: entered promiscuous mode [ 287.589494][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.629892][ T5231] Bluetooth: hci3: command tx timeout [ 287.629972][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.818298][ T29] audit: type=1400 audit(1724909268.630:481): avc: denied { execute } for pid=6747 comm="syz.0.227" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.566804][ T6695] bridge_slave_1: entered allmulticast mode [ 288.758328][ T6695] bridge_slave_1: entered promiscuous mode [ 289.259123][ T6765] kernel profiling enabled (shift: 17) [ 289.398057][ T5222] Bluetooth: Unexpected continuation frame (len 18) [ 290.167682][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.236569][ T29] audit: type=1400 audit(1724909271.340:482): avc: denied { create } for pid=6752 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.258836][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.453032][ T29] audit: type=1400 audit(1724909271.560:483): avc: denied { connect } for pid=6752 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.637123][ T6695] team0: Port device team_slave_0 added [ 290.710239][ T6695] team0: Port device team_slave_1 added [ 291.245148][ T6782] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.181316][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.230240][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.337268][ T6776] sctp: [Deprecated]: syz.3.232 (pid 6776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.337268][ T6776] Use struct sctp_sack_info instead [ 292.441053][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.535694][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.561055][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.668056][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.442484][ T6695] hsr_slave_0: entered promiscuous mode [ 294.515949][ T6695] hsr_slave_1: entered promiscuous mode [ 294.588571][ T6695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.671041][ T6695] Cannot create hsr debugfs directory [ 295.006010][ T6797] can0: slcan on ttyS3. [ 295.348174][ T6799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.378748][ T29] audit: type=1400 audit(1724909276.480:484): avc: denied { ioctl } for pid=6795 comm="syz.2.237" path="socket:[14049]" dev="sockfs" ino=14049 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 295.526138][ T29] audit: type=1400 audit(1724909276.520:485): avc: denied { write } for pid=6795 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 295.854681][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'. [ 295.884087][ T5812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.087879][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 296.098023][ T6807] tc_dump_action: action bad kind [ 297.102117][ T6815] netlink: 100 bytes leftover after parsing attributes in process `syz.0.240'. [ 297.146672][ T29] audit: type=1400 audit(1724909278.250:486): avc: denied { connect } for pid=6809 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 297.239834][ T6795] can0 (unregistered): slcan off ttyS3. [ 297.270662][ T29] audit: type=1400 audit(1724909278.380:487): avc: denied { write } for pid=6809 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 297.543696][ T5812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.362113][ T29] audit: type=1400 audit(1724909279.470:488): avc: denied { bind } for pid=6826 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.721787][ T5812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.027548][ T5812] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.106933][ T29] audit: type=1400 audit(1724909280.210:489): avc: denied { read write } for pid=6839 comm="syz.2.244" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 299.190080][ T3037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 299.221862][ T29] audit: type=1400 audit(1724909280.240:490): avc: denied { open } for pid=6839 comm="syz.2.244" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 299.268909][ T3037] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 299.517396][ T29] audit: type=1400 audit(1724909280.610:491): avc: denied { map } for pid=6839 comm="syz.2.244" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 301.017478][ T5812] bridge_slave_1: left allmulticast mode [ 301.023173][ T5812] bridge_slave_1: left promiscuous mode [ 301.029727][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.593715][ T29] audit: type=1800 audit(1724909282.190:492): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.248" name="/" dev="fuse" ino=1 res=0 errno=0 [ 301.622435][ T5812] bridge_slave_0: left allmulticast mode [ 301.643666][ T5812] bridge_slave_0: left promiscuous mode [ 301.667586][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.545193][ T29] audit: type=1400 audit(1724909284.640:493): avc: denied { wake_alarm } for pid=6886 comm="syz.0.251" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.588153][ T29] audit: type=1400 audit(1724909284.680:494): avc: denied { getopt } for pid=6886 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.673934][ T29] audit: type=1400 audit(1724909284.780:495): avc: denied { watch } for pid=6884 comm="syz.1.250" path="/38/net_prio.prioidx" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.724855][ T29] audit: type=1400 audit(1724909284.780:496): avc: denied { watch_sb } for pid=6884 comm="syz.1.250" path="/38/net_prio.prioidx" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 305.009862][ T29] audit: type=1400 audit(1724909286.110:497): avc: denied { mount } for pid=6899 comm="syz.0.254" name="/" dev="ramfs" ino=15280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 305.145495][ T29] audit: type=1400 audit(1724909286.200:498): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 305.366320][ T29] audit: type=1400 audit(1724909286.470:499): avc: denied { bind } for pid=6905 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.536166][ T29] audit: type=1400 audit(1724909286.580:500): avc: denied { accept } for pid=6905 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.091320][ T29] audit: type=1400 audit(1724909286.950:501): avc: denied { read } for pid=6905 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.256205][ T6911] cgroup: release_agent respecified [ 306.342652][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.395107][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.444547][ T5812] bond0 (unregistering): Released all slaves [ 306.607922][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 306.607943][ T29] audit: type=1400 audit(1724909287.550:505): avc: denied { unmount } for pid=6899 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 318.157364][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.163711][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.186721][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 319.144165][ T6903] Process accounting resumed [ 320.381913][ T6945] input: syz0 as /devices/virtual/input/input7 [ 320.487764][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.263'. [ 320.581576][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.263'. [ 321.002110][ T29] audit: type=1400 audit(1724909301.710:506): avc: denied { read } for pid=4655 comm="acpid" name="event4" dev="devtmpfs" ino=2369 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.121520][ T29] audit: type=1400 audit(1724909302.090:507): avc: denied { open } for pid=4655 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2369 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.353410][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.373659][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.487246][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.508098][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.520615][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.538902][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.800705][ T6959] netlink: 168 bytes leftover after parsing attributes in process `syz.3.264'. [ 322.794681][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.808087][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.823952][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.839226][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.847263][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.854622][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.618468][ T5222] Bluetooth: hci0: command tx timeout [ 323.687300][ T29] audit: type=1400 audit(1724909304.310:508): avc: denied { accept } for pid=6964 comm="syz.3.265" lport=45162 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.821474][ T5812] hsr_slave_0: left promiscuous mode [ 323.835270][ T5812] hsr_slave_1: left promiscuous mode [ 323.856966][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.869098][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.881833][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.894144][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.971929][ T5812] veth1_macvtap: left promiscuous mode [ 323.995892][ T5812] veth0_macvtap: left promiscuous mode [ 324.017112][ T5812] veth1_vlan: left promiscuous mode [ 324.043437][ T5812] veth0_vlan: left promiscuous mode [ 324.900015][ T5222] Bluetooth: hci4: command 0x0406 tx timeout [ 324.908302][ T5222] Bluetooth: hci2: command tx timeout [ 325.101232][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 325.156381][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 325.706832][ T5222] Bluetooth: hci0: command tx timeout [ 325.974060][ T6695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.244429][ T6695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.288791][ T6695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.859550][ T6695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.978195][ T5222] Bluetooth: hci2: command tx timeout [ 327.260016][ T29] audit: type=1400 audit(1724909308.370:509): avc: denied { mount } for pid=6990 comm="syz.1.268" name="/" dev="rpc_pipefs" ino=15759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 327.355768][ T29] audit: type=1400 audit(1724909308.460:510): avc: denied { unmount } for pid=6990 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 327.440597][ T6995] capability: warning: `syz.1.268' uses deprecated v2 capabilities in a way that may be insecure [ 327.703031][ T6963] chnl_net:caif_netlink_parms(): no params data found [ 327.777499][ T5222] Bluetooth: hci0: command tx timeout [ 327.800365][ T6951] chnl_net:caif_netlink_parms(): no params data found [ 328.061032][ T5812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.685409][ T5812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.057185][ T5222] Bluetooth: hci2: command tx timeout [ 329.059074][ T5812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.924909][ T5222] Bluetooth: hci0: command tx timeout [ 330.104004][ T5812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.415875][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.516500][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.540173][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.580375][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 330.650985][ T6963] bridge_slave_0: entered allmulticast mode [ 330.736981][ T6963] bridge_slave_0: entered promiscuous mode [ 331.141757][ T5222] Bluetooth: hci2: command tx timeout [ 331.163454][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.194212][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.218372][ T6963] bridge_slave_1: entered allmulticast mode [ 331.226349][ T6963] bridge_slave_1: entered promiscuous mode [ 331.310495][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.327070][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.334454][ T6951] bridge_slave_0: entered allmulticast mode [ 331.342794][ T6951] bridge_slave_0: entered promiscuous mode [ 331.374497][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.430083][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.437888][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.445163][ T6951] bridge_slave_1: entered allmulticast mode [ 331.459314][ T6951] bridge_slave_1: entered promiscuous mode [ 331.664763][ T6951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.680174][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.696105][ T7045] netlink: 'syz.3.275': attribute type 3 has an invalid length. [ 331.705738][ T7045] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 331.714305][ T7045] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.275'. [ 332.301989][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.309279][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.330085][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.337341][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.666538][ T29] audit: type=1400 audit(1724909313.560:511): avc: denied { shutdown } for pid=7044 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.892311][ T6951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.914174][ T29] audit: type=1400 audit(1724909313.570:512): avc: denied { read } for pid=7044 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.030841][ T29] audit: type=1400 audit(1724909313.700:513): avc: denied { create } for pid=7044 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 