last executing test programs: 1m13.029631235s ago: executing program 3 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x2000000000000131, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4080, @void, @value}, 0x80) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x4, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x802) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000010401010000000000000000000000000800054000000000080003400000"], 0x2c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x68040200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x438, 0x0, 0x208, 0x0, 0xf8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x2ac, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @local, [], [], 'veth0_to_bond\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) fallocate(r5, 0x44, 0xe23e, 0x3) 1m7.186086523s ago: executing program 3 (id=484): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ddc9ed4c", @ANYRES16=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) r7 = epoll_create(0x6bd0cc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000001700)={0x40000001}) epoll_pwait(r7, &(0x7f0000001780)=[{}], 0x1, 0xffffffff, 0x0, 0x0) keyctl$join(0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) 1m5.760297104s ago: executing program 3 (id=485): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='irq_handler_exit\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b010203010902"], 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r4, r4, 0x0, 0x400000000003f) r5 = dup(r4) fallocate(r5, 0x10, 0x1000000, 0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x5c, &(0x7f0000000040)=0x4) 1m0.144617479s ago: executing program 3 (id=489): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r1, 0xae7e, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) pread64(r3, &(0x7f0000000200)=""/156, 0x9c, 0x80000000) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) listen(r2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) 59.318519878s ago: executing program 0 (id=491): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x16cd, 0x0, 0x0, 0xcf}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000000340), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x100, 0x24, 0xe0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{0x0, 0x6}, [@TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x3, 0x3, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x6, 0x1}}]}, @TCA_NETEM_DELAY_DIST={0x3a, 0x2, "253d0f6d3edd80c65368c0585947e34d99703c50a984eb29796172089c131f4d88434b2eae8b43f550c913845e0990344c5d2ffb2b51"}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8000, 0x1, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x200, 0xe4f, 0x7ff, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x4, 0x6, 0x5}}]}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x50}]}, 0x100}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 56.256374637s ago: executing program 3 (id=493): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) recvmmsg(r3, 0x0, 0x0, 0x425826b85cacf01a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='virtiofs\x00', 0x0, 0x0) 53.818540268s ago: executing program 0 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xb) close_range(r6, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r7, 0x0, r7, &(0x7f0000000100)='./file1\x00', 0x0) 52.496036591s ago: executing program 3 (id=499): socket$inet_udplite(0x2, 0x2, 0x88) gettid() r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x80802) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000000), 0x100000008) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001580)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) 51.419710142s ago: executing program 0 (id=500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() socket$inet_sctp(0x2, 0x0, 0x84) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x30d3, &(0x7f0000000380)) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580), 0x4) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 48.022029632s ago: executing program 0 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007d00), 0x0, 0x40000001, &(0x7f0000007f40)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x38011, r0, 0xdfb8c000) add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000002cc0)="d3445970ffffffffb8b4cb0500408a9f36c17f92aabc7391f8715df5c0150b77dda9e079aed4f121f78d697610fec24e0a12c4d7a2381ea7c246199d7aaca8b4816b5222c6021f0f9580c20401491617f37fabb26605313e683377ce34ad1a3b30d0b5807e8f082d18204c5f1ac401c186a729328e726f4ac349abac3c517a3eb4b7c364ce6902818f475a4d97ffe4f95cd969b6105cfd200f8fb20adf0624256f9d4729fc52eb8bceaf24edfa612b9ad5cd2ffb1d305ae945640020af2e7aafa66d", 0xc2, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000b40)=""/4096, 0x852}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000240)=""/34, 0x22}], 0x4, 0x0, 0x14d7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0000ecff0095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r3) recvfrom$inet_nvme(r1, &(0x7f00000003c0)=""/108, 0x6c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) 44.887640326s ago: executing program 0 (id=507): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043b0a"], 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6cc5dc4f094ee44001014184193d948ffbe42964efce53", 0x48}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x40505331, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f0000001040)="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", &(0x7f0000000180)=""/116}, 0x20) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000080)={0x3, 0x1, 0x1d, 0x13, 0x126, &(0x7f0000000680)}) r5 = fspick(r4, 0x0, 0x1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x16, 0x7, 0x0, 0x3, 0x7, 0xd853, 0xfff}, 0x0) 42.83956052s ago: executing program 2 (id=510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) setresuid(0x0, 0x0, 0x0) r3 = io_uring_setup(0x30d5, &(0x7f00000000c0)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) write$UHID_CREATE2(r6, 0x0, 0x118) getsockopt$llc_int(r5, 0x10c, 0x1, 0x0, &(0x7f0000000000)=0x300) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x1000)=nil, 0x1000}) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/30, 0x1e, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x23) statx(r6, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f00000002c0)) 40.311937154s ago: executing program 2 (id=512): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x7}}) r4 = dup3(r3, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fe03000000000000ff0700006505fffff0ffffff186400000400000000000000080000001800000007000000000000000600000095000000000000000000009500"/88], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f000001af00)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000680)=[r0, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1000, @void, @value}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @loopback}, '\b\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) mmap$binder(&(0x7f00005de000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b0009000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) 40.249795732s ago: executing program 0 (id=513): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) open$dir(0x0, 0x64041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x85}, @generic={0x3, 0xa, 0x8, 0x9, 0x3803}, @call={0x85, 0x0, 0x0, 0x6f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x41, &(0x7f0000000600)=""/65, 0x41000, 0x10, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0xde3adb1, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r5, r5], &(0x7f0000000700)=[{0x2, 