last executing test programs: 43.830454793s ago: executing program 4 (id=5): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 43.77116267s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 43.716339911s ago: executing program 4 (id=6): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000000)={0x6f, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x445c) sched_setaffinity(0x0, 0xfffffffffffffee7, &(0x7f0000000300)=0xd12) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001a5c0)=""/102400, 0x19000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) userfaultfd(0x801) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001540)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', '', [{0x20, 'clear_refs\x00'}, {}, {0x20, 'clear_refs\x00'}, {0x20, 'TIPC\x00'}], 0xa, "89163f771a82949cf386947232b50eb1f08f2642e8c215e5dd69f7433b5ad9df1fbab00f135c"}, 0x49) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) migrate_pages(0xffffffffffffffff, 0x101, &(0x7f0000000340)=0x4, &(0x7f0000000380)=0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYRES16=r6, @ANYRES8=r7, @ANYRES32=r1], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 42.945974511s ago: executing program 1 (id=7): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, 0x4}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$incfs(r4, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x4) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0x9c}, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 42.832162977s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 41.430918717s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 41.386450956s ago: executing program 1 (id=11): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfffffffffffff000, 0x200000) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000180)=0x1ff) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7ff}]}}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x34}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000040)=0x3, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r8}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c00024000000000000000101400018009"], 0x104}}, 0x40000) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x20000023896) 40.358034283s ago: executing program 0 (id=14): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f6"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, 0x4}) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0x9c}, 0x9}, 0x1c) 40.225884245s ago: executing program 4 (id=15): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x1, 0xa, &(0x7f0000000600)=""/10}, {0x8000000, 0x3e, &(0x7f0000000640)=""/62}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) 40.145773943s ago: executing program 4 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 40.092420157s ago: executing program 0 (id=17): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000100), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 39.499236229s ago: executing program 32 (id=17): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000100), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 38.823085742s ago: executing program 4 (id=20): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0)='usrquota') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, 0x4}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$incfs(r5, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0x9c}, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 38.609486748s ago: executing program 4 (id=22): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0006070b"], 0x38) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 38.073316472s ago: executing program 33 (id=22): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0006070b"], 0x38) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 36.864243209s ago: executing program 3 (id=28): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8020}, 0x8040) 36.848369456s ago: executing program 1 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 35.754126794s ago: executing program 1 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 34.974918724s ago: executing program 3 (id=31): r0 = socket(0x28, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c030109021200"], 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000080000000c009900010000"], 0x20}}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r8, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8000, @mcast1, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@hoplimit={{0x10, 0x29, 0x43}}], 0x10}}], 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) openat(r6, &(0x7f0000000180)='./bus\x00', 0x0, 0x64) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 34.636453784s ago: executing program 1 (id=32): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) io_uring_setup(0x63d6, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c00000040000900fffffffffddbdf250100000004001f0064000180664daf258421409993b071068ff774eed479ee4e29250582681b6edd83f3af6cb8803c581cef8f169bc52f97b3ced597fe5a237df002de7f7dac8d812d5d21fa6fe19b7408005300", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001dc0)='7', 0x1}, {&(0x7f0000000080)="1ecbfa8ef14a1c37a764dd9b4330b48efa77be6c643f97a17299ad30a047f71d31d31a5764ccb236ff0c5c55a55288ab3cc11791bf93a92e8d792cbe9668fdb8af616217cb0f14dd5999d57977", 0x4d}, {&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000001e00)="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", 0x1000}], 0x4, 0x0, 0x0, 0x81}}], 0x1, 0x4000040) 34.337572574s ago: executing program 1 (id=33): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x63d6, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.194840217s ago: executing program 34 (id=33): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x63d6, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.137786474s ago: executing program 2 (id=36): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a800800058004000180"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0x5646, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3fffff) 33.636542552s ago: executing program 2 (id=37): mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='9d;'], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) io_uring_enter(r1, 0x644, 0x3, 0x21, 0x0, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r8, &(0x7f0000000140)='./file0\x00') 32.574676949s ago: executing program 2 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 31.860692136s ago: executing program 3 (id=39): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8020}, 0x8040) 31.749549972s ago: executing program 2 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 30.840239722s ago: executing program 2 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) io_uring_setup(0x63d6, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c00000040000900fffffffffddbdf250100000004001f0064000180664daf258421409993b071068ff774eed479ee4e29250582681b6edd83f3af6cb8803c581cef8f169bc52f97b3ced597fe5a237df002de7f7dac8d812d5d21fa6fe19b7408005300", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001dc0)='7', 0x1}, {&(0x7f0000000080)="1ecbfa8ef14a1c37a764dd9b4330b48efa77be6c643f97a17299ad30a047f71d31d31a5764ccb236ff0c5c55a55288ab3cc11791bf93a92e8d792cbe9668fdb8af616217cb0f14dd5999d57977", 0x4d}, {&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000001e00)="649a1ee9acc4a3c57d7211df55f77b81786be2930b3ae1f3ece180d8fa0608e9a3c8b5d15725db46a78b884bf82f499d138edd33cf69957c522ec40bb12b2b1658925c714f4f6bfc7baf62581ebeff4595d793a5d3a7f293595ee4ae18f0e4e9ffcad905a040f609a83409306326d4ec4ad3954f994a0db4e59407f8eeb8a638cf05d8f489d1d37910500a9cc648d2eca87e8a6c272673d8731e209c2232a07fbdd62b0e3ecae02c230e0cbe753b86a80bc0845460837282a4ac81ad23611a08655e806fc852aa869376d978125753fabaac65cfe98cce2af4b305632e7dd67861bdc7574a4224febc02469e2cf4b59624d95301568c96bcac63730c61389af370b24be24d4553ebe267590cc1f44af2d6b2b8eae43ab5eee2b51a76bcf13bab3506655951789f208b8d541a852ba64fe1c1fa89ecaf89a8f9de8b94a74dd59b26bfcb9f4a6129292680bb3d3770c293141142bdd3661b7a115909fc2d9835d65f90fa55ef93b6bca732c4a9f3a4eda89f65f26b95cb76298b984d517d36cae6f1b843fc838c5392784463db47aa3779ae739a6afc0b8b81a249c6230dc1e66443377034d1eb658041bacfc48cc4b029f8b0e509b14494a32bc4885ddc624cf1df7c246a7026186320a77063a70ab07bc49e86d9ceb29119663789281e77b8396b3c39b8d99eef439e7cc3817214d22d84f38d14b37f7c745539d3e34670d53bcf0fcfba50b2cdff8d7c4e790cb1a82edc7187ad30ffe63dbd704e3113c966e2f0a7b96f72c81ef95e6f39650375b732ee51cd2a929b1549f16d5090cfc28ca69d754803e7754cd9f1343fea1dcfaa5745af9b0c604f33d5a0ea43dcec125f272d33fbef82772c99ed22385ff4a81aae4141230690d087a29e280bbfb0fb8e917154364a9070121db513e34581c6d3de75cfeb12661909a5c03c4f150773c18f0c0ae5eaba6807073105a1e5e10c077c3cd6dc43dbc47ebfdf2668e8b570aeb0f3d1b6854aa84e3cd835f5ec84b14e97c475cbbdb47edbfef827a05f1c4e437f809d9210aba12ba16a70d44f71f06360b7f5a861de4c776262be18e5b312939003b002cbdf94aba08362f7481ecc19e0fc5364303ec33472ab0e2971db27ba0e8d5de04fffda8679b496e8618967c3208e5676a3fc41f312ac64d367e2daed18f0b5a8186db69ad24c380b7d848458b080f1769f8f7d31f83c6441a023b7c21a099191e851b43b163df9f605d0360535d9e61ddf2a37650e4e0798f5502f534fb5a69a757f2ff11330f24290eb574b70526bdd23f91a190bfc41a78b925662f99e406e36738f432f267c7a8686c907d5a14ec7b951d5e218603b01cf7e17e2660c372cccd6928125f1a3d05b8ca3194d15e63c4b51c0d1d9d5258773224f98405007714f49071053425c03e80953c7f1f31b078f1b3723ceeb3094e1115855a797272a7a4c44cdb91c3183a4a9643c8b41e9bab4107337d7640bbfd4aa6bbdf85d20bed556572755191c72d17c8ba27eac1337af0291f4ecb13dbf06d841a02f5dc80e4f41eb85918e70e6457cb508720b7dca5b97e92bef0b1f1b51ee5ac028c04facc6515d7cbe748bdd4e52cce69f8c913ec1e837f2f8868c2a0acf3619f5dc925590a74830c47d876c9c6a076142a082d12d119579e2808182125377fde8e59a6ec49845f40a403c2bc55a3dada7a9394ccf85a765e31a6a586699e5f034089c3d49317e6ed03b999bf57898c524a7303ebc9d5e341f4dfc6380571b348aa14c30cdbc63de86edb86a0839f62d0e0f3b1ad76952add19092720a5bcae3d4fbd905c2f7233e55d38d1676ee18d4927e746a063fca03acdf8419381458142f5cf76f045c5eb0100d5af74486f903826d29de735331551f7cba7b8e1fc00b221c3f24e2512e335e5d858d30f73ca25825062aec9cb94de750a6559a580f460c220e49a9ef428aae5102673a1e083bbc7b257fea8a86cf27cc9efdb9750cda73fd6de03e9c6eb1a68e6fedb3719357a84b533552d29a5add2950ef4e77582051f8499a3ee4ab67c51a8bff0797ab287dda5b3afe42c93d306f82dd4f7d1d58b7393a229d84c1bda2dd1170299d9f1bc91b267b6781978cbcd7d38feb24cce87bca42a5bdec8e716512908d4ed8a38b87f57f6f29e8d56fdbc89443fd5f9cf0cb4e7e728e67ac82d44d0a18f8d462a08423c3935797da3c9f91d55c948dd17ee0c9aa404198c0eff550b0e0a6db2da529169943c0c52d38853594cd1a931e39538adf78277b6385987c80a285e1e7b2ff3d24ce401975fc1e8ff2679e894de3397f4f80763069726a19d34bfffe949b87f5dcc2591c2719efba11d612a5db0098dc39fad642b1dbe9443e6f7944178b8787341de3cf905b62e34e76c6f511c2b5705aa3763d572be94e10966b047fca2ccfc2a43128109b72e436dded6157d3e8cd86228b5bbf88b2bc4cd02f1b63bce44877fc0ad576b9442f071b3f60b695f85b71b622b0b25c0a44446ff9f3860e88fd9c6fb6526571f1e694a2e1c6d58b71216444076fdce0af17f35a9e3a0d4399059b4ef835cc909d3ea571b2dec597a820610dc4d506aa77382ccad42c53f526110767dd9fcde03df2b33038c20fb847764667ff24a4b4253da09c0710c02c498fa4b7e17a2834152aee8bfd50c4bcadd843e6c66358cbd0aba56856b75ddf62aeea56c041341652ef320b605713c4f87f65e11eb8cd372649b2565c0ba95e6ec1baac4d0797d058a3bfcd8f3a503aa8c6ab176e1102efb8e8717e6e02976ae8bb9a473f308b3f7b8fa3aaee7b4a8ced3a186c9474b2beed754b70fbf59d134f0d4c71ac122be75450b906453cf6d6b95229b59878861c48b41dbb8cd2b85ee14b91c388bd0a90855b3493e75213d807d297da5462ba2a8b7de59c398cee5366cc5c6386d1ac0d4f31f443d7bb93c47dd32739d2b9f26e6daeafce0e51fa8fb2cf9bc88e5c62c3824bc718efa014cec068b6c5546b1132f2cd800209db4d96aec7e5704fd5937f7cba819dfca3018c7bc801321e8efdfc822043e75f5ff048df716b9b7ea0a0f75ca5073af527363ea90cee2bee8031296602cfd9e78dfd3dda91c226a64cf1526dbb17cde97b45fce84e3ae228b18d2f4dd84544ae77ec4f78cc94eb30e40e207eaa501008bbe6d1e9373c1178a9a2f5584fdba2a98216d181cafc7289bc8ea179ff4b5d16d6f635f0890823b35ded142b93bf324b5dc87d5dee6f0c8529d4e900962ae3b19e946dcf3bef0801e0e8f3de96f1a097661d40a7ca77c90364fd2c0fc25ad3fe9060d721ecefe7be45595ec99c01245f3a78770df4d0310e4873379e75c9ee2fc5e6f2ea2385be7940b86c08c7bbc10b75af9dcb5cd86d17b9dc0219876f61c8de67bfb8120becdf2bb5429770141fd809e79a911616fa67ea1f9a3b2791f5c624f79968407e3071854b17308970dc67491d5d4fb174cccbbb616e1b1a32089bf64645b320f9c14a4a0116900d581eddaaa88e8c8c061c5d50e6a35a3c63439472339a28bcb25b4f89afdfcc2312a6c7659b487fd48efc52acc0f4e48b5b3bfabd470f50e7ab1b2b56f4b5eb2c55a769bf3465f7ab36552b4a2e45b8ea604f6d9b9770430805de1e87188cd2711599e649087c286a822f388d1f64838140e01be1f20a7ac0360c3db623eaa15a3355c89ba4afe46e5d9cf9e92caeaf82a24760561131ca37aa68aa9564bcebbb3156c0e724c83e7be70e7b83d03ec83c5ba2131f4db67063372ccfd1e4687fff23a9edb732cd8c147592be8c3905748bb4ecdb6bce646eb94fe8b45a598c48eaf6a047c0b3a96804090c8cd348ce63f8a15f7d7b17ddc50576c838dcee533b9b1c3ce3e98df40c99914896ddca7ed011ab54c1de3723568ebf25aa5b4d68c39d23c3a285bb120b945731fbef810c85d35e08cefea345556e007c7d83d526f6b46442c9f7fa21a1120d52671ca8627002f93f23aebc1db4318e5e07b87a7c1efe2f0fc659eb103cd8f436c22da8973723811d55cc1af2b4657bfad8da8377b45e23ea6332b374d57733bfc9cb589ce9edb8492cbfd09538ed9110fae7fe58426fb5eea429d36e2039432f927e7f6553159ee2f55554f3032d83e8ee6477aed4b9dcf209305ff580e72d3b91ccfef42bdad2213a4e8e53ba7bfc34d717eb02a276b0132753e3dc583eea5e312891f80212d926652eb39ecdedc2824d444050951eb9add52d19e33a9e728e8214df07daaafde51a4ba84607188570744c2061efe531845ea879c93a6d882710c9f589905592eae7991e235289c4c9b64707b195f5b0c551eb5bf3f6c93acb38def1f14129bdff380f3dae429ad4579d69333870c820d6e9cb3d48a9ba4decaeed5bd5b88141c482f9f313ccef3343bf710c74bb4aca4983f0149ac74261cda798ce68020f9a1ea7aa42045c81925f15bd8043c83e9522096124c7406e42bc5b292db743a3be22893c9a1777251862b7ab0a52d669ae842cfed27d5d865dbc760dc9fa2f159af8d4fc3bdab6b7f36bf1b4b7a04f5e2f9bbcdefd73c11718f61e04c59a8544bd11693885ae1303a794f496e47cb333699a0d89f6f11ab5fc3d061d83088df0c1cdcc23e38a4772cb4260677d5f07fe53ea9c4d19345b7daa44fcad5295eda3d20cf02d0ce7828a563c8269563e7486f6daaa9b4386275b96519cff156aa936552d4169c921f96c9172a827322c8d5d65a1e9c6034a47d3e26b3567e7034a1c1de2b521ef94d769dff847fc551f72dc45e4493d0cfea724212f32407d91481953984727366908c7bfdf517dbfc41c67516316a2cce31769d3fa7bbd20f146c17eb8d0c67ed8f9cfcd4a74d6a54bb572b2857c754dd7f06c5cda8f5f4242755787045146f187e2d8803696f9857d5953fffd2b88711051ea76bc364a51a08d07a85b5a8d743660532812dd1c5d08093b33623a3da6a5e857323a1273fb389252165eef627df91f9e9eeba17dcc57c26ae3cafd2c18647174ad5d0e5e5ba839d91f8d382aa1d3b058b1825be7b0f40b9db6f960d40965266ce98764136158514dac5b085d3a1174eadee395dc50aa8962e32a5a5a4c04c06cfa1387872f0cd78a4380ec910d0a62cd4457b856c9d6e97ba07c8a2fea29025f90efc23d86e57405c62c7e68615f886bedd87639f21386f8dea484a31a2c334393f8bd426e00eeda668a7253500e7debc17063aef690ba679867830e0f289246bb7c37cfab5dcdf637347f6f8819c724af1b4c9cd3fd8d3fa10af566e1b8ca44a627ce6461888cf372a7a76d8ccd91e4498b7ab78e1adf2229b2bc7e55b5a5a30f833b0bd3a0abc75ebc9fd4551ecb00b9eae51dc5d1a141d7425dc2dfda7f7c5a14f96a78fc6c5c62b8c63906cf1b64df9f11c5ffaa076874dc6c369d63eac84fcf8721823639c9ae2031e6821c69cd01dd1d4990158cbae7bae5ff4f54c67127e40119e5dd9b4a30b04d3ee493768bae5b7a05e6360b2b75dfce05c569880c1140040aebb679bb8891a997166cb4589c1259187cfa6c6adf70c8c2ee88ba1fbd8ad78ba49b49db261f0e4ec51499c4b53b1fef6ffc5e537b4f51769d97e16056f7d84bb241acd7494e8972a3e691723f02788def1e3912db80718b6d303ee853e25cca2d1c17e0d8e9322bd0e97f8a23f8a58e297eefdd5788497450a33665dfc5499aa8d4dc5ddafa783a574e8472ed845ae15689125d4dda32ecab458a27da494927603b29294528894e49c2b300b2f00d7ee8d2506b598e40374a58b9922116ea63668cb2afc4cf6ae16cfeb6", 0x1000}], 0x4, 0x0, 0x0, 0x81}}], 0x1, 0x4000040) 30.701638272s ago: executing program 3 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 30.045681812s ago: executing program 2 (id=43): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x1, 0xa, &(0x7f0000000600)=""/10}, {0x8000000, 0x3e, &(0x7f0000000640)=""/62}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) 29.964764713s ago: executing program 35 (id=43): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x1, 0xa, &(0x7f0000000600)=""/10}, {0x8000000, 0x3e, &(0x7f0000000640)=""/62}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) 29.882399248s ago: executing program 5 (id=18): socket$inet6(0x10, 0x2, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x4044004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r5}, 0x10) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f00000025c0)=[{&(0x7f0000000100)=""/184, 0xb8}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f0000002fc0)) r8 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/244, 0xf4}, 0x5}], 0x1, 0x8e9e5e0154f708bc, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r9, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000050001000700000009000200"], 0x64}}, 0x0) 29.776525492s ago: executing program 3 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0xf) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x29, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000440)={0x7, 0x4, 0x0, [{0x4017, 0x1, 0x1, 0x5, 0x6, 0x9, 0x3, '\x00', 0x2}, {0x4, 0xc3, 0x6f3, 0x9, 0x8, 0x6, 0x4, '\x00', 0x9}, {0x400, 0x3, 0x9, 0xff, 0x5, 0x6, 0x80, '\x00', 0x3}, {0x5e28, 0x7ff, 0x8, 0xc9, 0x1, 0x4, 0x3, '\x00', 0x4}]}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)}], 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 29.305751608s ago: executing program 3 (id=46): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a800800058004000180"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0x5646, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) 29.203874457s ago: executing program 36 (id=46): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a800800058004000180"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0x5646, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) 29.177515677s ago: executing program 6 (id=23): syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000010c0)={[0x3]}, 0x8) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 28.554106303s ago: executing program 5 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 28.274480975s ago: executing program 6 (id=49): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8020}, 0x8040) 27.273176294s ago: executing program 5 (id=50): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) io_uring_setup(0x63d6, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c00000040000900fffffffffddbdf250100000004001f0064000180664daf258421409993b071068ff774eed479ee4e29250582681b6edd83f3af6cb8803c581cef8f169bc52f97b3ced597fe5a237df002de7f7dac8d812d5d21fa6fe19b7408005300", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001dc0)='7', 0x1}, {&(0x7f0000000080)="1ecbfa8ef14a1c37a764dd9b4330b48efa77be6c643f97a17299ad30a047f71d31d31a5764ccb236ff0c5c55a55288ab3cc11791bf93a92e8d792cbe9668fdb8af616217cb0f14dd5999d57977", 0x4d}, {&(0x7f0000000100)="23c249c00ec914d866c4448cfcc4b56527928f2b353381ef18474cd2a311056e6f6734f20885c35ecfd34fbc7ed275a495920881baae2939761870fb9d92578ef1aa65c33f0d6947b1a3f0a27e8979f20fdea306c9c2ffa17a511eed116a367163e61cc595f19d02c4e2fae74e60bc3827585fea3f6fdfa4124fa56560e570818d5209b4627573880f7b0ee555560c92cf4d5c343a50567cd09da743e18538ebf5674f5b4169d0d0eb06ff507094e901d4614eb2a0ead18ee7d807077198fdd007b788e4e343708d844b8db8c6f7431bc6c5394a9ca9d1e1c23cb43c60ff4d9387085e899c4f483b605e89275d81a988db40c104d2ac76c4c320", 0xfa}, {&(0x7f0000001e00)="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", 0x1000}], 0x4, 0x0, 0x0, 0x81}}], 0x1, 0x4000040) 27.118857215s ago: executing program 6 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 26.433734471s ago: executing program 5 (id=52): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 26.36591608s ago: executing program 37 (id=52): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 26.152739178s ago: executing program 6 (id=54): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x106) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x9, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) signalfd4(r7, &(0x7f0000000140)={[0x11]}, 0x8, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6000) pread64(r9, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) 25.872093346s ago: executing program 6 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 25.776945959s ago: executing program 38 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 21.66078882s ago: executing program 8 (id=44): socket(0x28, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c030109021200"], 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000080000000c009900010000"], 0x20}}, 0x94) 21.27422605s ago: executing program 7 (id=59): r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000140)='./file0\x00') 21.23441822s ago: executing program 7 (id=60): syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000010c0)={[0x3]}, 0x8) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000080611078000000000063012e09000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 20.364714621s ago: executing program 7 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0xf) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x29, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000440)={0x7, 0x4, 0x0, [{0x4017, 0x1, 0x1, 0x5, 0x6, 0x9, 0x3, '\x00', 0x2}, {0x4, 0xc3, 0x6f3, 0x9, 0x8, 0x6, 0x4, '\x00', 0x9}, {0x400, 0x3, 0x9, 0xff, 0x5, 0x6, 0x80, '\x00', 0x3}, {0x5e28, 0x7ff, 0x8, 0xc9, 0x1, 0x4, 0x3, '\x00', 0x4}]}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)}], 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 20.236454027s ago: executing program 8 (id=62): socket$inet6(0x10, 0x2, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x4044004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r5}, 0x10) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f00000025c0)=[{&(0x7f0000000100)=""/184, 0xb8}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000002fc0)) flock(r4, 0x9) r7 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/244, 0xf4}, 0x5}], 0x1, 0x8e9e5e0154f708bc, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r8, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000050001000700000009000200"], 0x64}}, 0x0) 19.696366507s ago: executing program 8 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 19.428498721s ago: executing program 7 (id=64): r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000140)='./file0\x00') 19.220823553s ago: executing program 7 (id=65): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {}, {0x0, 0xfffffffc}], 0x10}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf8, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x1, 0x0, 0x0, 'syz0\x00', 0xfffffffc}, 0x0, [0x0, 0xa6d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x8, 0x9, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0xe, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x21, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x10000000000, 0x200ce4, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x80000, 0x20000000000, 0x0, 0x0, 0x40000000000, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6]}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7ffd, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 19.220624346s ago: executing program 9 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 18.457720229s ago: executing program 8 (id=66): mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) io_uring_enter(r1, 0x644, 0x3, 0x21, 0x0, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r7, &(0x7f0000000140)='./file0\x00') 18.288252397s ago: executing program 9 (id=67): mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='9d;'], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) io_uring_enter(r2, 0x644, 0x3, 0x21, 0x0, 0x0) accept4$llc(r2, 0x0, &(0x7f0000000000), 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r5 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r8, &(0x7f0000000140)='./file0\x00') 17.557275303s ago: executing program 8 (id=68): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a800800058004000180"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) 17.426262433s ago: executing program 39 (id=68): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a800800058004000180"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) 17.335307356s ago: executing program 9 (id=70): mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='9d;'], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) io_uring_enter(r1, 0x644, 0x3, 0x21, 0x0, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r7, &(0x7f0000000140)='./file0\x00') 16.855785172s ago: executing program 7 (id=71): r0 = socket(0x28, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c030109021200"], 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000080000000c009900010000"], 0x20}}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r7, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8000, @mcast1, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@hoplimit={{0x10, 0x29, 0x43}}], 0x10}}], 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) 16.454889362s ago: executing program 9 (id=72): mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='9d;'], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) io_uring_enter(r2, 0x644, 0x3, 0x21, 0x0, 0x0) accept4$llc(r2, 0x0, &(0x7f0000000000), 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r5 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r8, &(0x7f0000000140)='./file0\x00') 15.560911173s ago: executing program 9 (id=73): r0 = socket(0x28, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c030109021200"], 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000080000000c009900010000"], 0x20}}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r8, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8000, @mcast1, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@hoplimit={{0x10, 0x29, 0x43}}], 0x10}}], 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) openat(r6, &(0x7f0000000180)='./bus\x00', 0x0, 0x64) 1.033057773s ago: executing program 40 (id=71): r0 = socket(0x28, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c030109021200"], 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000080000000c009900010000"], 0x20}}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r7, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8000, @mcast1, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@hoplimit={{0x10, 0x29, 0x43}}], 0x10}}], 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) 0s ago: executing program 41 (id=73): r0 = socket(0x28, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c030109021200"], 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000080000000c009900010000"], 0x20}}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r8, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8000, @mcast1, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@hoplimit={{0x10, 0x29, 0x43}}], 0x10}}], 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) openat(r6, &(0x7f0000000180)='./bus\x00', 0x0, 0x64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 39.354695][ T29] audit: type=1400 audit(1737972542.168:88): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 39.355793][ T5799] cgroup: Unknown subsys name 'net' [ 39.377440][ T29] audit: type=1400 audit(1737972542.168:89): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 39.404868][ T29] audit: type=1400 audit(1737972542.198:90): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 39.561256][ T5799] cgroup: Unknown subsys name 'cpuset' [ 39.567764][ T5799] cgroup: Unknown subsys name 'rlimit' [ 39.742589][ T29] audit: type=1400 audit(1737972542.558:91): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.769656][ T29] audit: type=1400 audit(1737972542.558:92): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 39.788602][ T5803] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 39.799100][ T29] audit: type=1400 audit(1737972542.558:93): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.819660][ T29] audit: type=1400 audit(1737972542.558:94): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.840272][ T29] audit: type=1400 audit(1737972542.558:95): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.865452][ T29] audit: type=1400 audit(1737972542.558:96): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.888917][ T29] audit: type=1400 audit(1737972542.588:97): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.456512][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.155401][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.162947][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 42.185438][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.192823][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 42.197605][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 42.199837][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 42.206978][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 42.221521][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.221558][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 42.228781][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 42.236418][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 42.243231][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 42.250148][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 42.264647][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 42.269192][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 42.271953][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 42.279178][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.286752][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 42.293522][ T5826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.299699][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 42.307065][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.314054][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 42.328250][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 42.328322][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 42.335757][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 42.343093][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 42.357806][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 42.358168][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 42.365343][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 42.379220][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 42.570843][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 42.602049][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 42.621928][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 42.663546][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 42.702746][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 42.727792][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.735265][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.742642][ T5819] bridge_slave_0: entered allmulticast mode [ 42.748845][ T5819] bridge_slave_0: entered promiscuous mode [ 42.758033][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.765479][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.772620][ T5819] bridge_slave_1: entered allmulticast mode [ 42.778978][ T5819] bridge_slave_1: entered promiscuous mode [ 42.785273][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.792430][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.799510][ T5822] bridge_slave_0: entered allmulticast mode [ 42.805877][ T5822] bridge_slave_0: entered promiscuous mode [ 42.817785][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.824913][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.832152][ T5813] bridge_slave_0: entered allmulticast mode [ 42.838376][ T5813] bridge_slave_0: entered promiscuous mode [ 42.848375][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.855956][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.863109][ T5822] bridge_slave_1: entered allmulticast mode [ 42.869355][ T5822] bridge_slave_1: entered promiscuous mode [ 42.883474][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.890606][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.897701][ T5813] bridge_slave_1: entered allmulticast mode [ 42.904102][ T5813] bridge_slave_1: entered promiscuous mode [ 42.939630][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.950063][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.965303][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.975845][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.985772][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.995867][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.006754][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.014022][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.021177][ T5821] bridge_slave_0: entered allmulticast mode [ 43.027453][ T5821] bridge_slave_0: entered promiscuous mode [ 43.046294][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.053433][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.060599][ T5821] bridge_slave_1: entered allmulticast mode [ 43.066846][ T5821] bridge_slave_1: entered promiscuous mode [ 43.090573][ T5813] team0: Port device team_slave_0 added [ 43.096884][ T5819] team0: Port device team_slave_0 added [ 43.103740][ T5822] team0: Port device team_slave_0 added [ 43.110116][ T5819] team0: Port device team_slave_1 added [ 43.115811][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.123345][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.130517][ T5812] bridge_slave_0: entered allmulticast mode [ 43.136707][ T5812] bridge_slave_0: entered promiscuous mode [ 43.146671][ T5813] team0: Port device team_slave_1 added [ 43.156499][ T5822] team0: Port device team_slave_1 added [ 43.162502][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.169544][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.176818][ T5812] bridge_slave_1: entered allmulticast mode [ 43.183178][ T5812] bridge_slave_1: entered promiscuous mode [ 43.190168][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.216700][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.229613][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.236719][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.263015][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.278160][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.291481][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.298421][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.324495][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.335412][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.342517][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.368414][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.379532][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.386628][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.412734][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.424386][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.440705][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.447672][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.473605][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.486687][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.493775][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.519655][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.534669][ T5821] team0: Port device team_slave_0 added [ 43.547180][ T5812] team0: Port device team_slave_0 added [ 43.554111][ T5812] team0: Port device team_slave_1 added [ 43.560619][ T5821] team0: Port device team_slave_1 added [ 43.575585][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.582636][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.608544][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.629883][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.636941][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.663091][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.691808][ T5813] hsr_slave_0: entered promiscuous mode [ 43.697654][ T5813] hsr_slave_1: entered promiscuous mode [ 43.703913][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.710986][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.737335][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.749510][ T5819] hsr_slave_0: entered promiscuous mode [ 43.755743][ T5819] hsr_slave_1: entered promiscuous mode [ 43.761607][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.769137][ T5819] Cannot create hsr debugfs directory [ 43.780004][ T5822] hsr_slave_0: entered promiscuous mode [ 43.786008][ T5822] hsr_slave_1: entered promiscuous mode [ 43.792061][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.799597][ T5822] Cannot create hsr debugfs directory [ 43.809799][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.816975][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.842893][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.892855][ T5821] hsr_slave_0: entered promiscuous mode [ 43.898732][ T5821] hsr_slave_1: entered promiscuous mode [ 43.904959][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.912574][ T5821] Cannot create hsr debugfs directory [ 43.926635][ T5812] hsr_slave_0: entered promiscuous mode [ 43.932465][ T5812] hsr_slave_1: entered promiscuous mode [ 43.938188][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.945762][ T5812] Cannot create hsr debugfs directory [ 44.065349][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.073647][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.083424][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.091423][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.114428][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.122722][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.131672][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.139571][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.172887][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.193511][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.202764][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.213397][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.228418][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.254046][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.261975][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.285380][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.292484][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.300790][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.308816][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.317040][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.325510][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.334508][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.345590][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.356387][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.360876][ T5820] Bluetooth: hci0: command tx timeout [ 44.372204][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.379287][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.417148][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.440910][ T5820] Bluetooth: hci2: command tx timeout [ 44.440916][ T5828] Bluetooth: hci3: command tx timeout [ 44.440939][ T5820] Bluetooth: hci4: command tx timeout [ 44.446308][ T5828] Bluetooth: hci1: command tx timeout [ 44.476426][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.500279][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.508374][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 44.508386][ T29] audit: type=1400 audit(1737972547.318:111): avc: denied { sys_module } for pid=5821 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.526101][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.554156][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.563261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.570363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.579468][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.586572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.601936][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.616443][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.623520][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.633791][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.645969][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.661127][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.668189][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.676399][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.684211][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.693327][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.700399][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.714037][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.721086][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.731335][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.738387][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.753957][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.791322][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.916269][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.991782][ T5813] veth0_vlan: entered promiscuous mode [ 45.009507][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.024935][ T5813] veth1_vlan: entered promiscuous mode [ 45.035798][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.055242][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.066138][ T5821] veth0_vlan: entered promiscuous mode [ 45.078547][ T5821] veth1_vlan: entered promiscuous mode [ 45.107040][ T5822] veth0_vlan: entered promiscuous mode [ 45.115950][ T5822] veth1_vlan: entered promiscuous mode [ 45.123897][ T5812] veth0_vlan: entered promiscuous mode [ 45.134693][ T5813] veth0_macvtap: entered promiscuous mode [ 45.147556][ T5821] veth0_macvtap: entered promiscuous mode [ 45.155334][ T5821] veth1_macvtap: entered promiscuous mode [ 45.164269][ T5813] veth1_macvtap: entered promiscuous mode [ 45.175556][ T5822] veth0_macvtap: entered promiscuous mode [ 45.186234][ T5812] veth1_vlan: entered promiscuous mode [ 45.194217][ T5819] veth0_vlan: entered promiscuous mode [ 45.202762][ T5822] veth1_macvtap: entered promiscuous mode [ 45.209521][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.218782][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.234363][ T5819] veth1_vlan: entered promiscuous mode [ 45.242711][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.251737][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.261037][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.269722][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.281265][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.291951][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.302413][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.312647][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.323315][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.333255][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.343820][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.354301][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.365255][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.376547][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.387654][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.396030][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.407381][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.417606][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.428142][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.438465][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.453204][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.461982][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.471031][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.479707][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.493114][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.501921][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.511019][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.519745][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.534883][ T5812] veth0_macvtap: entered promiscuous mode [ 45.542967][ T5812] veth1_macvtap: entered promiscuous mode [ 45.579853][ T5819] veth0_macvtap: entered promiscuous mode [ 45.600617][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.603218][ T5819] veth1_macvtap: entered promiscuous mode [ 45.615294][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.623720][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.625808][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.643133][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.643748][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.653410][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.671059][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.681134][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.691727][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.702686][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.715378][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.727306][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.737612][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.748214][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.758184][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.768751][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.779791][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.789877][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.798648][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.807548][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.816366][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.849608][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.860384][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.870242][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.881177][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.891363][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.901803][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.911657][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.922143][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.932628][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.941643][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.949685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.958486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.961727][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.974844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.983472][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.989076][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.002031][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.012076][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.023136][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.032982][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.043539][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.053399][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.063934][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.074293][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.089000][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.099181][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.108117][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.117114][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.133929][ T29] audit: type=1400 audit(1737972548.938:112): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.ogeWRv/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.167200][ T29] audit: type=1400 audit(1737972548.938:113): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.190590][ T29] audit: type=1400 audit(1737972548.948:114): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.ogeWRv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.216847][ T29] audit: type=1400 audit(1737972548.948:115): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.238908][ T29] audit: type=1400 audit(1737972548.948:116): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.ogeWRv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.269913][ T29] audit: type=1400 audit(1737972548.948:117): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.ogeWRv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 46.273338][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.302025][ T29] audit: type=1400 audit(1737972548.948:118): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.331742][ T29] audit: type=1400 audit(1737972548.978:119): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.335789][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.363569][ T29] audit: type=1400 audit(1737972548.978:120): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="gadgetfs" ino=7587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 46.365808][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.408848][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.434812][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.443619][ T5828] Bluetooth: hci0: command tx timeout [ 46.491859][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.508974][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.518566][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.524792][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.527045][ T5828] Bluetooth: hci4: command tx timeout [ 46.533753][ T5827] Bluetooth: hci3: command tx timeout [ 46.539117][ T5828] Bluetooth: hci2: command tx timeout [ 46.544336][ T5827] Bluetooth: hci1: command tx timeout [ 46.637209][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.645213][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.520292][ T5827] Bluetooth: hci0: command tx timeout [ 48.600330][ T5827] Bluetooth: hci1: command tx timeout [ 48.610108][ T5820] Bluetooth: hci3: command tx timeout [ 48.612993][ T5828] Bluetooth: hci4: command tx timeout [ 48.615516][ T5827] Bluetooth: hci2: command tx timeout [ 48.840341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.269660][ T5892] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.389726][ T5923] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.440169][ T5892] usb 5-1: device descriptor read/64, error -71 [ 49.881981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.896757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.032585][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.197409][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.621611][ T5827] Bluetooth: hci0: command tx timeout [ 50.680383][ T5827] Bluetooth: hci4: command tx timeout [ 50.685935][ T5827] Bluetooth: hci2: command tx timeout [ 50.690237][ T5828] Bluetooth: hci1: command tx timeout [ 50.739014][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.893119][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.363812][ T5949] process 'syz.3.13' launched './file1' with NULL argv: empty string added [ 51.373150][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 51.373819][ T29] audit: type=1400 audit(1737972554.178:162): avc: denied { execute } for pid=5947 comm="syz.3.13" name="file1" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.482806][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.502397][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.509736][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.518476][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.526485][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.534154][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.541637][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.605192][ T29] audit: type=1400 audit(1737972554.188:163): avc: denied { execute_no_trans } for pid=5947 comm="syz.3.13" path="/1/file1" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.656090][ T29] audit: type=1400 audit(1737972554.188:164): avc: denied { mount } for pid=5947 comm="syz.3.13" name="/" dev="ramfs" ino=7978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 51.760118][ T66] bridge_slave_1: left allmulticast mode [ 51.765797][ T66] bridge_slave_1: left promiscuous mode [ 51.779050][ T29] audit: type=1400 audit(1737972554.368:165): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.820299][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.838712][ T29] audit: type=1400 audit(1737972554.588:166): avc: denied { search } for pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.860251][ T29] audit: type=1400 audit(1737972554.588:167): avc: denied { bind } for pid=5959 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.879743][ T29] audit: type=1400 audit(1737972554.588:168): avc: denied { accept } for pid=5959 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.906043][ T66] bridge_slave_0: left allmulticast mode [ 51.951993][ T66] bridge_slave_0: left promiscuous mode [ 51.987318][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.469068][ T29] audit: type=1400 audit(1737972555.278:169): avc: denied { read } for pid=5968 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.545221][ T29] audit: type=1400 audit(1737972555.308:170): avc: denied { open } for pid=5968 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.621874][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.640469][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.652858][ T66] bond0 (unregistering): Released all slaves [ 52.736417][ T29] audit: type=1400 audit(1737972555.308:171): avc: denied { getattr } for pid=5968 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.012915][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.021272][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.028472][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.038944][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.047318][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.056628][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.069391][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 53.162949][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.173204][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.181758][ T5955] bridge_slave_0: entered allmulticast mode [ 53.188311][ T5955] bridge_slave_0: entered promiscuous mode [ 53.222684][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.229797][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.237094][ T934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 53.246394][ T5955] bridge_slave_1: entered allmulticast mode [ 53.254878][ T5955] bridge_slave_1: entered promiscuous mode [ 53.283143][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.295097][ T66] hsr_slave_0: left promiscuous mode [ 53.302174][ T66] hsr_slave_1: left promiscuous mode [ 53.307884][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.318518][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.327533][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.335503][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.347004][ T66] veth1_macvtap: left promiscuous mode [ 53.360006][ T66] veth0_macvtap: left promiscuous mode [ 53.371723][ T66] veth1_vlan: left promiscuous mode [ 53.386998][ T66] veth0_vlan: left promiscuous mode [ 53.398341][ T934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.419688][ T934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.530817][ T934] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.549275][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.560467][ T5828] Bluetooth: hci3: command tx timeout [ 53.561750][ T934] usb 3-1: SerialNumber: syz [ 53.820128][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.946837][ T66] team0 (unregistering): Port device team_slave_1 removed [ 53.968580][ T66] team0 (unregistering): Port device team_slave_0 removed [ 54.512440][ T5955] team0: Port device team_slave_0 added [ 54.623058][ T5955] team0: Port device team_slave_1 added [ 54.751493][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.767770][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.821193][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.835606][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.844255][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.874087][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.895268][ T5986] chnl_net:caif_netlink_parms(): no params data found [ 55.080702][ T5828] Bluetooth: hci4: command tx timeout [ 55.246131][ T5955] hsr_slave_0: entered promiscuous mode [ 55.254765][ T5955] hsr_slave_1: entered promiscuous mode [ 55.262012][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.269635][ T5955] Cannot create hsr debugfs directory [ 55.307740][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.315632][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.323220][ T5986] bridge_slave_0: entered allmulticast mode [ 55.329616][ T5986] bridge_slave_0: entered promiscuous mode [ 55.341167][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.348302][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.355827][ T5986] bridge_slave_1: entered allmulticast mode [ 55.363111][ T5986] bridge_slave_1: entered promiscuous mode [ 55.389862][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.400523][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.423611][ T5986] team0: Port device team_slave_0 added [ 55.435762][ T5986] team0: Port device team_slave_1 added [ 55.450936][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.457967][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.484830][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.501448][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.513134][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.521011][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.547128][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.550040][ T5863] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 55.590755][ T5955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.624921][ T5955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.640189][ T5828] Bluetooth: hci3: command tx timeout [ 55.652331][ T5986] hsr_slave_0: entered promiscuous mode [ 55.661102][ T5986] hsr_slave_1: entered promiscuous mode [ 55.667075][ T5986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.674851][ T5986] Cannot create hsr debugfs directory [ 55.683402][ T5955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.705530][ T5955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.716841][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.761485][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.776519][ T5863] usb 4-1: config 0 has no interfaces? [ 55.798740][ T5863] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 55.825282][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 55.833700][ T5863] usb 4-1: Product: syz [ 55.837894][ T5863] usb 4-1: Manufacturer: syz [ 55.843578][ T5863] usb 4-1: SerialNumber: syz [ 55.849445][ T5863] usb 4-1: config 0 descriptor?? [ 55.856827][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.896137][ T5986] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 55.929631][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.946347][ T5986] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 55.962542][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.988144][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.002281][ T934] usb 3-1: 0:2 : does not exist [ 56.007226][ T934] usb 3-1: unit 5: unexpected type 0x03 [ 56.041314][ T5986] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.074256][ T934] usb 3-1: USB disconnect, device number 2 [ 56.074562][ T5986] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.157851][ T6060] Zero length message leads to an empty skb [ 56.165976][ T6060] Sensor A: ================= START STATUS ================= [ 56.174543][ T6060] Sensor A: Test Pattern: 75% Colorbar [ 56.180081][ T6060] Sensor A: Show Information: All [ 56.185158][ T6060] Sensor A: Vertical Flip: false [ 56.190214][ T6060] Sensor A: Horizontal Flip: false [ 56.195368][ T6060] Sensor A: Brightness: 128 [ 56.199902][ T6060] Sensor A: Contrast: 128 [ 56.204324][ T6060] Sensor A: Hue: 0 [ 56.208063][ T6060] Sensor A: Saturation: 128 [ 56.212681][ T6060] Sensor A: ================== END STATUS ================== [ 56.263097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.384669][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 56.496081][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.496103][ T29] audit: type=1400 audit(1737972559.308:185): avc: denied { write } for pid=6032 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.568471][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.575620][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.580126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.628098][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.638210][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.645384][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.720668][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.726813][ T5955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.739251][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.744074][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.756335][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.764058][ T66] bridge_slave_1: left allmulticast mode [ 56.769793][ T66] bridge_slave_1: left promiscuous mode [ 56.770167][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.777745][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.784897][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.095464][ T66] bridge_slave_0: left allmulticast mode [ 57.101502][ T66] bridge_slave_0: left promiscuous mode [ 57.107131][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.160208][ T5827] Bluetooth: hci4: command tx timeout [ 57.175883][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.186703][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.196290][ T66] bond0 (unregistering): Released all slaves [ 57.229460][ T29] audit: type=1400 audit(1737972560.038:186): avc: denied { sys_module } for pid=5955 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.265987][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.311074][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.323844][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.330969][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.348518][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.355679][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.378835][ T5986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.391859][ T5986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.459055][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.552822][ T6073] chnl_net:caif_netlink_parms(): no params data found [ 57.657409][ T66] hsr_slave_0: left promiscuous mode [ 57.667837][ T66] hsr_slave_1: left promiscuous mode [ 57.674438][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.686166][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.694157][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.702141][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.720642][ T5827] Bluetooth: hci3: command tx timeout [ 57.829265][ T66] veth1_macvtap: left promiscuous mode [ 57.838889][ T66] veth0_macvtap: left promiscuous mode [ 57.855064][ T66] veth1_vlan: left promiscuous mode [ 57.864526][ T66] veth0_vlan: left promiscuous mode [ 58.058399][ T66] team0 (unregistering): Port device team_slave_1 removed [ 58.068916][ T66] team0 (unregistering): Port device team_slave_0 removed [ 58.134216][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.141408][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.148652][ T6073] bridge_slave_0: entered allmulticast mode [ 58.156158][ T6073] bridge_slave_0: entered promiscuous mode [ 58.164977][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.172215][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.179839][ T6073] bridge_slave_1: entered allmulticast mode [ 58.186271][ T6073] bridge_slave_1: entered promiscuous mode [ 58.198731][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.222088][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.242463][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.254657][ T5955] veth0_vlan: entered promiscuous mode [ 58.272754][ T6073] team0: Port device team_slave_0 added [ 58.281318][ T6073] team0: Port device team_slave_1 added [ 58.292996][ T5955] veth1_vlan: entered promiscuous mode [ 58.334264][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.348573][ T5861] usb 4-1: USB disconnect, device number 2 [ 58.356321][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.386473][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.466936][ T5955] veth0_macvtap: entered promiscuous mode [ 58.511839][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.518872][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.545780][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.670716][ T6073] hsr_slave_0: entered promiscuous mode [ 58.677774][ T6073] hsr_slave_1: entered promiscuous mode [ 58.685712][ T6073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.160456][ T5827] Bluetooth: hci0: command tx timeout [ 59.185284][ T6073] Cannot create hsr debugfs directory [ 59.191493][ T5955] veth1_macvtap: entered promiscuous mode [ 59.237353][ T5986] veth0_vlan: entered promiscuous mode [ 59.240115][ T5827] Bluetooth: hci4: command tx timeout [ 59.256446][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.277476][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.287777][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.300169][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.312263][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.323545][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.334409][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.358878][ T5986] veth1_vlan: entered promiscuous mode [ 59.387160][ T5986] veth0_macvtap: entered promiscuous mode [ 59.419510][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.434781][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.460016][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.472254][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.490585][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.511324][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.526442][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.534978][ T5986] veth1_macvtap: entered promiscuous mode [ 59.583522][ T5955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.592889][ T5955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.603291][ T5955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.613744][ T5955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.665612][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.703982][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.714691][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.724813][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.838233][ T5827] Bluetooth: hci3: command tx timeout [ 59.950027][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.961326][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.981639][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.991703][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.002509][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.014079][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.030796][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.045803][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.056630][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.066613][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.077180][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.087181][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.097931][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.108078][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.118535][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.129561][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.139491][ T5986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.148470][ T5986] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.157405][ T5986] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.167375][ T5986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.178085][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.192397][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.210508][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.245033][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.255388][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.269351][ T6073] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 60.290685][ T29] audit: type=1400 audit(1737972563.098:187): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.330427][ T6073] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 60.331240][ T29] audit: type=1400 audit(1737972563.128:188): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="gadgetfs" ino=7587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.372337][ T6073] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 60.562697][ T6073] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 60.623793][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.652867][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.676445][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.830323][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.839446][ T6160] netlink: 60 bytes leftover after parsing attributes in process `syz.5.18'. [ 60.874264][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.884691][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.910817][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.927756][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.935590][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.950951][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.958572][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.969353][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.054947][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.092971][ T66] bridge_slave_1: left allmulticast mode [ 61.125103][ T66] bridge_slave_1: left promiscuous mode [ 61.154973][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.183740][ T66] bridge_slave_0: left allmulticast mode [ 61.195498][ T66] bridge_slave_0: left promiscuous mode [ 61.214384][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.240603][ T5827] Bluetooth: hci0: command tx timeout [ 61.320426][ T5828] Bluetooth: hci4: command tx timeout [ 61.326255][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.330545][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.340286][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.355077][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.362553][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.375286][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.385840][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.393324][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.474800][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.485737][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.497986][ T66] bond0 (unregistering): Released all slaves [ 61.563222][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.570384][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.583945][ T29] audit: type=1400 audit(1737972564.398:189): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.609513][ T29] audit: type=1400 audit(1737972564.398:190): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.634149][ T29] audit: type=1400 audit(1737972564.398:191): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.754206][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 61.884935][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.904336][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.918148][ T6155] bridge_slave_0: entered allmulticast mode [ 61.933716][ T6155] bridge_slave_0: entered promiscuous mode [ 61.949033][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.982822][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.000352][ T6155] bridge_slave_1: entered allmulticast mode [ 62.006975][ T6155] bridge_slave_1: entered promiscuous mode [ 62.203455][ T66] hsr_slave_0: left promiscuous mode [ 62.212626][ T66] hsr_slave_1: left promiscuous mode [ 62.219121][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.227548][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.238220][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.246621][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.641581][ T66] veth1_macvtap: left promiscuous mode [ 62.647160][ T66] veth0_macvtap: left promiscuous mode [ 62.652795][ T66] veth1_vlan: left promiscuous mode [ 62.658100][ T66] veth0_vlan: left promiscuous mode [ 62.835556][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.001768][ T5827] Bluetooth: hci1: command tx timeout [ 63.072419][ T66] team0 (unregistering): Port device team_slave_1 removed [ 63.089517][ T66] team0 (unregistering): Port device team_slave_0 removed [ 63.272175][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.320170][ T5827] Bluetooth: hci0: command tx timeout [ 63.480313][ T5827] Bluetooth: hci2: command tx timeout [ 63.705339][ T6155] team0: Port device team_slave_0 added [ 63.713645][ T6177] chnl_net:caif_netlink_parms(): no params data found [ 63.726779][ T6155] team0: Port device team_slave_1 added [ 