333.241655][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.119797][ T29] audit: type=1400 audit(1724909315.190:514): avc: denied { write } for pid=7060 comm="syz.3.277" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 336.417118][ T5222] Bluetooth: hci4: command 0x0406 tx timeout [ 336.701667][ T5812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.744313][ T6951] team0: Port device team_slave_0 added [ 336.760750][ T6951] team0: Port device team_slave_1 added [ 336.782537][ T6963] team0: Port device team_slave_0 added [ 336.796049][ T29] audit: type=1326 audit(1724909317.900:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f179ef9 code=0x7ffc0000 [ 336.801005][ T6963] team0: Port device team_slave_1 added [ 336.834991][ T29] audit: type=1326 audit(1724909317.930:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f179ef9 code=0x7ffc0000 [ 336.899562][ T29] audit: type=1326 audit(1724909317.930:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb8f179ef9 code=0x7ffc0000 [ 336.943329][ T29] audit: type=1326 audit(1724909317.930:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f179ef9 code=0x7ffc0000 [ 336.974526][ T29] audit: type=1326 audit(1724909317.930:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f179ef9 code=0x7ffc0000 [ 336.998322][ T29] audit: type=1326 audit(1724909317.940:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fdb8f179ef9 code=0x7ffc0000 [ 337.005995][ T5812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.062297][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.072112][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.099660][ T6951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.135528][ T5812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.168671][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.177406][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.207771][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.238684][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.256579][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.310460][ T6951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.423538][ T5812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.487421][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.494406][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.584322][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.809327][ T6951] hsr_slave_0: entered promiscuous mode [ 337.838324][ T6951] hsr_slave_1: entered promiscuous mode [ 337.855941][ T6951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.876529][ T6951] Cannot create hsr debugfs directory [ 338.090608][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.103331][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.112196][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.118717][ T6963] hsr_slave_0: entered promiscuous mode [ 338.121537][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.134866][ T6963] hsr_slave_1: entered promiscuous mode [ 338.136203][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.154017][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.162922][ T6963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.189057][ T6963] Cannot create hsr debugfs directory [ 338.446990][ T5812] bridge_slave_1: left allmulticast mode [ 338.452675][ T5812] bridge_slave_1: left promiscuous mode [ 338.464544][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.474282][ T5812] bridge_slave_0: left allmulticast mode [ 338.480336][ T5812] bridge_slave_0: left promiscuous mode [ 338.486046][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.509275][ T5812] bridge_slave_1: left allmulticast mode [ 338.514955][ T5812] bridge_slave_1: left promiscuous mode [ 338.520855][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.531910][ T5812] bridge_slave_0: left allmulticast mode [ 338.539538][ T5812] bridge_slave_0: left promiscuous mode [ 338.545226][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.252903][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.264073][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.281523][ T5812] bond0 (unregistering): Released all slaves [ 339.402603][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.414651][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.425429][ T5812] bond0 (unregistering): Released all slaves [ 340.258409][ T5231] Bluetooth: hci5: command tx timeout [ 340.552489][ T7082] chnl_net:caif_netlink_parms(): no params data found [ 340.573873][ T5812] hsr_slave_0: left promiscuous mode [ 340.595131][ T5812] hsr_slave_1: left promiscuous mode [ 340.601586][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.611351][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.619786][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.629168][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.642525][ T5812] hsr_slave_0: left promiscuous mode [ 340.650806][ T5812] hsr_slave_1: left promiscuous mode [ 340.658809][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.666341][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.677162][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.684603][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.721570][ T5812] veth1_macvtap: left allmulticast mode [ 340.727308][ T5812] veth1_macvtap: left promiscuous mode [ 340.732881][ T5812] veth0_macvtap: left promiscuous mode [ 340.739168][ T5812] veth1_vlan: left promiscuous mode [ 340.744568][ T5812] veth0_vlan: left promiscuous mode [ 340.753406][ T5812] veth1_macvtap: left promiscuous mode [ 340.759152][ T5812] veth0_macvtap: left promiscuous mode [ 340.764769][ T5812] veth1_vlan: left promiscuous mode [ 340.770231][ T5812] veth0_vlan: left promiscuous mode [ 341.469017][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 341.522127][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 342.347171][ T5231] Bluetooth: hci5: command tx timeout [ 342.482516][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 342.531871][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 343.186354][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.193850][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.206324][ T7082] bridge_slave_0: entered allmulticast mode [ 343.214537][ T7082] bridge_slave_0: entered promiscuous mode [ 343.302486][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.315349][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.323200][ T7082] bridge_slave_1: entered allmulticast mode [ 343.338796][ T7082] bridge_slave_1: entered promiscuous mode [ 343.405384][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.436113][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.535992][ T7082] team0: Port device team_slave_0 added [ 343.571088][ T7082] team0: Port device team_slave_1 added [ 343.677094][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.705684][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.742242][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.763278][ T6963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.775935][ T6963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.791317][ T6963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.829716][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.837244][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.865073][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.893526][ T6963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.003751][ T7082] hsr_slave_0: entered promiscuous mode [ 344.013255][ T7082] hsr_slave_1: entered promiscuous mode [ 344.126024][ T6951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 344.188966][ T6951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.246179][ T6951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.285526][ T6951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.416721][ T5231] Bluetooth: hci5: command tx timeout [ 344.554972][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.663945][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.748934][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.756235][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.792515][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.799794][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.842072][ T6951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.894894][ T5812] bridge_slave_1: left allmulticast mode [ 344.904943][ T5812] bridge_slave_1: left promiscuous mode [ 344.921637][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.932951][ T5812] bridge_slave_0: left allmulticast mode [ 344.943783][ T5812] bridge_slave_0: left promiscuous mode [ 344.952766][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.592172][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.613759][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.637925][ T5812] bond0 (unregistering): Released all slaves [ 345.845069][ T5812] hsr_slave_0: left promiscuous mode [ 345.853381][ T5812] hsr_slave_1: left promiscuous mode [ 345.865116][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.883872][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.328212][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 346.374117][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 346.506666][ T5231] Bluetooth: hci5: command tx timeout [ 346.819295][ T6951] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.905645][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.912889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.938512][ T7082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.961396][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.968645][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.992734][ T7082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.028392][ T7082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.056108][ T7082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.422548][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.468220][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.553060][ T7082] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.575099][ T6963] veth0_vlan: entered promiscuous mode [ 347.598514][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.605706][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.621630][ T6963] veth1_vlan: entered promiscuous mode [ 347.654725][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.661952][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.719730][ T6951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.773830][ T6963] veth0_macvtap: entered promiscuous mode [ 347.801468][ T6963] veth1_macvtap: entered promiscuous mode [ 347.890079][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.908128][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.919428][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.933047][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.952330][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.983018][ T6951] veth0_vlan: entered promiscuous mode [ 347.992583][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.004997][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.015482][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.032426][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.047969][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.072103][ T6963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.082403][ T6963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.092715][ T6963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.102852][ T6963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.127683][ T6951] veth1_vlan: entered promiscuous mode [ 348.247911][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.319710][ T6951] veth0_macvtap: entered promiscuous mode [ 348.332101][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.350628][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.361300][ T6951] veth1_macvtap: entered promiscuous mode [ 348.434803][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.446382][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.459356][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.475654][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.486166][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.509262][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.522862][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.535199][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.546957][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.551349][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.556500][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.570218][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.594517][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.611873][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.622926][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.635910][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.670453][ T6951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.679531][ T6951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.689824][ T6951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.698697][ T6951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.075648][ T7082] veth0_vlan: entered promiscuous mode [ 353.091830][ T7082] veth1_vlan: entered promiscuous mode [ 353.196065][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 353.196084][ T29] audit: type=1400 audit(1724909334.300:684): avc: denied { setattr } for pid=7170 comm="syz.3.287" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 353.315407][ T7082] veth0_macvtap: entered promiscuous mode [ 353.641516][ T7187] evm: overlay not supported [ 353.690637][ T29] audit: type=1400 audit(1724909334.760:685): avc: denied { execute } for pid=7182 comm="syz.1.280" path="/49/bus/blkio.bfq.sectors_recursive" dev="overlay" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 354.225842][ T7082] veth1_macvtap: entered promiscuous mode [ 354.596343][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.771887][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.657837][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.712496][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.734137][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.754879][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.774785][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.785834][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.796101][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.627413][ T7200] hfs: can't find a HFS filesystem on dev nullb0 [ 356.670400][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.691370][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.324306][ T29] audit: type=1400 audit(1724909338.430:686): avc: denied { create } for pid=7205 comm="syz.1.285" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 357.603111][ T29] audit: type=1400 audit(1724909338.690:687): avc: denied { link } for pid=7205 comm="syz.1.285" name="file1" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 357.679440][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.702458][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.733290][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.741927][ T29] audit: type=1400 audit(1724909338.840:688): avc: denied { write } for pid=7211 comm="syz.3.289" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 357.758738][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.788035][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.799162][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.809489][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.823433][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.839949][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.893496][ T7218] input: syz0 as /devices/virtual/input/input8 [ 359.371557][ T7082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.394882][ T29] audit: type=1400 audit(1724909339.060:689): avc: denied { getopt } for pid=7211 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.457407][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.465279][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.499133][ T7082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.528379][ T7082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.537209][ T7082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.103687][ T7240] netlink: 168 bytes leftover after parsing attributes in process `syz.1.291'. [ 362.214750][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.254659][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.272273][ T7227] mmap: syz.0.292 (7227): VmData 37785600 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 362.566323][ T29] audit: type=1400 audit(1724909343.560:690): avc: denied { ioctl } for pid=7241 comm="syz.2.293" path="socket:[18783]" dev="sockfs" ino=18783 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 363.318855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.333564][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.564264][ T29] audit: type=1400 audit(1724909345.000:691): avc: denied { connect } for pid=7250 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.564951][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 368.906773][ T3037] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 372.105370][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'. [ 372.240638][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 372.319618][ T7286] fuse: Unknown parameter '­ð0xfffffffffffffffféŠ>¥‰Áxïï•p¦´v²¥$' [ 372.343460][ T29] audit: type=1400 audit(1724909353.450:692): avc: denied { ioctl } for pid=7293 comm="syz.2.306" path="socket:[18905]" dev="sockfs" ino=18905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 373.536570][ T5304] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 373.877889][ T7305] Invalid ELF header magic: != ELF [ 374.296624][ T29] audit: type=1804 audit(1724909354.880:693): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.307" name="/newroot/56/bus/bus" dev="overlay" ino=351 res=1 errno=0 [ 374.581794][ T5231] Bluetooth: Unexpected start frame (len 16) [ 374.587991][ T5231] Bluetooth: Frame is too long (len 16, expected len 4) [ 376.938418][ T29] audit: type=1400 audit(1724909354.980:694): avc: denied { module_load } for pid=7300 comm="syz.1.307" path="/56/bus/bus" dev="overlay" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 376.961658][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.562815][ T5304] usb 5-1: device descriptor read/all, error -71 [ 378.276139][ T7328] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 378.291534][ T7328] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 378.303608][ T7328] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 379.004582][ T7331] vivid-000: disconnect [ 379.145881][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.838280][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.458180][ T7323] vivid-000: reconnect [ 385.626990][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 385.971092][ T7353] /dev/nullb0: Can't open blockdev [ 386.044911][ T29] audit: type=1400 audit(1724909367.140:695): avc: denied { mounton } for pid=7349 comm="syz.3.319" path="mnt:[4026533697]" dev="nsfs" ino=4026533697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 391.066787][ T29] audit: type=1400 audit(1724909371.980:696): avc: denied { create } for pid=7392 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 391.640002][ T29] audit: type=1400 audit(1724909371.990:697): avc: denied { bind } for pid=7392 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 391.675133][ T29] audit: type=1400 audit(1724909372.000:698): avc: denied { write } for pid=7392 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 391.694425][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.429181][ T7403] usb usb8: usbfs: process 7403 (syz.2.329) did not claim interface 0 before use [ 394.252241][ T29] audit: type=1400 audit(1724909375.050:699): avc: denied { getopt } for pid=7405 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.959527][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 396.609115][ T7421] overlayfs: overlapping lowerdir path [ 396.773356][ T29] audit: type=1326 audit(1724909377.790:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 396.796632][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.192813][ T29] audit: type=1326 audit(1724909377.790:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 397.222715][ T29] audit: type=1326 audit(1724909377.810:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 397.496041][ T29] audit: type=1326 audit(1724909377.820:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 398.062953][ T29] audit: type=1326 audit(1724909377.820:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 398.179423][ T29] audit: type=1326 audit(1724909377.820:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 398.317186][ T29] audit: type=1326 audit(1724909377.820:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 398.393891][ T29] audit: type=1326 audit(1724909377.830:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 398.417107][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.429101][ T29] audit: type=1326 audit(1724909377.840:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 398.454866][ T29] audit: type=1326 audit(1724909377.840:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6e379ef9 code=0x7ffc0000 [ 398.478099][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.003580][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 399.289048][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 399.297661][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.309779][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.329499][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 399.354126][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 399.395057][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.449793][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 399.471053][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 399.493246][ T9] usb 1-1: Manufacturer: syz [ 399.523964][ T9] usb 1-1: config 0 descriptor?? [ 399.611240][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.626850][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 399.637353][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.672598][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.682385][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 399.694547][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.422954][ T7447] binder: 7444:7447 ioctl c018620c 20000000 returned -1 [ 400.579333][ T1077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.648030][ T9] rc_core: IR keymap rc-hauppauge not found [ 400.677905][ T9] Registered IR keymap rc-empty [ 400.683506][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 400.751312][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 400.780581][ T1077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.817599][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 400.841169][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 401.005596][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.031822][ T1077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.086629][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.118007][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.196749][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.238461][ T1077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.261516][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.366614][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.396615][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.427251][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.497411][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.549904][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.654974][ T9] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 401.776673][ T5231] Bluetooth: hci3: command tx timeout [ 401.794164][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 401.932232][ T9] usb 1-1: USB disconnect, device number 3 [ 402.250145][ T1077] bridge_slave_1: left allmulticast mode [ 402.274459][ T1077] bridge_slave_1: left promiscuous mode [ 402.303650][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.377796][ T1077] bridge_slave_0: left allmulticast mode [ 402.414815][ T1077] bridge_slave_0: left promiscuous mode [ 402.442866][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.868347][ T5231] Bluetooth: hci3: command tx timeout [ 404.985083][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 404.985100][ T29] audit: type=1400 audit(1724909386.090:717): avc: denied { accept } for pid=7471 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.936639][ T5231] Bluetooth: hci3: command tx timeout [ 407.056208][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.089119][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.110715][ T1077] bond0 (unregistering): Released all slaves [ 407.208923][ T7442] chnl_net:caif_netlink_parms(): no params data found [ 408.125392][ T5231] Bluetooth: hci3: command tx timeout [ 409.077663][ T29] audit: type=1800 audit(1724909389.850:718): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.349" name="/" dev="fuse" ino=1 res=0 errno=0 [ 409.241513][ T29] audit: type=1800 audit(1724909390.350:719): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.352" name="bus" dev="overlay" ino=300 res=0 errno=0 [ 410.114943][ T29] audit: type=1400 audit(1724909390.570:720): avc: denied { ioctl } for pid=7523 comm="syz.2.353" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.855655][ T29] audit: type=1400 audit(1724909392.950:721): avc: denied { bind } for pid=7539 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 414.579545][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.832251][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.928351][ T7442] bridge_slave_0: entered allmulticast mode [ 414.936252][ T7442] bridge_slave_0: entered promiscuous mode [ 414.990123][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.066862][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.075223][ T7442] bridge_slave_1: entered allmulticast mode [ 415.676206][ T7442] bridge_slave_1: entered promiscuous mode [ 416.011095][ T7442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.100824][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 416.436716][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 422.226830][ T9] usb 4-1: device descriptor read/all, error -110 [ 422.386607][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 422.438205][ T1077] hsr_slave_0: left promiscuous mode [ 422.483702][ T1077] hsr_slave_1: left promiscuous mode [ 422.506029][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.525926][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.614871][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.649265][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.576914][ T1077] veth1_macvtap: left promiscuous mode [ 423.585648][ T1077] veth0_macvtap: left promiscuous mode [ 423.599778][ T1077] veth1_vlan: left promiscuous mode [ 423.608035][ T1077] veth0_vlan: left promiscuous mode [ 423.672540][ T7592] cgroup: release_agent respecified [ 424.685849][ T29] audit: type=1400 audit(1724909405.480:722): avc: denied { write } for pid=7593 comm="syz.2.367" path="socket:[19872]" dev="sockfs" ino=19872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 427.579531][ T7605] Bluetooth: MGMT ver 1.23 [ 429.072867][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 429.162187][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 430.145809][ T7442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.222842][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 430.232343][ T7588] (unnamed net_device) (uninitialized): option mode: invalid value (46) [ 430.728720][ T7442] team0: Port device team_slave_0 added [ 431.614321][ T7442] team0: Port device team_slave_1 added [ 432.775153][ T29] audit: type=1400 audit(1724909413.450:723): avc: denied { ioctl } for pid=7632 comm="syz.3.374" path="socket:[20488]" dev="sockfs" ino=20488 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 432.794416][ T7632] delete_channel: no stack [ 434.729015][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.763250][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.012138][ T7442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.672779][ T7643] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 435.797018][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.804512][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.875966][ T7442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.010440][ T7652] process 'syz.0.375' launched './file1' with NULL argv: empty string added [ 436.143162][ T29] audit: type=1400 audit(1724909417.240:724): avc: denied { execute_no_trans } for pid=7633 comm="syz.0.375" path="/24/file1" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 436.444540][ T7442] hsr_slave_0: entered promiscuous mode [ 436.490288][ T7442] hsr_slave_1: entered promiscuous mode [ 443.643599][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.650116][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.418525][ T29] audit: type=1400 audit(1724909425.230:725): avc: denied { write } for pid=7681 comm="syz.2.382" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 444.742945][ T29] audit: type=1400 audit(1724909425.250:726): avc: denied { relabelfrom } for pid=7681 comm="syz.2.382" name="" dev="pipefs" ino=19977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 445.057749][ T29] audit: type=1400 audit(1724909426.160:727): avc: denied { mount } for pid=7686 comm="syz.3.384" name="/" dev="hugetlbfs" ino=19990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 445.403682][ T29] audit: type=1400 audit(1724909426.500:728): avc: denied { execute } for pid=7686 comm="syz.3.384" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=20557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 445.786697][ T7700] dccp_v6_rcv: dropped packet with invalid checksum [ 446.194521][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.205309][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.222357][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.231420][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.245837][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 446.255455][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.463552][ T29] audit: type=1326 audit(1724909427.570:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb8f179ef9 code=0x0 [ 446.599283][ T29] audit: type=1400 audit(1724909427.650:730): avc: granted { setsecparam } for pid=7708 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 446.692884][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.210784][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.530094][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.750898][ T29] audit: type=1400 audit(1724909428.860:731): avc: denied { bind } for pid=7723 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.782434][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 447.832142][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.475683][ T5222] Bluetooth: hci1: command tx timeout [ 449.559072][ T7442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.603548][ T7442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.144430][ T12] bridge_slave_1: left allmulticast mode [ 450.179453][ T12] bridge_slave_1: left promiscuous mode [ 450.190965][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.236225][ T12] bridge_slave_0: left allmulticast mode [ 450.276680][ T12] bridge_slave_0: left promiscuous mode [ 450.283596][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.373785][ T29] audit: type=1400 audit(1724909431.480:732): avc: denied { setopt } for pid=7745 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 450.507302][ T5222] Bluetooth: hci1: command tx timeout [ 452.321158][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.361802][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.382163][ T12] bond0 (unregistering): Released all slaves [ 452.404854][ T7442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.576627][ T5222] Bluetooth: hci1: command tx timeout [ 452.604028][ T7733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.615115][ T7442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 452.868709][ T7747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 452.883836][ T7747] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 453.129735][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 453.226900][ T7747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.248048][ T7747] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 454.656507][ T5222] Bluetooth: hci1: command tx timeout [ 454.756504][ T7747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.792302][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.796788][ T7747] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 454.827433][ T7442] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.713922][ T7763] delete_channel: no stack [ 455.717857][ T7442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.822253][ T7442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.840034][ T7747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 455.855087][ T7747] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 456.112434][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.119696][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.217966][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.225093][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.346880][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.354079][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.572650][ T7705] bridge_slave_0: entered allmulticast mode [ 457.023449][ T7705] bridge_slave_0: entered promiscuous mode [ 457.326014][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.334187][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.344839][ T7705] bridge_slave_1: entered allmulticast mode [ 457.368317][ T7705] bridge_slave_1: entered promiscuous mode [ 457.647573][ T7785] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 457.898053][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.949333][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.047676][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.058457][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.068282][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 458.076280][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.088871][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.097250][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.105335][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.114300][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.127495][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 458.134871][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.392590][ T7785] zonefs (nbd0) ERROR: Not a zoned block device [ 458.401047][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.495452][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.724625][ T12] hsr_slave_0: left promiscuous mode [ 458.755139][ T29] audit: type=1400 audit(1724909439.860:733): avc: denied { module_load } for pid=7797 comm="syz.2.400" path="/sys/kernel/notes" dev="sysfs" ino=1375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 458.787331][ T7800] Invalid ELF header magic: != ELF [ 458.793820][ T12] hsr_slave_1: left promiscuous mode [ 458.814786][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.834651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.938209][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.962479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.102151][ T12] veth1_macvtap: left promiscuous mode [ 459.146911][ T12] veth0_macvtap: left promiscuous mode [ 459.163062][ T12] veth1_vlan: left promiscuous mode [ 459.169117][ T12] veth0_vlan: left promiscuous mode [ 459.717653][ T7816] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 460.053908][ T5312] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 460.181855][ T5222] Bluetooth: hci3: command tx timeout [ 460.263113][ T5312] usb 1-1: Using ep0 maxpacket: 32 [ 460.272799][ T5312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.305457][ T5312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.335975][ T5312] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.365897][ T5312] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.394708][ T5312] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 460.423263][ T5312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.442359][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.454403][ T5312] usb 1-1: Product: syz [ 460.462682][ T5312] usb 1-1: Manufacturer: syz [ 460.479959][ T5312] usb 1-1: SerialNumber: syz [ 461.014588][ T12] team0 (unregistering): Port device team_slave_1 removed [ 461.150788][ T12] team0 (unregistering): Port device team_slave_0 removed [ 462.276654][ T5222] Bluetooth: hci3: command tx timeout [ 462.750807][ T7705] team0: Port device team_slave_0 added [ 462.794599][ T7705] team0: Port device team_slave_1 added [ 462.924576][ T5312] cdc_ncm 1-1:1.0: bind() failure [ 462.985636][ T5312] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 462.996617][ T5312] cdc_ncm 1-1:1.1: bind() failure [ 463.019480][ T5312] usb 1-1: USB disconnect, device number 4 [ 463.157266][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.180216][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.220316][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.299078][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.306067][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.425488][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.112507][ T7705] hsr_slave_0: entered promiscuous mode [ 464.152266][ T7705] hsr_slave_1: entered promiscuous mode [ 464.212458][ T7705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.242788][ T7705] Cannot create hsr debugfs directory [ 464.336824][ T5222] Bluetooth: hci3: command tx timeout [ 464.502934][ T29] audit: type=1400 audit(1724909445.610:734): avc: denied { write } for pid=7862 comm="syz.0.403" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 464.588654][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.602607][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.618250][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.632654][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.641893][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 464.651680][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 465.393448][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 466.401289][ T7890] delete_channel: no stack [ 466.416836][ T5236] Bluetooth: hci3: command tx timeout [ 466.736992][ T5236] Bluetooth: hci5: command tx timeout [ 467.103710][ T7908] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.408'. [ 467.122170][ T7908] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 467.335763][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.633265][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.852236][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.945303][ T7918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.817069][ T5236] Bluetooth: hci5: command tx timeout [ 468.907441][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.945872][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.976711][ T7789] bridge_slave_0: entered allmulticast mode [ 469.015243][ T7789] bridge_slave_0: entered promiscuous mode [ 