63.761435][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.768516][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.800446][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.834386][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.861128][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.868379][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.904598][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.055736][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.063715][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.071194][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.082042][ T6155] hsr_slave_0: entered promiscuous mode [ 64.088184][ T6155] hsr_slave_1: entered promiscuous mode [ 64.094758][ T6155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.104156][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.107392][ T6155] Cannot create hsr debugfs directory [ 64.121699][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.129289][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.143711][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.154198][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.161696][ T6177] bridge_slave_0: entered allmulticast mode [ 64.168394][ T6177] bridge_slave_0: entered promiscuous mode [ 64.176406][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.184726][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.192027][ T6177] bridge_slave_1: entered allmulticast mode [ 64.198607][ T6177] bridge_slave_1: entered promiscuous mode [ 64.252275][ T6177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.283372][ T6177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.337784][ T6177] team0: Port device team_slave_0 added [ 64.347740][ T6073] veth0_vlan: entered promiscuous mode [ 64.369575][ T6177] team0: Port device team_slave_1 added [ 64.419516][ T6073] veth1_vlan: entered promiscuous mode [ 64.439709][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.460789][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.488307][ T6177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.505887][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.513235][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.543591][ T6177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.582792][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.592346][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.601524][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.608891][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.616541][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.624368][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.632428][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.659105][ T6177] hsr_slave_0: entered promiscuous mode [ 64.665321][ T6177] hsr_slave_1: entered promiscuous mode [ 64.671546][ T6177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.679094][ T6177] Cannot create hsr debugfs directory [ 64.692767][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.756906][ T6073] veth0_macvtap: entered promiscuous mode [ 64.768417][ T6280] chnl_net:caif_netlink_parms(): no params data found [ 64.784122][ T6155] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 64.818014][ T6073] veth1_macvtap: entered promiscuous mode [ 64.836125][ T6155] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 64.849267][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.882109][ T6155] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 64.910509][ T6155] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 64.982607][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.989744][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.997110][ T6280] bridge_slave_0: entered allmulticast mode [ 65.003747][ T6280] bridge_slave_0: entered promiscuous mode [ 65.011658][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.018772][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.026492][ T6280] bridge_slave_1: entered allmulticast mode [ 65.033045][ T6280] bridge_slave_1: entered promiscuous mode [ 65.047411][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.065429][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.075973][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.085887][ T5827] Bluetooth: hci1: command tx timeout [ 65.091728][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.102269][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.112151][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.122623][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.132502][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.143496][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.154180][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.169482][ T6300] chnl_net:caif_netlink_parms(): no params data found [ 65.209084][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.221142][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.234553][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.247150][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.259228][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.270818][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.283164][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.295887][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.308724][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.323987][ T6280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.335726][ T6280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.361407][ T6073] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.370410][ T6073] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.379159][ T6073] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.388694][ T6073] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.400441][ T5827] Bluetooth: hci0: command tx timeout [ 65.425830][ T6280] team0: Port device team_slave_0 added [ 65.456824][ T6177] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 65.465587][ T6280] team0: Port device team_slave_1 added [ 65.487181][ T6177] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 65.501676][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.508658][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.535053][ T6280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.559455][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.567515][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.574662][ T5827] Bluetooth: hci2: command tx timeout [ 65.574851][ T6300] bridge_slave_0: entered allmulticast mode [ 65.586950][ T6300] bridge_slave_0: entered promiscuous mode [ 65.593507][ T6177] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 65.602108][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.609053][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.635450][ T6280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.650702][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.665283][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.672640][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.679821][ T6300] bridge_slave_1: entered allmulticast mode [ 65.686759][ T6300] bridge_slave_1: entered promiscuous mode [ 65.697377][ T6177] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 65.729886][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.744819][ T6280] hsr_slave_0: entered promiscuous mode [ 65.751474][ T6280] hsr_slave_1: entered promiscuous mode [ 65.757982][ T6280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.765607][ T6280] Cannot create hsr debugfs directory [ 65.772569][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.784199][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.829496][ T6300] team0: Port device team_slave_0 added [ 65.836408][ T6300] team0: Port device team_slave_1 added [ 65.871745][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.885729][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.893714][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.920268][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.934070][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.941576][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.969861][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.000075][ T6231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.007935][ T6231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.056828][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.083940][ T6300] hsr_slave_0: entered promiscuous mode [ 66.093097][ T6300] hsr_slave_1: entered promiscuous mode [ 66.099168][ T6300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.107820][ T6300] Cannot create hsr debugfs directory [ 66.126869][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.133849][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.145987][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.203003][ T5827] Bluetooth: hci3: command tx timeout [ 66.219796][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.293524][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.325686][ T6155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.336909][ T6155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.358636][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.365836][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.375738][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.382823][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.680080][ T5827] Bluetooth: hci4: command tx timeout [ 66.764393][ T6177] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.809628][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.823461][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.830563][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.856878][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.863998][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.874052][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.897222][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.981944][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.068168][ T6280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.081347][ T6280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.096545][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.128432][ T6280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.139894][ T6280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.161302][ T5827] Bluetooth: hci1: command tx timeout [ 67.435595][ T6388] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.471350][ T6155] veth0_vlan: entered promiscuous mode [ 67.478572][ T6155] veth1_vlan: entered promiscuous mode [ 67.542218][ T6177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.567490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.572830][ T6155] veth0_macvtap: entered promiscuous mode [ 67.600177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.610315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.630279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.640448][ T5827] Bluetooth: hci2: command tx timeout [ 67.669350][ T6155] veth1_macvtap: entered promiscuous mode [ 67.725677][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.733868][ T6398] Sensor A: ================= START STATUS ================= [ 67.743706][ T6398] Sensor A: Test Pattern: 75% Colorbar [ 67.749669][ T6398] Sensor A: Show Information: All [ 67.754778][ T6398] Sensor A: Vertical Flip: false [ 67.759778][ T6398] Sensor A: Horizontal Flip: false [ 67.764993][ T6398] Sensor A: Brightness: 128 [ 67.769518][ T6398] Sensor A: Contrast: 128 [ 67.774001][ T6398] Sensor A: Hue: 0 [ 67.777758][ T6398] Sensor A: Saturation: 128 [ 67.782364][ T6398] Sensor A: ================== END STATUS ================== [ 67.783300][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.798745][ T29] audit: type=1400 audit(1737972570.608:192): avc: denied { wake_alarm } for pid=6397 comm="syz.7.58" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.809684][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.831513][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.842042][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.852445][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.863014][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.873218][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.884013][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.894843][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.906061][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.916875][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.953938][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.010205][ T6280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.021180][ T6300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.035467][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.046403][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.056377][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.066991][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.077201][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.087790][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.097935][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.108614][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.119410][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.130802][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.144590][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.165786][ T6300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.176122][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.197539][ T6300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.206612][ T6300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.225819][ T6155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.234682][ T6155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.245114][ T6155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.254068][ T6155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.278704][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.280246][ T5827] Bluetooth: hci3: command tx timeout [ 68.308781][ T6280] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.318357][ T6177] veth0_vlan: entered promiscuous mode [ 68.349021][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.356110][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.368690][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.375804][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.398257][ T6177] veth1_vlan: entered promiscuous mode [ 68.425062][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.437161][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.489472][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.508677][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.544127][ T6177] veth0_macvtap: entered promiscuous mode [ 68.550177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.611525][ T6177] veth1_macvtap: entered promiscuous mode [ 68.621718][ T35] bridge_slave_1: left allmulticast mode [ 68.627356][ T35] bridge_slave_1: left promiscuous mode [ 68.646915][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.681808][ T35] bridge_slave_0: left allmulticast mode [ 68.694998][ T35] bridge_slave_0: left promiscuous mode [ 68.700864][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.727527][ T35] bridge_slave_1: left allmulticast mode [ 68.738674][ T35] bridge_slave_1: left promiscuous mode [ 68.751515][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.762218][ T5827] Bluetooth: hci4: command tx timeout [ 68.768486][ T35] bridge_slave_0: left allmulticast mode [ 68.775934][ T35] bridge_slave_0: left promiscuous mode [ 68.781804][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.790411][ T35] bridge_slave_1: left allmulticast mode [ 68.796611][ T35] bridge_slave_1: left promiscuous mode [ 68.802856][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.811295][ T35] bridge_slave_0: left allmulticast mode [ 68.816986][ T35] bridge_slave_0: left promiscuous mode [ 68.823465][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.836307][ T35] bridge_slave_1: left allmulticast mode [ 68.842492][ T35] bridge_slave_1: left promiscuous mode [ 68.848229][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.858819][ T35] bridge_slave_0: left allmulticast mode [ 68.866640][ T35] bridge_slave_0: left promiscuous mode [ 68.873702][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.910039][ T1215] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 69.064319][ T1215] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.075053][ T1215] usb 9-1: config 0 has no interfaces? [ 69.083940][ T1215] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 69.093484][ T1215] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 69.101677][ T1215] usb 9-1: Product: syz [ 69.105906][ T1215] usb 9-1: Manufacturer: syz [ 69.110604][ T1215] usb 9-1: SerialNumber: syz [ 69.118104][ T1215] usb 9-1: config 0 descriptor?? [ 69.240173][ T5827] Bluetooth: hci1: command tx timeout [ 69.322638][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.338507][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.349088][ T35] bond0 (unregistering): Released all slaves [ 69.359089][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.369401][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.379149][ T35] bond0 (unregistering): Released all slaves [ 69.389064][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.398579][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.411127][ T35] bond0 (unregistering): Released all slaves [ 69.419925][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.431508][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.441905][ T35] bond0 (unregistering): Released all slaves [ 69.451905][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.463798][ T5861] usb 9-1: USB disconnect, device number 2 [ 69.478547][ T6280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.495755][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.506664][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.517566][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.529649][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.540039][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.551191][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.561495][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.572046][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.582031][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.592539][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.602521][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.613106][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.623742][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.635980][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.649235][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.659915][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.670805][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.681983][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.692553][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.702440][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.712962][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.722773][ T5827] Bluetooth: hci2: command tx timeout [ 69.728610][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.739099][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.749664][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.760150][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.770714][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.782030][ T6300] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.794439][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.801547][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.817816][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.824931][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.835837][ T6177] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.844660][ T6177] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.854046][ T6177] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.862764][ T6177] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.927524][ T6300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.945089][ T6280] veth0_vlan: entered promiscuous mode [ 69.984297][ T6280] veth1_vlan: entered promiscuous mode [ 70.030124][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.046572][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.359320][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.8.62'. [ 70.374181][ T5827] Bluetooth: hci3: command tx timeout [ 70.497336][ T6280] veth0_macvtap: entered promiscuous mode [ 70.505703][ T6280] veth1_macvtap: entered promiscuous mode [ 70.523790][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.581418][ T29] audit: type=1400 audit(1737972573.378:193): avc: denied { create } for pid=6416 comm="syz.7.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.618963][ T29] audit: type=1400 audit(1737972573.378:194): avc: denied { write } for pid=6416 comm="syz.7.61" name="event2" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.671153][ T29] audit: type=1400 audit(1737972573.378:195): avc: denied { open } for pid=6416 comm="syz.7.61" path="/dev/input/event2" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.697607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.706356][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.765813][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.795905][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.820605][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.840410][ T5827] Bluetooth: hci4: command tx timeout [ 70.844059][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.858679][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.878643][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.888602][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.899182][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.913564][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.926129][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.937992][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.951755][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.962160][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.972999][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.983869][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.389832][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.397776][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.431410][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.566079][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.627979][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.639409][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.655712][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.667826][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.680594][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.691265][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.701921][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.750496][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.760957][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.771472][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.781394][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.792247][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.807728][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.841717][ T6300] veth0_vlan: entered promiscuous mode [ 71.861719][ T6280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.875145][ T6280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.902804][ T6280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.911785][ T6280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.098179][ T6300] veth1_vlan: entered promiscuous mode [ 72.436771][ T6300] veth0_macvtap: entered promiscuous mode [ 72.446737][ T6300] veth1_macvtap: entered promiscuous mode [ 72.449845][ T5827] Bluetooth: hci3: command tx timeout [ 72.456801][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.461240][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.469095][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.491296][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.491342][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.510508][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.521602][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.532270][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.542350][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.552996][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.563134][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.573698][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.583740][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.594229][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.606835][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.617791][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.627929][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.638420][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.649473][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.920132][ T5827] Bluetooth: hci4: command tx timeout [ 73.011321][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.018806][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.027798][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.035847][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.044007][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.051454][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.640581][ T51] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 73.799511][ T51] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.813039][ T51] usb 8-1: config 0 has no interfaces? [ 73.821305][ T51] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 73.832425][ T51] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 73.841324][ T51] usb 8-1: Product: syz [ 73.846007][ T51] usb 8-1: Manufacturer: syz [ 73.851022][ T51] usb 8-1: SerialNumber: syz [ 73.905374][ T51] usb 8-1: config 0 descriptor?? [ 74.939999][ T51] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 75.091754][ T51] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.101986][ T51] usb 10-1: config 0 has no interfaces? [ 75.108911][ T51] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 75.118150][ T51] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 75.126365][ T51] usb 10-1: Product: syz [ 75.130643][ T51] usb 10-1: Manufacturer: syz [ 75.135315][ T51] usb 10-1: SerialNumber: syz [ 75.141031][ T51] usb 10-1: config 0 descriptor?? [ 75.400482][ T5827] Bluetooth: hci1: command tx timeout [ 76.289413][ T25] cfg80211: failed to load regulatory.db [ 77.480092][ T5827] Bluetooth: hci1: command tx timeout [ 79.560158][ T5827] Bluetooth: hci1: command tx timeout [ 81.640144][ T5827] Bluetooth: hci1: command tx timeout [ 89.293749][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.301037][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.308429][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.316058][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.323710][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.330992][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.306961][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.314245][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.321379][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.328822][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.336970][ T5827] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.344210][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.400142][ T5827] Bluetooth: hci5: command tx timeout [ 92.360092][ T5827] Bluetooth: hci6: command tx timeout [ 93.480092][ T5827] Bluetooth: hci5: command tx timeout [ 94.440043][ T5827] Bluetooth: hci6: command tx timeout [ 95.560010][ T5827] Bluetooth: hci5: command tx timeout [ 96.520059][ T5827] Bluetooth: hci6: command tx timeout [ 97.640101][ T5827] Bluetooth: hci5: command tx timeout [ 98.600065][ T5827] Bluetooth: hci6: command tx timeout [ 124.995860][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 125.003115][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 125.009123][ T5815] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 125.010403][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 125.019369][ T5815] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 125.024807][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.031895][ T5815] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 125.038642][ T5828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 125.048185][ T5815] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 125.052755][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.059900][ T5815] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 125.076669][ T5815] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 127.080018][ T5815] Bluetooth: hci7: command tx timeout [ 127.160049][ T5815] Bluetooth: hci8: command tx timeout [ 129.160076][ T5815] Bluetooth: hci7: command tx timeout [ 129.240080][ T5815] Bluetooth: hci8: command tx timeout [ 131.240080][ T5815] Bluetooth: hci7: command tx timeout [ 131.321124][ T5815] Bluetooth: hci8: command tx timeout [ 132.601305][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.607642][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.914478][ T5820] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 132.921840][ T5820] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 132.929187][ T5820] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 132.936680][ T5820] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 132.943952][ T5820] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 132.951074][ T5820] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 133.320007][ T5820] Bluetooth: hci7: command tx timeout [ 133.400159][ T5820] Bluetooth: hci8: command tx timeout [ 135.000036][ T5820] Bluetooth: hci9: command tx timeout [ 137.080412][ T5820] Bluetooth: hci9: command tx timeout [ 139.160029][ T5820] Bluetooth: hci9: command tx timeout [ 141.240169][ T5820] Bluetooth: hci9: command tx timeout [ 149.583131][ T5815] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 149.590463][ T5815] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 149.597685][ T5815] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 149.605205][ T5815] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 149.612921][ T5815] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 149.620596][ T5815] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 150.599872][ T5820] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 150.607221][ T5820] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 150.614971][ T5820] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 150.622525][ T5820] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 150.629831][ T5820] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 150.637128][ T5820] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 151.640048][ T5820] Bluetooth: hci10: command tx timeout [ 152.680023][ T5820] Bluetooth: hci11: command tx timeout [ 153.720100][ T5820] Bluetooth: hci10: command tx timeout [ 154.770120][ T5820] Bluetooth: hci11: command tx timeout [ 155.800024][ T5820] Bluetooth: hci10: command tx timeout [ 156.840067][ T5820] Bluetooth: hci11: command tx timeout [ 157.880108][ T5820] Bluetooth: hci10: command tx timeout [ 158.920043][ T5820] Bluetooth: hci11: command tx timeout [ 180.759989][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 185.520290][ T5827] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 185.527622][ T5827] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 185.534910][ T5827] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 185.541715][ T5826] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 185.544546][ T5827] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 185.549114][ T5826] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 185.560100][ T5827] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 185.571027][ T5826] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 185.571165][ T5827] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 185.578807][ T5826] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 185.593091][ T5826] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 185.600488][ T5826] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 185.880161][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 187.640044][ T5820] Bluetooth: hci13: command tx timeout [ 187.640933][ T5826] Bluetooth: hci12: command tx timeout [ 189.719991][ T5828] Bluetooth: hci12: command tx timeout [ 189.720014][ T5815] Bluetooth: hci13: command tx timeout [ 191.000092][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 191.001038][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 191.800037][ T5820] Bluetooth: hci13: command tx timeout [ 191.806074][ T5820] Bluetooth: hci12: command tx timeout [ 193.149153][ T5826] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 193.156574][ T5826] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 193.163966][ T5826] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 193.172070][ T5826] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 193.179463][ T5826] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 193.186703][ T5826] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 193.879983][ T5826] Bluetooth: hci12: command tx timeout [ 193.880001][ T5820] Bluetooth: hci13: command tx timeout [ 194.042220][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049564][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.240074][ T5826] Bluetooth: hci14: command tx timeout [ 196.119991][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 197.320044][ T5820] Bluetooth: hci14: command tx timeout [ 199.400060][ T5820] Bluetooth: hci14: command tx timeout [ 201.490116][ T5820] Bluetooth: hci14: command tx timeout [ 209.878073][ T5828] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 209.885533][ T5828] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 209.892866][ T5828] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 209.900419][ T5828] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 209.907739][ T5828] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 209.915276][ T5828] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 210.891678][ T5826] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 210.898946][ T5826] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 210.906423][ T5826] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 210.914035][ T5826] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 210.921467][ T5826] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 210.928670][ T5826] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 211.480061][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 211.961154][ T5820] Bluetooth: hci15: command tx timeout [ 213.000065][ T5820] Bluetooth: hci16: command tx timeout [ 214.040015][ T5820] Bluetooth: hci15: command tx timeout [ 215.079967][ T5828] Bluetooth: hci16: command tx timeout [ 216.120032][ T5828] Bluetooth: hci15: command tx timeout [ 216.600017][ T5828] Bluetooth: hci6: command 0x0406 tx timeout [ 217.160022][ T5820] Bluetooth: hci16: command tx timeout [ 218.199971][ T5820] Bluetooth: hci15: command tx timeout [ 219.240017][ T5820] Bluetooth: hci16: command tx timeout [ 223.480182][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 223.487863][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 223.495212][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 223.503963][ T30] task:kworker/u8:0 state:D stack:25464 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 223.514214][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 223.521198][ T30] Call Trace: [ 223.524465][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.527373][ T30] __schedule+0x1142/0x5b60 [ 223.531892][ T30] ? kasan_save_stack+0x31/0x60 [ 223.536839][ T30] ? __pfx___schedule+0x10/0x10 [ 223.542039][ T30] ? lock_release+0x4e2/0x6f0 [ 223.569945][ T30] ? schedule+0x298/0x350 [ 223.574334][ T30] ? __pfx_lock_release+0x10/0x10 [ 223.579385][ T30] ? __mutex_trylock_common+0x78/0x250 [ 223.585217][ T30] ? schedule+0x1fd/0x350 [ 223.589557][ T30] ? lock_acquire+0x2f/0xb0 [ 223.594070][ T30] ? schedule+0x1fd/0x350 [ 223.598399][ T30] schedule+0xe7/0x350 [ 223.602492][ T30] schedule_preempt_disabled+0x13/0x30 [ 223.607947][ T30] __mutex_lock+0x6bd/0xb10 [ 223.612468][ T30] ? dl_scaled_delta_exec+0xdd/0x2e0 [ 223.617771][ T30] ? cfg80211_dfs_channels_update_work+0xd0/0x640 [ 223.624211][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 223.629232][ T30] ? lock_release+0x4e2/0x6f0 [ 223.633924][ T30] ? sched_clock_cpu+0x6d/0x4d0 [ 223.638770][ T30] ? psi_task_switch+0x2c1/0x8e0 [ 223.643805][ T30] ? __pfx_lock_release+0x10/0x10 [ 223.648835][ T30] ? lock_release+0x4e2/0x6f0 [ 223.653535][ T30] ? debug_object_deactivate+0x1ef/0x370 [ 223.659543][ T30] ? __pfx_lock_release+0x10/0x10 [ 223.664625][ T30] ? cfg80211_dfs_channels_update_work+0xd0/0x640 [ 223.671119][ T30] ? rtnl_lock+0x9/0x20 [ 223.675279][ T30] cfg80211_dfs_channels_update_work+0xd0/0x640 [ 223.681553][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 223.686743][ T30] ? rcu_is_watching+0x12/0xc0 [ 223.691511][ T30] ? lock_release+0x4e2/0x6f0 [ 223.696181][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 223.703062][ T30] ? rcu_is_watching+0x12/0xc0 [ 223.707817][ T30] ? process_one_work+0x921/0x1ba0 [ 223.712959][ T30] ? lock_acquire+0x2f/0xb0 [ 223.717459][ T30] ? process_one_work+0x921/0x1ba0 [ 223.722610][ T30] process_one_work+0x9c5/0x1ba0 [ 223.727549][ T30] ? __pfx_process_one_work+0x10/0x10 [ 223.732935][ T30] ? rcu_is_watching+0x12/0xc0 [ 223.737693][ T30] ? assign_work+0x1a0/0x250 [ 223.742298][ T30] worker_thread+0x6c8/0xf00 [ 223.746884][ T30] ? __pfx_worker_thread+0x10/0x10 [ 223.752005][ T30] kthread+0x3af/0x750 [ 223.756066][ T30] ? __pfx_kthread+0x10/0x10 [ 223.761126][ T30] ? lock_acquire+0x2f/0xb0 [ 223.765637][ T30] ? __pfx_kthread+0x10/0x10 [ 223.770240][ T30] ret_from_fork+0x45/0x80 [ 223.774654][ T30] ? __pfx_kthread+0x10/0x10 [ 223.779220][ T30] ret_from_fork_asm+0x1a/0x30 [ 223.784015][ T30] [ 223.787030][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 223.794675][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 223.801994][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 223.810671][ T30] task:kworker/u8:1 state:D stack:23344 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 223.820883][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 223.826873][ T30] Call Trace: [ 223.830176][ T30] [ 223.833096][ T30] __schedule+0x1142/0x5b60 [ 223.837580][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 223.842805][ T30] ? rcu_preempt_deferred_qs_irqrestore+0x4e1/0xbd0 [ 223.849389][ T30] ? __pfx___schedule+0x10/0x10 [ 223.854247][ T30] ? lock_release+0x4e2/0x6f0 [ 223.858919][ T30] ? schedule+0x298/0x350 [ 223.863680][ T30] ? __pfx_lock_release+0x10/0x10 [ 223.868708][ T30] ? __mutex_trylock_common+0x78/0x250 [ 223.874213][ T30] ? schedule+0x1fd/0x350 [ 223.878539][ T30] ? lock_acquire+0x2f/0xb0 [ 223.883118][ T30] ? schedule+0x1fd/0x350 [ 223.887444][ T30] schedule+0xe7/0x350 [ 223.891523][ T30] schedule_preempt_disabled+0x13/0x30 [ 223.896982][ T30] __mutex_lock+0x6bd/0xb10 [ 223.901506][ T30] ? addrconf_dad_work+0x121/0x14e0 [ 223.906701][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 223.911730][ T30] ? rcu_is_watching+0x12/0xc0 [ 223.916485][ T30] ? debug_object_deactivate+0x1ef/0x370 [ 223.922131][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.927491][ T30] ? lock_acquire+0x2f/0xb0 [ 223.932008][ T30] ? addrconf_dad_work+0x121/0x14e0 [ 223.937208][ T30] ? rtnl_lock+0x9/0x20 [ 223.941387][ T30] addrconf_dad_work+0x121/0x14e0 [ 223.946425][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 223.951921][ T30] ? _raw_spin_unlock+0x28/0x50 [ 223.956767][ T30] ? process_one_work+0x921/0x1ba0 [ 223.962474][ T30] ? lock_acquire+0x2f/0xb0 [ 223.966984][ T30] ? process_one_work+0x921/0x1ba0 [ 223.972097][ T30] process_one_work+0x9c5/0x1ba0 [ 223.977031][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 223.982504][ T30] ? __pfx_process_one_work+0x10/0x10 [ 223.987870][ T30] ? rcu_is_watching+0x12/0xc0 [ 223.992656][ T30] ? assign_work+0x1a0/0x250 [ 223.997238][ T30] worker_thread+0x6c8/0xf00 [ 224.001854][ T30] ? __pfx_worker_thread+0x10/0x10 [ 224.006963][ T30] kthread+0x3af/0x750 [ 224.011053][ T30] ? __pfx_kthread+0x10/0x10 [ 224.015658][ T30] ? lock_acquire+0x2f/0xb0 [ 224.020183][ T30] ? __pfx_kthread+0x10/0x10 [ 224.024786][ T30] ret_from_fork+0x45/0x80 [ 224.029185][ T30] ? __pfx_kthread+0x10/0x10 [ 224.033784][ T30] ret_from_fork_asm+0x1a/0x30 [ 224.038545][ T30] [ 224.041642][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 224.049174][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 224.056705][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.065854][ T30] task:kworker/1:0 state:D stack:24992 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 224.076081][ T30] Workqueue: events request_firmware_work_func [ 224.082285][ T30] Call Trace: [ 224.085571][ T30] [ 224.088478][ T30] __schedule+0x1142/0x5b60 [ 224.092983][ T30] ? __up_console_sem+0x85/0xe0 [ 224.097832][ T30] ? __pfx___schedule+0x10/0x10 [ 224.102697][ T30] ? lock_release+0x4e2/0x6f0 [ 224.107369][ T30] ? schedule+0x298/0x350 [ 224.111717][ T30] ? __pfx_lock_release+0x10/0x10 [ 224.116735][ T30] ? __mutex_trylock_common+0x78/0x250 [ 224.122593][ T30] ? schedule+0x1fd/0x350 [ 224.126940][ T30] ? lock_acquire+0x2f/0xb0 [ 224.131479][ T30] ? schedule+0x1fd/0x350 [ 224.135819][ T30] schedule+0xe7/0x350 [ 224.139873][ T30] schedule_preempt_disabled+0x13/0x30 [ 224.145375][ T30] __mutex_lock+0x6bd/0xb10 [ 224.149862][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 224.154911][ T30] ? regdb_fw_cb+0x15a/0x270 [ 224.159489][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 224.164550][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 224.169865][ T30] ? __pfx__printk+0x10/0x10 [ 224.174497][ T30] ? __pfx__request_firmware+0x10/0x10 [ 224.179966][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 224.184899][ T30] ? regdb_fw_cb+0x15a/0x270 [ 224.189464][ T30] regdb_fw_cb+0x15a/0x270 [ 224.193900][ T30] request_firmware_work_func+0x13a/0x250 [ 224.199620][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 224.204860][ T30] ? __pfx_request_firmware_work_func+0x10/0x10 [ 224.211130][ T30] ? process_one_work+0x921/0x1ba0 [ 224.216245][ T30] ? lock_acquire+0x2f/0xb0 [ 224.220781][ T30] ? process_one_work+0x921/0x1ba0 [ 224.225894][ T30] process_one_work+0x9c5/0x1ba0 [ 224.230853][ T30] ? __pfx_reg_todo+0x10/0x10 [ 224.235523][ T30] ? __pfx_process_one_work+0x10/0x10 [ 224.240902][ T30] ? rcu_is_watching+0x12/0xc0 [ 224.245658][ T30] ? assign_work+0x1a0/0x250 [ 224.250259][ T30] worker_thread+0x6c8/0xf00 [ 224.254847][ T30] ? __pfx_worker_thread+0x10/0x10 [ 224.259981][ T30] kthread+0x3af/0x750 [ 224.264046][ T30] ? __pfx_kthread+0x10/0x10 [ 224.268611][ T30] ? lock_acquire+0x2f/0xb0 [ 224.273588][ T30] ? __pfx_kthread+0x10/0x10 [ 224.278182][ T30] ret_from_fork+0x45/0x80 [ 224.282698][ T30] ? __pfx_kthread+0x10/0x10 [ 224.287285][ T30] ret_from_fork_asm+0x1a/0x30 [ 224.292067][ T30] [ 224.295084][ T30] INFO: task kworker/u8:2:35 blocked for more than 144 seconds. [ 224.303041][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 224.310378][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.319044][ T30] task:kworker/u8:2 state:D stack:24176 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 224.329245][ T30] Workqueue: netns cleanup_net [ 224.334072][ T30] Call Trace: [ 224.337354][ T30] [ 224.340316][ T30] __schedule+0x1142/0x5b60 [ 224.344831][ T30] ? __switch_to+0x749/0x1190 [ 224.349486][ T30] ? rcu_watching_snap_stopped_since+0x71/0x110 [ 224.355745][ T30] ? __pfx___schedule+0x10/0x10 [ 224.360942][ T30] ? lock_release+0x4e2/0x6f0 [ 224.365626][ T30] ? schedule+0x298/0x350 [ 224.369980][ T30] ? __pfx_lock_release+0x10/0x10 [ 224.375377][ T30] ? __mutex_trylock_common+0x78/0x250 [ 224.380916][ T30] ? schedule+0x1fd/0x350 [ 224.385245][ T30] ? lock_acquire+0x2f/0xb0 [ 224.389728][ T30] ? schedule+0x1fd/0x350 [ 224.394095][ T30] schedule+0xe7/0x350 [ 224.398157][ T30] schedule_preempt_disabled+0x13/0x30 [ 224.403637][ T30] __mutex_lock+0x6bd/0xb10 [ 224.408136][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 224.414743][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 224.419763][ T30] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 224.425059][ T30] ? __pfx___might_resched+0x10/0x10 [ 224.430364][ T30] ? unregister_netdevice_many_notify+0x959/0x21a0 [ 224.436846][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 224.443530][ T30] unregister_netdevice_many_notify+0x1a51/0x21a0 [ 224.450041][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 224.456813][ T30] ? rcu_is_watching+0x12/0xc0 [ 224.461619][ T30] ? lock_release+0x4e2/0x6f0 [ 224.466303][ T30] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 224.471976][ T30] ? __pfx_lock_release+0x10/0x10 [ 224.477366][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 224.483401][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 224.489116][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 224.495407][ T30] _cfg80211_unregister_wdev+0x64b/0x830 [ 224.501073][ T30] ieee80211_remove_interfaces+0x34f/0x720 [ 224.506877][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 224.513230][ T30] ieee80211_unregister_hw+0x55/0x3a0 [ 224.518610][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 224.523428][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 224.528626][ T30] ? __pfx___might_resched+0x10/0x10 [ 224.533930][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 224.539297][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 224.545043][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 224.550276][ T30] ops_exit_list+0xb0/0x180 [ 224.554760][ T30] cleanup_net+0x5c6/0xbf0 [ 224.559149][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 224.564102][ T30] ? lock_acquire+0x2f/0xb0 [ 224.568604][ T30] ? process_one_work+0x921/0x1ba0 [ 224.573742][ T30] process_one_work+0x9c5/0x1ba0 [ 224.579056][ T30] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 224.585261][ T30] ? __pfx_process_one_work+0x10/0x10 [ 224.590669][ T30] ? rcu_is_watching+0x12/0xc0 [ 224.595438][ T30] ? assign_work+0x1a0/0x250 [ 224.600117][ T30] worker_thread+0x6c8/0xf00 [ 224.604778][ T30] ? __pfx_worker_thread+0x10/0x10 [ 224.609873][ T30] kthread+0x3af/0x750 [ 224.613968][ T30] ? __pfx_kthread+0x10/0x10 [ 224.618532][ T30] ? lock_acquire+0x2f/0xb0 [ 224.623065][ T30] ? __pfx_kthread+0x10/0x10 [ 224.627646][ T30] ret_from_fork+0x45/0x80 [ 224.632102][ T30] ? __pfx_kthread+0x10/0x10 [ 224.636685][ T30] ret_from_fork_asm+0x1a/0x30 [ 224.641464][ T30] [ 224.644489][ T30] INFO: task kworker/u8:4:66 blocked for more than 144 seconds. [ 224.652123][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 224.659386][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.668088][ T30] task:kworker/u8:4 state:D stack:24400 pid:66 tgid:66 ppid:2 flags:0x00004000 [ 224.678280][ T30] Workqueue: events_unbound linkwatch_event [ 224.684772][ T30] Call Trace: [ 224.688040][ T30] [ 224.690991][ T30] __schedule+0x1142/0x5b60 [ 224.695497][ T30] ? __pfx___schedule+0x10/0x10 [ 224.700361][ T30] ? lock_release+0x4e2/0x6f0 [ 224.705042][ T30] ? schedule+0x298/0x350 [ 224.709350][ T30] ? __pfx_lock_release+0x10/0x10 [ 224.714406][ T30] ? __mutex_trylock_common+0x78/0x250 [ 224.719982][ T30] ? schedule+0x1fd/0x350 [ 224.724339][ T30] ? lock_acquire+0x2f/0xb0 [ 224.728852][ T30] ? schedule+0x1fd/0x350 [ 224.733206][ T30] schedule+0xe7/0x350 [ 224.737274][ T30] schedule_preempt_disabled+0x13/0x30 [ 224.742750][ T30] __mutex_lock+0x6bd/0xb10 [ 224.747251][ T30] ? __pfx_lock_unpin_lock+0x10/0x10 [ 224.752560][ T30] ? linkwatch_event+0x51/0xc0 [ 224.757321][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 224.762423][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 224.767621][ T30] ? lock_release+0x4e2/0x6f0 [ 224.772315][ T30] ? process_one_work+0x813/0x1ba0 [ 224.777420][ T30] ? rcu_is_watching+0x12/0xc0 [ 224.782671][ T30] ? linkwatch_event+0x51/0xc0 [ 224.787436][ T30] linkwatch_event+0x51/0xc0 [ 224.792042][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 224.797318][ T30] ? rcu_is_watching+0x12/0xc0 [ 224.802109][ T30] process_one_work+0x9c5/0x1ba0 [ 224.807045][ T30] ? __pfx_process_one_work+0x10/0x10 [ 224.812420][ T30] ? rcu_is_watching+0x12/0xc0 [ 224.817178][ T30] ? assign_work+0x1a0/0x250 [ 224.821798][ T30] worker_thread+0x6c8/0xf00 [ 224.826392][ T30] ? __kthread_parkme+0x148/0x220 [ 224.831432][ T30] ? __pfx_worker_thread+0x10/0x10 [ 224.836545][ T30] kthread+0x3af/0x750 [ 224.840644][ T30] ? __pfx_kthread+0x10/0x10 [ 224.845240][ T30] ? lock_acquire+0x2f/0xb0 [ 224.849736][ T30] ? __pfx_kthread+0x10/0x10 [ 224.854336][ T30] ret_from_fork+0x45/0x80 [ 224.858745][ T30] ? __pfx_kthread+0x10/0x10 [ 224.863352][ T30] ret_from_fork_asm+0x1a/0x30 [ 224.868108][ T30] [ 224.871213][ T30] INFO: task dhcpcd:5483 blocked for more than 144 seconds. [ 224.878482][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 224.886239][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.894952][ T30] task:dhcpcd state:D stack:26152 pid:5483 tgid:5483 ppid:1 flags:0x00000002 [ 224.905165][ T30] Call Trace: [ 224.908424][ T30] [ 224.911364][ T30] __schedule+0x1142/0x5b60 [ 224.915862][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.922094][ T30] ? rcu_is_watching+0x12/0xc0 [ 224.926853][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 224.932063][ T30] ? __pfx___schedule+0x10/0x10 [ 224.936907][ T30] ? lock_release+0x4e2/0x6f0 [ 224.941606][ T30] ? schedule+0x298/0x350 [ 224.945943][ T30] ? __pfx_lock_release+0x10/0x10 [ 224.950988][ T30] ? __mutex_trylock_common+0x78/0x250 [ 224.956450][ T30] ? schedule+0x1fd/0x350 [ 224.960805][ T30] ? lock_acquire+0x2f/0xb0 [ 224.965308][ T30] ? schedule+0x1fd/0x350 [ 224.969615][ T30] schedule+0xe7/0x350 [ 224.973684][ T30] schedule_preempt_disabled+0x13/0x30 [ 224.979140][ T30] __mutex_lock+0x6bd/0xb10 [ 224.983667][ T30] ? genl_rcv_msg+0x580/0x800 [ 224.988699][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 224.993765][ T30] ? stack_depot_save_flags+0x28/0x9c0 [ 224.999221][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 225.004725][ T30] ? kasan_save_stack+0x42/0x60 [ 225.009585][ T30] ? kasan_save_stack+0x33/0x60 [ 225.014453][ T30] ? kasan_save_track+0x14/0x30 [ 225.019317][ T30] ? __kasan_slab_alloc+0x89/0x90 [ 225.024406][ T30] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 225.030509][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 225.035803][ T30] ? genl_rcv_msg+0x580/0x800 [ 225.040504][ T30] genl_rcv_msg+0x580/0x800 [ 225.045028][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.050075][ T30] netlink_rcv_skb+0x16b/0x440 [ 225.054844][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.059845][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.065171][ T30] ? down_read+0xc9/0x330 [ 225.069500][ T30] ? __pfx_down_read+0x10/0x10 [ 225.074310][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 225.079596][ T30] genl_rcv+0x28/0x40 [ 225.083610][ T30] netlink_unicast+0x53c/0x7f0 [ 225.088857][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 225.094191][ T30] netlink_sendmsg+0x8b8/0xd70 [ 225.098953][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.104273][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 225.109044][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 225.114520][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.119818][ T30] ? netdev_run_todo+0x8fc/0x13d0 [ 225.124866][ T30] ___sys_sendmsg+0x135/0x1e0 [ 225.129542][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.134762][ T30] ? full_name_hash+0xbc/0x110 [ 225.139517][ T30] ? rcu_is_watching+0x12/0xc0 [ 225.144300][ T30] ? lock_acquire+0x2f/0xb0 [ 225.148798][ T30] ? populate_seccomp_data+0x213/0x540 [ 225.154313][ T30] __sys_sendmsg+0x16e/0x220 [ 225.158927][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.164326][ T30] ? __secure_computing+0x273/0x3f0 [ 225.169541][ T30] do_syscall_64+0xcd/0x250 [ 225.174121][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.180155][ T30] RIP: 0033:0x7fae08d0ea4b [ 225.184562][ T30] RSP: 002b:00007ffc22d385b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.193286][ T30] RAX: ffffffffffffffda RBX: 00005651b527c94f RCX: 00007fae08d0ea4b [ 225.201351][ T30] RDX: 0000000000000000 RSI: 00007ffc22d38600 RDI: 0000000000000010 [ 225.209338][ T30] RBP: 00007ffc22d3d0f8 R08: 0000000000000000 R09: 0000000000000000 [ 225.217892][ T30] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000010 [ 225.225924][ T30] R13: 00007ffc22d3c660 R14: 0000000000000000 R15: 00005651ec94b8d0 [ 225.233911][ T30] [ 225.236942][ T30] INFO: task syz-executor:6280 blocked for more than 145 seconds. [ 225.244815][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 225.252101][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.260800][ T30] task:syz-executor state:D stack:23616 pid:6280 tgid:6280 ppid:1 flags:0x00004006 [ 225.271025][ T30] Call Trace: [ 225.274298][ T30] [ 225.277212][ T30] __schedule+0x1142/0x5b60 [ 225.281736][ T30] ? __schedule+0x114a/0x5b60 [ 225.286414][ T30] ? __pfx___schedule+0x10/0x10 [ 225.291277][ T30] ? lock_release+0x4e2/0x6f0 [ 225.296331][ T30] ? schedule+0x298/0x350 [ 225.300710][ T30] ? __pfx_lock_release+0x10/0x10 [ 225.305751][ T30] ? __mutex_trylock_common+0x78/0x250 [ 225.311224][ T30] ? schedule+0x1fd/0x350 [ 225.315549][ T30] ? lock_acquire+0x2f/0xb0 [ 225.320127][ T30] ? schedule+0x1fd/0x350 [ 225.324463][ T30] schedule+0xe7/0x350 [ 225.328528][ T30] schedule_preempt_disabled+0x13/0x30 [ 225.334070][ T30] __mutex_lock+0x6bd/0xb10 [ 225.338603][ T30] ? reg_process_self_managed_hints+0x95/0x1f0 [ 225.344876][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 225.350010][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.356011][ T30] ? reg_process_self_managed_hints+0x95/0x1f0 [ 225.362236][ T30] reg_process_self_managed_hints+0x95/0x1f0 [ 225.368229][ T30] wiphy_register+0x1e45/0x2860 [ 225.373591][ T30] ? __pfx__dev_printk+0x10/0x10 [ 225.378535][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 225.383803][ T30] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 225.389915][ T30] ieee80211_register_hw+0x2455/0x4060 [ 225.395644][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 225.401826][ T30] ? net_generic+0xea/0x2a0 [ 225.406359][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 225.411901][ T30] ? net_generic+0x30/0x2a0 [ 225.416424][ T30] ? __asan_memset+0x23/0x50 [ 225.421059][ T30] ? __hrtimer_init+0x106/0x2c0 [ 225.425911][ T30] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 225.431679][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 225.437742][ T30] hwsim_new_radio_nl+0xb42/0x12b0 [ 225.442913][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 225.448461][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 225.455872][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 225.463290][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 225.468840][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 225.474938][ T30] ? bpf_lsm_capable+0x9/0x10 [ 225.479606][ T30] ? security_capable+0x7e/0x260 [ 225.484712][ T30] ? ns_capable+0xd7/0x110 [ 225.489134][ T30] genl_rcv_msg+0x565/0x800 [ 225.493657][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.498928][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 225.504386][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 225.509974][ T30] netlink_rcv_skb+0x16b/0x440 [ 225.514740][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.519741][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.525073][ T30] ? down_read+0xc9/0x330 [ 225.529415][ T30] ? __pfx_down_read+0x10/0x10 [ 225.534199][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 225.539482][ T30] genl_rcv+0x28/0x40 [ 225.543497][ T30] netlink_unicast+0x53c/0x7f0 [ 225.548261][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 225.553578][ T30] netlink_sendmsg+0x8b8/0xd70 [ 225.558346][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.563761][ T30] __sys_sendto+0x488/0x4f0 [ 225.568263][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 225.573314][ T30] ? __fput+0x68d/0xb70 [ 225.577480][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 225.582318][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 225.588310][ T30] do_syscall_64+0xcd/0x250 [ 225.592982][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.598874][ T30] RIP: 0033:0x7f111c18ebbc [ 225.603476][ T30] RSP: 002b:00007fff86c16d20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 225.612024][ T30] RAX: ffffffffffffffda RBX: 00007f111ced4620 RCX: 00007f111c18ebbc [ 225.620052][ T30] RDX: 0000000000000024 RSI: 00007f111ced4670 RDI: 0000000000000003 [ 225.628010][ T30] RBP: 0000000000000000 R08: 00007fff86c16d74 R09: 000000000000000c [ 225.636005][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 225.644034][ T30] R13: 0000000000000000 R14: 00007f111ced4670 R15: 0000000000000000 [ 225.652086][ T30] [ 225.655109][ T30] INFO: task syz-executor:6300 blocked for more than 145 seconds. [ 225.662971][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 225.670297][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.678948][ T30] task:syz-executor state:D stack:24208 pid:6300 tgid:6300 ppid:1 flags:0x00004004 [ 225.689131][ T30] Call Trace: [ 225.692420][ T30] [ 225.695329][ T30] __schedule+0x1142/0x5b60 [ 225.699814][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 225.705755][ T30] ? __pfx___schedule+0x10/0x10 [ 225.710722][ T30] ? lock_release+0x4e2/0x6f0 [ 225.715435][ T30] ? schedule+0x298/0x350 [ 225.719767][ T30] ? __pfx_lock_release+0x10/0x10 [ 225.724858][ T30] ? __mutex_trylock_common+0x78/0x250 [ 225.730358][ T30] ? schedule+0x1fd/0x350 [ 225.734690][ T30] ? lock_acquire+0x2f/0xb0 [ 225.739169][ T30] ? schedule+0x1fd/0x350 [ 225.743519][ T30] schedule+0xe7/0x350 [ 225.747579][ T30] schedule_preempt_disabled+0x13/0x30 [ 225.753063][ T30] __mutex_lock+0x6bd/0xb10 [ 225.757566][ T30] ? inet6_rtm_newaddr+0x502/0x19d0 [ 225.762796][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 225.767842][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 225.773590][ T30] ? avc_has_perm_noaudit+0x119/0x3a0 [ 225.778980][ T30] ? inet6_rtm_newaddr+0x502/0x19d0 [ 225.784189][ T30] ? rtnl_lock+0x9/0x20 [ 225.788340][ T30] inet6_rtm_newaddr+0x502/0x19d0 [ 225.793386][ T30] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 225.798849][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 225.805597][ T30] ? lock_release+0x4e2/0x6f0 [ 225.810326][ T30] ? rcu_is_watching+0x12/0xc0 [ 225.815085][ T30] ? security_capable+0x7e/0x260 [ 225.820044][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 225.825157][ T30] ? lock_acquire+0x2f/0xb0 [ 225.829640][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 225.834812][ T30] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 225.840304][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 225.845273][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.850780][ T30] netlink_rcv_skb+0x16b/0x440 [ 225.855545][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.861021][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.866306][ T30] ? lock_release+0x4e2/0x6f0 [ 225.871024][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 225.876309][ T30] netlink_unicast+0x53c/0x7f0 [ 225.881084][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 225.886379][ T30] netlink_sendmsg+0x8b8/0xd70 [ 225.891170][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.896459][ T30] __sys_sendto+0x488/0x4f0 [ 225.900975][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 225.906014][ T30] ? __fput+0x68d/0xb70 [ 225.910680][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 225.915452][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 225.921467][ T30] do_syscall_64+0xcd/0x250 [ 225.925966][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.931886][ T30] RIP: 0033:0x7fac2718ebbc [ 225.936288][ T30] RSP: 002b:00007ffda5131970 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 225.944714][ T30] RAX: ffffffffffffffda RBX: 00007fac27ed4620 RCX: 00007fac2718ebbc [ 225.952703][ T30] RDX: 0000000000000040 RSI: 00007fac27ed4670 RDI: 0000000000000003 [ 225.960734][ T30] RBP: 0000000000000000 R08: 00007ffda51319c4 R09: 000000000000000c [ 225.968706][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 225.976717][ T30] R13: 0000000000000000 R14: 00007fac27ed4670 R15: 0000000000000000 [ 225.984728][ T30] [ 225.987754][ T30] INFO: task syz-executor:6457 blocked for more than 145 seconds. [ 225.995598][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 226.002901][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.012014][ T30] task:syz-executor state:D stack:28232 pid:6457 tgid:6457 ppid:1 flags:0x00000004 [ 226.022239][ T30] Call Trace: [ 226.025504][ T30] [ 226.028410][ T30] __schedule+0x1142/0x5b60 [ 226.032941][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.037733][ T30] ? __pfx___schedule+0x10/0x10 [ 226.042669][ T30] ? lock_release+0x4e2/0x6f0 [ 226.047382][ T30] ? schedule+0x298/0x350 [ 226.051749][ T30] ? __pfx_lock_release+0x10/0x10 [ 226.056777][ T30] ? __mutex_trylock_common+0x78/0x250 [ 226.062266][ T30] ? schedule+0x1fd/0x350 [ 226.066592][ T30] ? lock_acquire+0x2f/0xb0 [ 226.071133][ T30] ? schedule+0x1fd/0x350 [ 226.075455][ T30] schedule+0xe7/0x350 [ 226.079499][ T30] schedule_preempt_disabled+0x13/0x30 [ 226.084968][ T30] __mutex_lock+0x6bd/0xb10 [ 226.089485][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 226.094633][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 226.099653][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 226.105420][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 226.110563][ T30] ? rtnl_lock+0x9/0x20 [ 226.115198][ T30] inet_rtm_newaddr+0x316/0x1560 [ 226.120228][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 226.126467][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.131257][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 226.136629][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 226.141754][ T30] ? lock_acquire+0x2f/0xb0 [ 226.146253][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 226.151393][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 226.156762][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 226.161731][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.167188][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 226.172251][ T30] netlink_rcv_skb+0x16b/0x440 [ 226.177034][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.182521][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.187806][ T30] ? lock_release+0x4e2/0x6f0 [ 226.192521][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 226.197817][ T30] netlink_unicast+0x53c/0x7f0 [ 226.202762][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 226.208107][ T30] netlink_sendmsg+0x8b8/0xd70 [ 226.213141][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.218803][ T30] __sys_sendto+0x488/0x4f0 [ 226.223355][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 226.228392][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.233229][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.238007][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 226.242830][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 226.248826][ T30] do_syscall_64+0xcd/0x250 [ 226.253375][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.259265][ T30] RIP: 0033:0x7f2467b8ebbc [ 226.263693][ T30] RSP: 002b:00007ffd0bd94a70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 226.272140][ T30] RAX: ffffffffffffffda RBX: 00007f24688d4620 RCX: 00007f2467b8ebbc [ 226.280121][ T30] RDX: 0000000000000028 RSI: 00007f24688d4670 RDI: 0000000000000003 [ 226.288100][ T30] RBP: 0000000000000000 R08: 00007ffd0bd94ac4 R09: 000000000000000c [ 226.296103][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 226.304079][ T30] R13: 0000000000000000 R14: 00007f24688d4670 R15: 0000000000000000 [ 226.312079][ T30] [ 226.315095][ T30] INFO: task syz.7.71:6462 blocked for more than 146 seconds. [ 226.323015][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 226.330338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.338995][ T30] task:syz.7.71 state:D stack:27952 pid:6462 tgid:6461 ppid:6073 flags:0x00004004 [ 226.349183][ T30] Call Trace: [ 226.352481][ T30] [ 226.355391][ T30] __schedule+0x1142/0x5b60 [ 226.360020][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.364795][ T30] ? __switch_to+0x749/0x1190 [ 226.369473][ T30] ? __pfx___schedule+0x10/0x10 [ 226.374401][ T30] ? lock_release+0x4e2/0x6f0 [ 226.379069][ T30] ? schedule+0x298/0x350 [ 226.383408][ T30] ? __pfx_lock_release+0x10/0x10 [ 226.388428][ T30] ? __mutex_trylock_common+0x78/0x250 [ 226.393928][ T30] ? schedule+0x1fd/0x350 [ 226.398252][ T30] ? lock_acquire+0x2f/0xb0 [ 226.402782][ T30] ? schedule+0x1fd/0x350 [ 226.407111][ T30] schedule+0xe7/0x350 [ 226.411211][ T30] schedule_preempt_disabled+0x13/0x30 [ 226.416685][ T30] __mutex_lock+0x6bd/0xb10 [ 226.421625][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.426390][ T30] ? genl_rcv_msg+0x580/0x800 [ 226.431098][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 226.436117][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 226.442411][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 226.447704][ T30] ? genl_rcv_msg+0x580/0x800 [ 226.452405][ T30] genl_rcv_msg+0x580/0x800 [ 226.456913][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.461986][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 226.467367][ T30] ? __pfx___schedule+0x10/0x10 [ 226.472242][ T30] netlink_rcv_skb+0x16b/0x440 [ 226.477005][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.482053][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.487339][ T30] ? down_read+0xc9/0x330 [ 226.491701][ T30] ? __pfx_down_read+0x10/0x10 [ 226.496469][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.501254][ T30] genl_rcv+0x28/0x40 [ 226.505248][ T30] netlink_unicast+0x53c/0x7f0 [ 226.510032][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 226.515320][ T30] ? security_netlink_send+0x24/0x210 [ 226.520724][ T30] ? __sanitizer_cov_trace_pc+0x62/0x70 [ 226.526651][ T30] netlink_sendmsg+0x8b8/0xd70 [ 226.531518][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.536837][ T30] __sys_sendto+0x488/0x4f0 [ 226.541387][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 226.546412][ T30] ? __pfx___sys_socket+0x10/0x10 [ 226.551465][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 226.556227][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 226.562216][ T30] do_syscall_64+0xcd/0x250 [ 226.566729][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.572664][ T30] RIP: 0033:0x7fa8f2b8ebbc [ 226.577065][ T30] RSP: 002b:00007fa8f09f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 226.585490][ T30] RAX: ffffffffffffffda RBX: 00007fa8f09f4fc0 RCX: 00007fa8f2b8ebbc [ 226.593486][ T30] RDX: 0000000000000020 RSI: 00007fa8f09f5010 RDI: 0000000000000006 [ 226.601580][ T30] RBP: 0000000000000000 R08: 00007fa8f09f4f14 R09: 000000000000000c [ 226.609553][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 226.617548][ T30] R13: 00007fa8f09f4f68 R14: 00007fa8f09f5010 R15: 0000000000000000 [ 226.626024][ T30] [ 226.629043][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 226.638086][ T30] INFO: task syz.9.73:6471 blocked for more than 146 seconds. [ 226.645554][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 226.652874][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.661567][ T30] task:syz.9.73 state:D stack:28680 pid:6471 tgid:6470 ppid:6177 flags:0x00000004 [ 226.671786][ T30] Call Trace: [ 226.675045][ T30] [ 226.677951][ T30] __schedule+0x1142/0x5b60 [ 226.682566][ T30] ? __pfx___schedule+0x10/0x10 [ 226.687489][ T30] ? lock_release+0x4e2/0x6f0 [ 226.692369][ T30] ? schedule+0x298/0x350 [ 226.696778][ T30] ? __pfx_lock_release+0x10/0x10 [ 226.701878][ T30] ? __mutex_trylock_common+0x78/0x250 [ 226.707331][ T30] ? schedule+0x1fd/0x350 [ 226.711686][ T30] ? lock_acquire+0x2f/0xb0 [ 226.716185][ T30] ? schedule+0x1fd/0x350 [ 226.720541][ T30] schedule+0xe7/0x350 [ 226.724607][ T30] schedule_preempt_disabled+0x13/0x30 [ 226.730539][ T30] __mutex_lock+0x6bd/0xb10 [ 226.735047][ T30] ? rcu_is_watching+0x12/0xc0 [ 226.739801][ T30] ? genl_rcv_msg+0x580/0x800 [ 226.744491][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 226.749517][ T30] ? __dev_queue_xmit+0x89b/0x43e0 [ 226.754660][ T30] ? __local_bh_enable_ip+0xa4/0x120 [ 226.759981][ T30] ? __dev_queue_xmit+0x89b/0x43e0 [ 226.765108][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 226.770469][ T30] ? genl_rcv_msg+0x580/0x800 [ 226.775141][ T30] genl_rcv_msg+0x580/0x800 [ 226.779619][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.784664][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 226.790075][ T30] netlink_rcv_skb+0x16b/0x440 [ 226.794846][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.799845][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.805162][ T30] ? down_read+0xc9/0x330 [ 226.809505][ T30] ? __pfx_down_read+0x10/0x10 [ 226.814292][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 226.819578][ T30] genl_rcv+0x28/0x40 [ 226.823583][ T30] netlink_unicast+0x53c/0x7f0 [ 226.828363][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 226.834132][ T30] netlink_sendmsg+0x8b8/0xd70 [ 226.838927][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.844239][ T30] __sys_sendto+0x488/0x4f0 [ 226.848737][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 226.853805][ T30] ? lock_release+0x4e2/0x6f0 [ 226.858485][ T30] ? lock_acquire+0x2f/0xb0 [ 226.863012][ T30] ? fd_install+0xba/0x750 [ 226.867429][ T30] ? __pfx___sys_socket+0x10/0x10 [ 226.872476][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 226.877237][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 226.883266][ T30] do_syscall_64+0xcd/0x250 [ 226.887768][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.893697][ T30] RIP: 0033:0x7fda46f8ebbc [ 226.898106][ T30] RSP: 002b:00007fda47d5fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 226.906547][ T30] RAX: ffffffffffffffda RBX: 00007fda47d5ffc0 RCX: 00007fda46f8ebbc [ 226.914545][ T30] RDX: 0000000000000020 RSI: 00007fda47d60010 RDI: 0000000000000006 [ 226.922538][ T30] RBP: 0000000000000000 R08: 00007fda47d5ff14 R09: 000000000000000c [ 226.930545][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 226.938893][ T30] R13: 00007fda47d5ff68 R14: 00007fda47d60010 R15: 0000000000000000 [ 226.946910][ T30] [ 226.949956][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 226.958961][ T30] INFO: lockdep is turned off. [ 226.963759][ T30] NMI backtrace for cpu 1 [ 226.963769][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 226.963788][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.963797][ T30] Call Trace: [ 226.963801][ T30] [ 226.963806][ T30] dump_stack_lvl+0x116/0x1f0 [ 226.963840][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 226.963857][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 226.963877][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 226.963894][ T30] watchdog+0xf14/0x1240 [ 226.963917][ T30] ? __pfx_watchdog+0x10/0x10 [ 226.963939][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.963962][ T30] ? __kthread_parkme+0x148/0x220 [ 226.963980][ T30] ? __pfx_watchdog+0x10/0x10 [ 226.964004][ T30] kthread+0x3af/0x750 [ 226.964022][ T30] ? __pfx_kthread+0x10/0x10 [ 226.964042][ T30] ? __pfx_kthread+0x10/0x10 [ 226.964060][ T30] ret_from_fork+0x45/0x80 [ 226.964082][ T30] ? __pfx_kthread+0x10/0x10 [ 226.964101][ T30] ret_from_fork_asm+0x1a/0x30 [ 226.964124][ T30] [ 226.964131][ T30] Sending NMI from CPU 1 to CPUs 0: [ 227.075658][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 227.076691][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 227.091659][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 227.101781][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 227.111824][ T30] Call Trace: [ 227.115077][ T30] [ 227.117987][ T30] dump_stack_lvl+0x3d/0x1f0 [ 227.122556][ T30] panic+0x71d/0x800 [ 227.126424][ T30] ? __pfx_panic+0x10/0x10 [ 227.130838][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 227.136219][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 227.142201][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 227.147549][ T30] ? watchdog+0xd7e/0x1240 [ 227.151942][ T30] ? watchdog+0xd71/0x1240 [ 227.156345][ T30] watchdog+0xd8f/0x1240 [ 227.160565][ T30] ? __pfx_watchdog+0x10/0x10 [ 227.165215][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.170387][ T30] ? __kthread_parkme+0x148/0x220 [ 227.175381][ T30] ? __pfx_watchdog+0x10/0x10 [ 227.180040][ T30] kthread+0x3af/0x750 [ 227.184106][ T30] ? __pfx_kthread+0x10/0x10 [ 227.188686][ T30] ? __pfx_kthread+0x10/0x10 [ 227.193346][ T30] ret_from_fork+0x45/0x80 [ 227.197748][ T30] ? __pfx_kthread+0x10/0x10 [ 227.202322][ T30] ret_from_fork_asm+0x1a/0x30 [ 227.207075][ T30] [ 227.210282][ T30] Kernel Offset: disabled [ 227.214582][ T30] Rebooting in 86400 seconds..