469.029717][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 469.235915][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.696686][ T29] audit: type=1400 audit(1724909450.780:735): avc: denied { ioctl } for pid=7920 comm="syz.0.410" path="socket:[20949]" dev="sockfs" ino=20949 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 470.039840][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.056099][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.063799][ T7789] bridge_slave_1: entered allmulticast mode [ 470.075239][ T7789] bridge_slave_1: entered promiscuous mode [ 470.390151][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.409302][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.705800][ T7929] input: syz0 as /devices/virtual/input/input10 [ 470.793456][ T7789] team0: Port device team_slave_0 added [ 470.812917][ T7789] team0: Port device team_slave_1 added [ 470.871813][ T7929] 9pnet_fd: Insufficient options for proto=fd [ 470.897960][ T5236] Bluetooth: hci5: command tx timeout [ 471.112889][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.171692][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.199521][ T7872] bridge_slave_0: entered allmulticast mode [ 471.220755][ T7872] bridge_slave_0: entered promiscuous mode [ 471.296071][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.343641][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.381509][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.395692][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.429399][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.455057][ T7872] bridge_slave_1: entered allmulticast mode [ 471.468699][ T7872] bridge_slave_1: entered promiscuous mode [ 471.750521][ T7705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.772473][ T7705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.847572][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.854518][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.886531][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.941685][ T7705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.972898][ T7705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.128182][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.145410][ T29] audit: type=1400 audit(1724909453.250:736): avc: denied { ioctl } for pid=7947 comm="syz.2.414" path="socket:[21119]" dev="sockfs" ino=21119 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 472.181891][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.451821][ T7789] hsr_slave_0: entered promiscuous mode [ 472.470579][ T7789] hsr_slave_1: entered promiscuous mode [ 472.481007][ T7789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.492384][ T7789] Cannot create hsr debugfs directory [ 472.514700][ T7872] team0: Port device team_slave_0 added [ 472.803968][ T7872] team0: Port device team_slave_1 added [ 472.977463][ T5236] Bluetooth: hci5: command tx timeout [ 473.085604][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.112414][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.149277][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.191676][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.212070][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.240104][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.443781][ T7872] hsr_slave_0: entered promiscuous mode [ 473.450508][ T7872] hsr_slave_1: entered promiscuous mode [ 473.459322][ T7872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.466974][ T7872] Cannot create hsr debugfs directory [ 473.563112][ T12] bridge_slave_1: left allmulticast mode [ 473.569028][ T12] bridge_slave_1: left promiscuous mode [ 473.574806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.586847][ T12] bridge_slave_0: left allmulticast mode [ 473.592526][ T12] bridge_slave_0: left promiscuous mode [ 473.599041][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.611706][ T12] bridge_slave_1: left allmulticast mode [ 473.617753][ T12] bridge_slave_1: left promiscuous mode [ 473.623486][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.632835][ T12] bridge_slave_0: left allmulticast mode [ 473.639064][ T12] bridge_slave_0: left promiscuous mode [ 473.644923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.346208][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.362665][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.373353][ T12] bond0 (unregistering): Released all slaves [ 474.512011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.523074][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.534830][ T12] bond0 (unregistering): Released all slaves [ 474.774014][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.984099][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.178434][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.185645][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.215627][ T12] hsr_slave_0: left promiscuous mode [ 475.227574][ T12] hsr_slave_1: left promiscuous mode [ 475.239529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.248016][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.259725][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.267293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.283246][ T12] hsr_slave_0: left promiscuous mode [ 475.289623][ T12] hsr_slave_1: left promiscuous mode [ 475.303540][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.311739][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.355727][ T12] veth1_macvtap: left promiscuous mode [ 475.361477][ T12] veth0_macvtap: left promiscuous mode [ 475.370801][ T12] veth1_vlan: left promiscuous mode [ 475.376247][ T12] veth0_vlan: left promiscuous mode [ 476.014739][ T12] team0 (unregistering): Port device team_slave_1 removed [ 476.063294][ T12] team0 (unregistering): Port device team_slave_0 removed [ 476.740660][ T12] team0 (unregistering): Port device team_slave_1 removed [ 476.791203][ T12] team0 (unregistering): Port device team_slave_0 removed [ 477.290251][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.297475][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.523086][ T7705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.554613][ T7789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.576087][ T7789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.662179][ T7789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.675999][ T7789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.311965][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.447781][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.498905][ T7872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.529667][ T7872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.552732][ T7872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 478.583206][ T7872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 478.651938][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.675108][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.682402][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.712799][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.720054][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.827751][ T7705] veth0_vlan: entered promiscuous mode [ 478.902085][ T7705] veth1_vlan: entered promiscuous mode [ 479.071473][ T7705] veth0_macvtap: entered promiscuous mode [ 479.102903][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.141512][ T7705] veth1_macvtap: entered promiscuous mode [ 479.195643][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.226362][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.233618][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.272998][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.280272][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.313883][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.329073][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.344113][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.356295][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.375627][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.410119][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.425505][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.437820][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.448479][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.461838][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.522268][ T7705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.534261][ T7705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.552283][ T7705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.563876][ T7705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.594361][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.864999][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.905209][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.041082][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.064032][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.511955][ T7789] veth0_vlan: entered promiscuous mode [ 480.566704][ T7789] veth1_vlan: entered promiscuous mode [ 482.025136][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.371270][ T7789] veth0_macvtap: entered promiscuous mode [ 482.424422][ T7789] veth1_macvtap: entered promiscuous mode [ 482.693839][ T7872] veth0_vlan: entered promiscuous mode [ 482.714863][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.458096][ T8061] delete_channel: no stack [ 483.586721][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.604909][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.676487][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.696994][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.711563][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.723523][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.751235][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.822793][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.881963][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.908005][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.917940][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.931851][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.945661][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.070991][ T7872] veth1_vlan: entered promiscuous mode [ 484.109903][ T7789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.133494][ T29] audit: type=1400 audit(1724909465.210:737): avc: denied { ioctl } for pid=8072 comm="syz.0.418" path="socket:[23765]" dev="sockfs" ino=23765 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.134613][ T7789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.181973][ T7789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.195359][ T7789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.247275][ T5229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 484.438239][ T5229] usb 3-1: Using ep0 maxpacket: 32 [ 484.473075][ T5229] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 484.516279][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.556148][ T5229] usb 3-1: config 0 descriptor?? [ 484.600937][ T5229] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 484.604893][ T7872] veth0_macvtap: entered promiscuous mode [ 484.649625][ T7872] veth1_macvtap: entered promiscuous mode [ 484.883356][ T5229] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 484.994981][ T8090] sctp: [Deprecated]: syz.0.419 (pid 8090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.994981][ T8090] Use struct sctp_sack_info instead [ 485.021457][ T8090] sctp: [Deprecated]: syz.0.419 (pid 8090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.021457][ T8090] Use struct sctp_sack_info instead [ 485.672051][ T5229] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 485.679642][ T5229] usb 3-1: media controller created [ 485.725658][ T5229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.816298][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.845870][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.885439][ T5229] usb 3-1: selecting invalid altsetting 1 [ 485.901976][ T5229] set interface failed [ 485.902892][ T5229] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 485.934971][ T5229] error writing reg: 0xff, val: 0x00 [ 486.003112][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.054296][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.114974][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.133259][ T5229] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 486.151555][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.183189][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.214514][ T5229] usb 3-1: USB disconnect, device number 3 [ 486.241186][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.266262][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.280192][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 486.318998][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.373855][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.398615][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.441918][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.467668][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.478149][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.512389][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.525618][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.545840][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.563600][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.585567][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.608597][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.643904][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.875371][ T7872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.886717][ T7872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.078121][ T8027] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 487.273552][ T7872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.284844][ T7872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.597296][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.605191][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.661624][ T8027] usb 2-1: Using ep0 maxpacket: 16 [ 487.691684][ T8027] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.730289][ T8113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 487.757908][ T8027] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.518798][ T8027] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 488.563695][ T8027] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 488.627727][ T8027] usb 2-1: Product: syz [ 488.649838][ T8027] usb 2-1: Manufacturer: syz [ 488.668683][ T8027] usb 2-1: SerialNumber: syz [ 493.229660][ T8027] usb 2-1: config 0 descriptor?? [ 493.235620][ T8027] usb 2-1: can't set config #0, error -71 [ 493.268758][ T8027] usb 2-1: USB disconnect, device number 4 [ 496.597984][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.605817][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.889641][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.918620][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.137971][ T8133] delete_channel: no stack [ 501.266457][ T29] audit: type=1400 audit(1724909482.360:738): avc: denied { ioctl } for pid=8164 comm="syz.3.433" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 501.439274][ T29] audit: type=1400 audit(1724909482.430:739): avc: denied { connect } for pid=8156 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.838418][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.850479][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.860479][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.871110][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.879597][ T5222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 501.887508][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.022975][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.029455][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.940875][ T8200] program syz.3.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.341503][ T29] audit: type=1800 audit(1724909484.450:740): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.435" name="bus" dev="overlay" ino=40 res=0 errno=0 [ 503.461882][ T8179] chnl_net:caif_netlink_parms(): no params data found [ 503.943664][ T5236] Bluetooth: hci0: command tx timeout [ 504.568908][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.581942][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.604100][ T8179] bridge_slave_0: entered allmulticast mode [ 504.768305][ T8179] bridge_slave_0: entered promiscuous mode [ 504.794904][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.577524][ T8224] delete_channel: no stack [ 505.765180][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.946564][ T29] audit: type=1400 audit(1724909486.910:741): avc: denied { read } for pid=8223 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 505.966026][ T8179] bridge_slave_1: entered allmulticast mode [ 505.975530][ T8179] bridge_slave_1: entered promiscuous mode [ 506.020217][ T5236] Bluetooth: hci0: command tx timeout [ 506.802784][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.844055][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.892902][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 508.816531][ T5236] Bluetooth: hci0: command tx timeout [ 508.820148][ T8179] team0: Port device team_slave_0 added [ 509.401861][ T8179] team0: Port device team_slave_1 added [ 509.709366][ T29] audit: type=1400 audit(1724909490.800:742): avc: denied { read } for pid=8246 comm="syz.4.447" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 509.873880][ T8258] syz.4.447: attempt to access beyond end of device [ 509.873880][ T8258] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 510.092368][ T29] audit: type=1400 audit(1724909490.810:743): avc: denied { open } for pid=8246 comm="syz.4.447" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 510.143227][ T8264] dccp_v6_rcv: dropped packet with invalid checksum [ 510.252199][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.291610][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.510296][ T8179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.534675][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.896568][ T5236] Bluetooth: hci0: command tx timeout [ 511.381591][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.494261][ T8179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.640482][ T8179] hsr_slave_0: entered promiscuous mode [ 511.660847][ T8179] hsr_slave_1: entered promiscuous mode [ 512.222095][ T8179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.751667][ T29] audit: type=1400 audit(1724909493.850:744): avc: denied { setopt } for pid=8283 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 513.006033][ T8179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.297745][ T29] audit: type=1800 audit(1724909494.410:745): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.450" name="bus" dev="overlay" ino=305 res=0 errno=0 [ 513.441122][ T8179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.993747][ T8309] netlink: 'syz.1.453': attribute type 4 has an invalid length. [ 517.033591][ T8310] netlink: 'syz.1.453': attribute type 4 has an invalid length. [ 517.233451][ T8179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.460244][ T8179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 520.734911][ T8179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 520.797120][ T8179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 520.954181][ T8179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 521.213768][ T8339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 521.319338][ T8339] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 521.439959][ T29] audit: type=1400 audit(1724909502.550:746): avc: denied { read } for pid=8335 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 521.443400][ T8339] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 521.583779][ T8339] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 521.878728][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.344365][ T8179] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.463891][ T8339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 522.475281][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.482554][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.490972][ T8339] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 522.617203][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.624442][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.536491][ T29] audit: type=1400 audit(1724909504.390:747): avc: denied { getopt } for pid=8363 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 524.236543][ T5391] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 525.296853][ T5391] usb 1-1: config 6 has an invalid interface number: 169 but max is 1 [ 525.375984][ T5391] usb 1-1: config 6 has no interface number 1 [ 525.392940][ T8179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.442722][ T5391] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 525.492536][ T5391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.516013][ T29] audit: type=1400 audit(1724909506.620:748): avc: denied { watch } for pid=8387 comm="syz.1.464" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 525.553371][ T5391] usb 1-1: Product: syz [ 525.562512][ T5391] usb 1-1: Manufacturer: syz [ 525.577064][ T5391] usb 1-1: SerialNumber: syz [ 525.828192][ T8179] veth0_vlan: entered promiscuous mode [ 526.909979][ T8179] veth1_vlan: entered promiscuous mode [ 526.993829][ T5391] usb 1-1: USB disconnect, device number 5 [ 527.143890][ T8179] veth0_macvtap: entered promiscuous mode [ 527.165550][ T8179] veth1_macvtap: entered promiscuous mode [ 527.203219][ T29] audit: type=1400 audit(1724909508.280:749): avc: denied { module_request } for pid=8399 comm="syz.4.467" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 527.302477][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.330608][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.362007][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.383867][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.396307][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.407777][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.426706][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.461706][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.517994][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.546599][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.663673][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.770355][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.829578][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.844348][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.880598][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.952412][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.000731][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.031632][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.042591][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.079170][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.125398][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.266605][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.333505][ T8179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.407043][ T8179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.432833][ T8179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.445914][ T8179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.789355][ T8417] netlink: 'syz.4.470': attribute type 4 has an invalid length. [ 529.206860][ T29] audit: type=1400 audit(1724909510.090:750): avc: denied { create } for pid=8414 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 529.854961][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 529.862980][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.909830][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.933121][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 529.953440][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.970876][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 529.979200][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.007774][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.043128][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.085972][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.105453][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.119622][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 530.142656][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.172845][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.199602][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.234524][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.299154][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.371081][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.384001][ T25] usb 5-1: config 0 has no interfaces? [ 530.421356][ T25] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 530.451848][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.463141][ T3037] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 530.490908][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.501526][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.534759][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.556990][ T25] usb 5-1: config 0 descriptor?? [ 530.581453][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.608569][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.654769][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.684306][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.706673][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.723244][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.737248][ T3037] usb 4-1: Using ep0 maxpacket: 32 [ 530.791992][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.832088][ T3037] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 530.843022][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.873918][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.882209][ T3037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.918316][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 530.945265][ T3037] usb 4-1: config 0 descriptor?? [ 530.960494][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 531.021964][ T3037] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 531.042565][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 531.089597][ T3037] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 531.104639][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 531.143637][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 531.151905][ T3037] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 531.179266][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 531.204650][ T3037] usb 4-1: media controller created [ 531.223443][ T5312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 531.296106][ T5312] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 531.317740][ T3037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.435028][ T3037] usb 4-1: selecting invalid altsetting 1 [ 531.460094][ T3037] set interface failed [ 531.460121][ T3037] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 531.497038][ T3037] error writing reg: 0xff, val: 0x00 [ 531.628130][ T3037] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 531.727367][ T5304] usb 5-1: USB disconnect, device number 4 [ 531.737157][ T3037] usb 4-1: USB disconnect, device number 4 [ 534.372051][ T29] audit: type=1800 audit(1724909515.440:751): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.480" name="bus" dev="overlay" ino=132 res=0 errno=0 [ 534.396562][ T3037] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 534.626491][ T3037] usb 3-1: Using ep0 maxpacket: 32 [ 534.637974][ T3037] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 534.651678][ T3037] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 23865, setting to 1024 [ 534.749862][ T3037] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 534.799764][ T3037] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 534.828114][ T3037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.866022][ T3037] usb 3-1: Product: syz [ 534.887360][ T3037] usb 3-1: Manufacturer: syz [ 534.897999][ T3037] usb 3-1: SerialNumber: syz [ 534.937714][ T8457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.295753][ T3037] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 536.632885][ T29] audit: type=1400 audit(1724909773.743:752): avc: denied { read write } for pid=8454 comm="syz.2.479" name="lp0" dev="devtmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 536.656363][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.710239][ T5312] usb 3-1: USB disconnect, device number 4 [ 536.713589][ T29] audit: type=1400 audit(1724909773.743:753): avc: denied { open } for pid=8454 comm="syz.2.479" path="/dev/usb/lp0" dev="devtmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 536.739904][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.767062][ T5312] usblp0: removed [ 536.810295][ T29] audit: type=1400 audit(1724909773.773:754): avc: denied { ioctl } for pid=8454 comm="syz.2.479" path="/dev/usb/lp0" dev="devtmpfs" ino=2433 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 536.835583][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.907441][ T8482] 9pnet_fd: Insufficient options for proto=fd [ 538.241789][ T8480] syz.3.485 (8480): drop_caches: 2 [ 538.770973][ T29] audit: type=1400 audit(1724909775.883:755): avc: denied { create } for pid=8486 comm="syz.3.488" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.101561][ T29] audit: type=1400 audit(1724909775.913:756): avc: denied { write } for pid=8486 comm="syz.3.488" name="file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.496485][ T29] audit: type=1400 audit(1724909775.913:757): avc: denied { open } for pid=8486 comm="syz.3.488" path="/16/file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.519034][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.588292][ T29] audit: type=1400 audit(1724909775.923:758): avc: denied { ioctl } for pid=8486 comm="syz.3.488" path="/16/file0" dev="tmpfs" ino=103 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.685125][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.694601][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.768730][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.776269][ T8487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.785228][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.792422][ T8487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.834635][ T29] audit: type=1400 audit(1724909776.943:759): avc: denied { unlink } for pid=7872 comm="syz-executor" name="file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 540.389816][ T8487] team0: Port device bridge0 added [ 540.935343][ T8489] bridge_slave_1: left allmulticast mode [ 540.970211][ T8489] bridge_slave_1: left promiscuous mode [ 540.976115][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.035969][ T8489] bridge_slave_0: left allmulticast mode [ 541.052920][ T8489] bridge_slave_0: left promiscuous mode [ 541.074306][ T8511] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 541.083033][ T8511] netlink: 'syz.2.492': attribute type 2 has an invalid length. [ 541.093938][ T8511] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 541.106655][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.199791][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.209731][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.218665][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.227113][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.234655][ T5222] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 541.242292][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.714069][ T29] audit: type=1400 audit(1724909779.821:760): avc: denied { ioctl } for pid=8507 comm="syz.3.491" path="socket:[25364]" dev="sockfs" ino=25364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 541.766598][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.600967][ T5222] Bluetooth: hci2: command tx timeout [ 544.608945][ T29] audit: type=1400 audit(1724909779.851:761): avc: denied { watch watch_reads } for pid=8507 comm="syz.3.491" path="/17/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 544.795700][ T8489] team0: Port device bridge0 removed [ 545.172300][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 545.199082][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.493'. [ 545.313685][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.521266][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.596638][ T8520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.494'. [ 545.697552][ T1064] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 545.842090][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.987555][ T8520] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 546.276942][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.657138][ T5222] Bluetooth: hci2: command tx timeout [ 546.692025][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 546.722853][ T8534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.753562][ T8534] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 547.193466][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.223587][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.238886][ T8512] bridge_slave_0: entered allmulticast mode [ 547.262744][ T8512] bridge_slave_0: entered promiscuous mode [ 547.310987][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.328999][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.346255][ T8512] bridge_slave_1: entered allmulticast mode [ 547.354691][ T8512] bridge_slave_1: entered promiscuous mode [ 547.600344][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.387320][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.515735][ T11] bridge_slave_1: left allmulticast mode [ 548.537241][ T11] bridge_slave_1: left promiscuous mode [ 548.548690][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.570209][ T11] bridge_slave_0: left allmulticast mode [ 548.575903][ T11] bridge_slave_0: left promiscuous mode [ 548.592626][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.779970][ T8561] dccp_v6_rcv: dropped packet with invalid checksum [ 549.562471][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.583117][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.609958][ T11] bond0 (unregistering): Released all slaves [ 549.735360][ T8512] team0: Port device team_slave_0 added [ 549.794642][ T8512] team0: Port device team_slave_1 added [ 549.908381][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.923499][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.954263][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.971356][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.006767][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.034745][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.175177][ T8512] hsr_slave_0: entered promiscuous mode [ 550.187353][ T8512] hsr_slave_1: entered promiscuous mode [ 550.194060][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.202512][ T8512] Cannot create hsr debugfs directory [ 552.846798][ T29] audit: type=1400 audit(1724909790.951:762): avc: denied { connect } for pid=8590 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 553.519581][ T29] audit: type=1326 audit(1724909791.331:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 553.802400][ T3037] IPVS: starting estimator thread 0... [ 553.948513][ T8599] IPVS: using max 17 ests per chain, 40800 per kthread [ 553.969180][ T29] audit: type=1326 audit(1724909791.331:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.063732][ T29] audit: type=1326 audit(1724909791.361:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.131829][ T29] audit: type=1326 audit(1724909791.361:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.234799][ T29] audit: type=1326 audit(1724909791.361:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.265628][ T29] audit: type=1326 audit(1724909791.381:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.324922][ T8512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.349958][ T29] audit: type=1326 audit(1724909791.381:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.610370][ T8512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.770809][ T8512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.777850][ T29] audit: type=1326 audit(1724909791.381:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.844095][ T29] audit: type=1326 audit(1724909791.391:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6debf79ef9 code=0x7ffc0000 [ 554.879857][ T8512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 556.083822][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.260503][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.329323][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.336522][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.410753][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.417911][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.464119][ T8621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.300133][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.500272][ T8512] veth0_vlan: entered promiscuous mode [ 557.548876][ T8512] veth1_vlan: entered promiscuous mode [ 557.643015][ T8512] veth0_macvtap: entered promiscuous mode [ 557.700625][ T8512] veth1_macvtap: entered promiscuous mode [ 557.757808][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.774810][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.794670][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.806944][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.819103][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.830529][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.840803][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.851769][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.862399][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.873277][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.893975][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.935052][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.968879][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.107759][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.267961][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.284440][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.718687][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.746583][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.766515][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.789261][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.808711][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.829130][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.845048][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.857061][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.875459][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.892075][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.954981][ T8512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.971372][ T8512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.980468][ T5391] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 559.998680][ T8512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.016997][ T8512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.180509][ T5391] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 560.189384][ T5391] usb 3-1: config 0 has no interface number 0 [ 560.195458][ T5391] usb 3-1: too many endpoints for config 0 interface 208 altsetting 167: 211, using maximum allowed: 30 [ 560.207914][ T5391] usb 3-1: config 0 interface 208 altsetting 167 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.220156][ T5391] usb 3-1: config 0 interface 208 altsetting 167 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.390919][ T5391] usb 3-1: config 0 interface 208 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 211 [ 560.404528][ T5391] usb 3-1: config 0 interface 208 has no altsetting 0 [ 560.411525][ T5391] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 560.421550][ T5391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.433763][ T5391] usb 3-1: config 0 descriptor?? [ 562.223179][ T8027] usb 3-1: USB disconnect, device number 5 [ 563.472170][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.484406][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.902710][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.909457][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.341279][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.347770][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.536551][ T30] INFO: task kworker/1:6:5312 blocked for more than 143 seconds. [ 689.544314][ T30] Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 689.560088][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.573603][ T30] task:kworker/1:6 state:D stack:25088 pid:5312 tgid:5312 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 689.584139][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 689.591275][ T30] Call Trace: [ 689.594592][ T30] [ 689.598281][ T30] __schedule+0xe37/0x5490 [ 689.602757][ T30] ? __pfx_mark_lock+0x10/0x10 [ 689.607919][ T30] ? __pfx___schedule+0x10/0x10 [ 689.612807][ T30] ? schedule+0x298/0x350 [ 689.617445][ T30] ? __pfx_lock_release+0x10/0x10 [ 689.622513][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.634165][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 689.676359][ T30] schedule+0xe7/0x350 [ 689.680510][ T30] schedule_preempt_disabled+0x13/0x30 [ 689.686016][ T30] __mutex_lock+0x5b8/0x9c0 [ 689.706039][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 689.712725][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 689.719522][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 689.725898][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 689.732673][ T30] process_one_work+0x9c5/0x1b40 [ 689.737996][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 689.743064][ T30] ? __pfx_process_one_work+0x10/0x10 [ 689.748555][ T30] ? assign_work+0x1a0/0x250 [ 689.753171][ T30] worker_thread+0x6c8/0xed0 [ 689.757858][ T30] ? __kthread_parkme+0x148/0x220 [ 689.762900][ T30] ? __pfx_worker_thread+0x10/0x10 [ 689.768062][ T30] kthread+0x2c1/0x3a0 [ 689.772150][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.777410][ T30] ? __pfx_kthread+0x10/0x10 [ 689.782014][ T30] ret_from_fork+0x45/0x80 [ 689.786505][ T30] ? __pfx_kthread+0x10/0x10 [ 689.791115][ T30] ret_from_fork_asm+0x1a/0x30 [ 689.795902][ T30] [ 689.799029][ T30] [ 689.799029][ T30] Showing all locks held in the system: [ 689.806888][ T30] 4 locks held by kworker/u8:0/11: [ 689.812100][ T30] #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 689.822567][ T30] #1: ffffc90000107d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 689.832619][ T30] #2: ffffffff8fa0e190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbb0 [ 689.842035][ T30] #3: ffffffff8fead2a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 689.852246][ T30] 3 locks held by kworker/u8:1/12: [ 689.857414][ T30] #0: ffff8880b923edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 689.867443][ T30] #1: ffffc90000117d80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 689.880078][ T30] #2: ffffffff8dc59ad0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 689.889945][ T30] 1 lock held by khungtaskd/30: [ 689.894817][ T30] #0: ffffffff8ddb5d20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 689.904953][ T30] 1 lock held by klogd/4659: [ 689.911149][ T30] #0: ffff8880b923edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 689.921325][ T30] 2 locks held by getty/4979: [ 689.926008][ T30] #0: ffff88802ae630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 689.935826][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 689.951984][ T30] 3 locks held by kworker/1:6/5312: [ 689.957287][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 689.967805][ T30] #1: ffffc9000398fd80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 689.980797][ T30] #2: ffffffff8fead2a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 689.992283][ T30] 2 locks held by syz-executor/8512: [ 689.997689][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.006271][ T30] #1: ffffffff8fead2a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13b/0x750 [ 690.017883][ T30] 2 locks held by syz.1.494/8519: [ 690.022932][ T30] #0: ffff8880216bd100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 [ 690.032804][ T30] #1: ffffffff8fead2a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 690.043002][ T30] 2 locks held by syz.4.496/8534: [ 690.048190][ T30] #0: ffffffff8fead2a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x16e/0x570 [ 690.061396][ T30] #1: ffff8880216bd100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2e0 [ 690.070539][ T30] 2 locks held by syz-executor/8634: [ 690.075831][ T30] #0: ffff88805a858918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bd/0x480 [ 690.085327][ T30] #1: ffffffff8fead2a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 690.095336][ T30] 2 locks held by syz-executor/8635: [ 690.100721][ T30] #0: ffff8880765fe918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bd/0x480 [ 690.110220][ T30] #1: ffffffff8fead2a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 690.120212][ T30] 1 lock held by syz.3.515/8648: [ 690.125152][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.134011][ T30] 1 lock held by syz.3.515/8649: [ 690.139402][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.148721][ T30] 1 lock held by syz.2.517/8661: [ 690.153686][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.162393][ T30] 1 lock held by syz-executor/8665: [ 690.170624][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.179779][ T30] 1 lock held by syz-executor/8667: [ 690.184986][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.193634][ T30] 1 lock held by syz-executor/8669: [ 690.199052][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.207624][ T30] 1 lock held by syz-executor/8672: [ 690.212826][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.221434][ T30] 1 lock held by syz-executor/8673: [ 690.226757][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.235268][ T30] 1 lock held by syz-executor/8675: [ 690.241942][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.250486][ T30] 1 lock held by syz-executor/8677: [ 690.255665][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.264428][ T30] 1 lock held by syz-executor/8683: [ 690.270868][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.281112][ T30] 1 lock held by syz-executor/8686: [ 690.286676][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.295182][ T30] 1 lock held by syz-executor/8687: [ 690.300778][ T30] #0: ffffffff8e9e7348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 690.309530][ T30] [ 690.311872][ T30] ============================================= [ 690.311872][ T30] [ 690.321481][ T30] NMI backtrace for cpu 1 [ 690.325827][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 690.336322][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 690.346571][ T30] Call Trace: [ 690.350185][ T30] [ 690.353097][ T30] dump_stack_lvl+0x116/0x1f0 [ 690.357779][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 690.362715][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 690.368693][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 690.374662][ T30] watchdog+0xf0c/0x1240 [ 690.378907][ T30] ? __pfx_watchdog+0x10/0x10 [ 690.383594][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 690.388801][ T30] ? __kthread_parkme+0x148/0x220 [ 690.393835][ T30] ? __pfx_watchdog+0x10/0x10 [ 690.398542][ T30] kthread+0x2c1/0x3a0 [ 690.402610][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.407813][ T30] ? __pfx_kthread+0x10/0x10 [ 690.412403][ T30] ret_from_fork+0x45/0x80 [ 690.416834][ T30] ? __pfx_kthread+0x10/0x10 [ 690.421424][ T30] ret_from_fork_asm+0x1a/0x30 [ 690.426214][ T30] [ 690.429921][ T30] Sending NMI from CPU 1 to CPUs 0: [ 690.435171][ C0] NMI backtrace for cpu 0 [ 690.435185][ C0] CPU: 0 UID: 0 PID: 1064 Comm: kworker/u8:6 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 690.435212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 690.435224][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 690.435253][ C0] RIP: 0010:__lock_acquire+0x3bc/0x3cb0 [ 690.435281][ C0] Code: 81 e2 00 00 03 00 09 d8 41 c1 e1 13 09 d0 89 ea c1 e2 12 81 e2 00 00 04 00 09 d0 8b 94 24 48 01 00 00 44 09 c8 c1 e2 14 09 d0 <8b> 94 24 38 01 00 00 c1 e2 15 09 d0 41 8b 55 20 81 e2 ff 1f 00 00 [ 690.435299][ C0] RSP: 0018:ffffc90004257920 EFLAGS: 00000006 [ 690.435315][ C0] RAX: 0000000000020000 RBX: 0000000000000000 RCX: 1ffff1100451a52a [ 690.435329][ C0] RDX: 0000000000000000 RSI: 0000000000000021 RDI: ffff8880228d297c [ 690.435343][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 690.435355][ C0] R10: 000000000000000f R11: 0000000000000002 R12: 0000000000000000 [ 690.435368][ C0] R13: ffff8880228d2958 R14: 0000000000000021 R15: ffff8880228d1e00 [ 690.435381][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 690.435403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.435417][ C0] CR2: 0000556b82ffd078 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 690.435431][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 690.435444][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 690.435457][ C0] Call Trace: [ 690.435464][ C0] [ 690.435471][ C0] ? show_regs+0x8c/0xa0 [ 690.435499][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 690.435527][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 690.435554][ C0] ? nmi_handle+0x1a9/0x5c0 [ 690.435572][ C0] ? __lock_acquire+0x3bc/0x3cb0 [ 690.435595][ C0] ? default_do_nmi+0x6a/0x160 [ 690.435616][ C0] ? exc_nmi+0x170/0x1e0 [ 690.435636][ C0] ? end_repeat_nmi+0xf/0x53 [ 690.435660][ C0] ? __lock_acquire+0x3bc/0x3cb0 [ 690.435683][ C0] ? __lock_acquire+0x3bc/0x3cb0 [ 690.435706][ C0] ? __lock_acquire+0x3bc/0x3cb0 [ 690.435729][ C0] [ 690.435735][ C0] [ 690.435744][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 690.435768][ C0] ? lock_acquire+0x1b1/0x560 [ 690.435796][ C0] lock_acquire+0x1b1/0x560 [ 690.435819][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 690.435842][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 690.435866][ C0] ? batadv_iv_ogm_schedule_buff+0x75c/0x14d0 [ 690.435887][ C0] ? __pfx_lock_release+0x10/0x10 [ 690.435912][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x14d0 [ 690.435935][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 690.435959][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 690.435981][ C0] ? batadv_send_skb_packet+0x56e/0x6b0 [ 690.436007][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 690.436034][ C0] process_one_work+0x9c5/0x1b40 [ 690.436062][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 690.436086][ C0] ? __pfx_process_one_work+0x10/0x10 [ 690.436113][ C0] ? assign_work+0x1a0/0x250 [ 690.436136][ C0] worker_thread+0x6c8/0xed0 [ 690.436163][ C0] ? __pfx_worker_thread+0x10/0x10 [ 690.436188][ C0] kthread+0x2c1/0x3a0 [ 690.436205][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.436230][ C0] ? __pfx_kthread+0x10/0x10 [ 690.436248][ C0] ret_from_fork+0x45/0x80 [ 690.436277][ C0] ? __pfx_kthread+0x10/0x10 [ 690.436296][ C0] ret_from_fork_asm+0x1a/0x30 [ 690.436324][ C0] [ 690.443251][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 690.443268][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 690.443295][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 690.443308][ T30] Call Trace: [ 690.443317][ T30] [ 690.443326][ T30] dump_stack_lvl+0x3d/0x1f0 [ 690.443356][ T30] panic+0x6dc/0x7c0 [ 690.443380][ T30] ? __pfx_panic+0x10/0x10 [ 690.443404][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 690.443427][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 690.443458][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 690.443480][ T30] ? watchdog+0xd76/0x1240 [ 690.443508][ T30] ? watchdog+0xd69/0x1240 [ 690.443542][ T30] watchdog+0xd87/0x1240 [ 690.443570][ T30] ? __pfx_watchdog+0x10/0x10 [ 690.443598][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 690.443627][ T30] ? __kthread_parkme+0x148/0x220 [ 690.443659][ T30] ? __pfx_watchdog+0x10/0x10 [ 690.443687][ T30] kthread+0x2c1/0x3a0 [ 690.443706][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.443733][ T30] ? __pfx_kthread+0x10/0x10 [ 690.443753][ T30] ret_from_fork+0x45/0x80 [ 690.443784][ T30] ? __pfx_kthread+0x10/0x10 [ 690.443804][ T30] ret_from_fork_asm+0x1a/0x30 [ 690.443836][ T30] [ 690.451651][ T30] Kernel Offset: disabled [ 690.904025][ T30] Rebooting in 86400 seconds..