0x2, 0x2, 0x6}], 0x10, 0x6, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x5) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYRES32, @ANYBLOB], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) 36.689482702s ago: executing program 2 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 34.866266223s ago: executing program 2 (id=520): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r1, 0x0) socket$unix(0x1, 0x5, 0x0) accept4(r1, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) cachestat(r2, &(0x7f0000000080), &(0x7f00000000c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000280)=""/15) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x6c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x6c}}, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000001b00)=""/102397, 0x18ffd}], 0x1, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) 26.380061633s ago: executing program 2 (id=526): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) rt_sigaction(0x19, &(0x7f0000000040)={&(0x7f00000000c0)="0080d09634b8f30fc2d6db7f5e06aef4f40fa52e2e46b26cd626f00994aff7000000c4c1796f960600000040cd00f1453c990300000044ca0fa1", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r7 = memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x4) ftruncate(r7, 0x40000001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x8, 0x0, [0x0, 0x0, 0xa, 0x0, 0x4, 0x9, 0x0, 0x7, 0xe49e, 0x9, 0x0, 0xbfd, 0x2, 0xf28, 0xf9, 0x6733]}, {0x24, 0x0, [0x0, 0x4, 0xfffff7e2, 0x7fffffff, 0x2, 0x2162ce96, 0x10, 0x2, 0x0, 0x80000000, 0x52, 0x401, 0x0, 0x8000, 0x0, 0xd40]}, {0x10, 0x0, [0x2b12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x10000000]}, {0x0, 0x0, [0x8, 0x0, 0x401, 0x5, 0x4, 0xf7, 0x2e, 0x7, 0x6, 0x0, 0x8, 0xb, 0x2, 0x8, 0x1ff, 0x1]}, {0x2, 0x0, [0x8, 0x8, 0x3, 0xbf, 0x9, 0x56b, 0x5, 0x2, 0xf2b6, 0x53b0, 0x80, 0x1, 0xf2dd, 0x2, 0xff, 0x10]}, {0x20, 0x0, [0xffffffff, 0x7, 0x2, 0x4, 0x5, 0x3, 0xeaf6, 0x1ff, 0xa00, 0x3, 0x9cb0, 0x4, 0x2771, 0x8, 0x400, 0x8]}], r6, 0x1, 0x1, 0x1b0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x48) 24.552820013s ago: executing program 2 (id=528): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, 0x0, 0x6a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x20a, 0x3, 0x800, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x3}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001380)=""/97, 0x61}], 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f0000002840)=""/4095, 0xfff) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000600)=""/170, 0xaa}], 0x1, 0xffeffffe, 0x0) read$char_usb(r6, &(0x7f0000000240)=""/34, 0x43) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) close(r1) unshare(0x68040200) 17.397570107s ago: executing program 1 (id=533): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x20}}, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d001034e90102030109021b0002060000000904a900005943bf000904"], 0x0) creat(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020}, 0x91) writev(r4, &(0x7f00000010c0), 0x0) io_uring_setup(0x5c01, &(0x7f0000000240)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaa08aaaaaaaa948d9317aa88"], 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000000012090212000100000000090400000080829900"], 0x0) 17.298381888s ago: executing program 4 (id=534): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYBLOB="d0000000080211000000080211000001ffffffffffff0000030000000000000000d8aae09a2ac0054ecc14f00a16a0cac2207b63f71fc3d345c4f51147a94e2c8b9d43985263fef7478d9ef262af9897a56a9e078686615ce2"], 0x21) r5 = socket(0x18, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x2042, 0x0, 0x0) connect$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendto$llc(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket(0x23, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000100)={'ip6gre0\x00', 0x4e}) gettid() sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r6], 0x14}}, 0x0) socket$inet6(0xa, 0x3, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13.782273015s ago: executing program 4 (id=536): syz_open_dev$sndctrl(0x0, 0xe, 0x40) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x10000010, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000000000e6ff000a80"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000011c0)='./control\x00', &(0x7f0000000100), 0x400092, &(0x7f0000000000)=ANY=[@ANYBLOB='dyn,flock=write']) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) dup(0xffffffffffffffff) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13.588250049s ago: executing program 1 (id=537): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x200000) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000001940)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r6, 0x0) r7 = io_uring_setup(0x30d5, &(0x7f00000000c0)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x1000)=nil, 0x1000}) close_range(r7, 0xffffffffffffffff, 0x0) 9.994663896s ago: executing program 1 (id=538): socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './bus\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, 0x0) lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000140)=""/192, 0x20000057) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000340), 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="a000000000010104000000000000000002000000240001801400018008000100ac1414aa08000200000000000c000280050001000000000024000280140001800800010000000000080002000a0101010c000280050001000000000008000740000000023c0018800800014000000000080002"], 0xa0}}, 0x0) 9.836942288s ago: executing program 4 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0xfff, "fe0c9b21c872a2f28f8019c5df98ac6856a01954f2e640ad7d02e385421e1cb7", 0x2}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1ba}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x8, 0x63dd8a7f, 0x6, 0x1000, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48) socket(0x2, 0x80805, 0x0) 8.235887861s ago: executing program 4 (id=540): syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() io_uring_setup(0x1ba5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000b00)={0x1, @vbi}) r5 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008000000000000000ad00000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) 6.394813579s ago: executing program 1 (id=541): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$hiddev(0x0, 0x7, 0x44080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x4f08e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r7, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 6.392512599s ago: executing program 4 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='net/dev_snmp6\x00') getdents64(r1, &(0x7f0000000100)=""/4014, 0xfae) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x6, r9, r8}) sendmmsg(r6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 2.108299326s ago: executing program 4 (id=543): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r5 = epoll_create(0x208000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, r9, 0x0, 0x7ffff000) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.46255731s ago: executing program 1 (id=544): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x40001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000880)=""/89, 0x59}], 0x1) ftruncate(r6, 0x51a9497) pipe(&(0x7f0000000080)) 0s ago: executing program 1 (id=545): fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x10) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) faccessat2(r0, &(0x7f0000000280)='./file0/../file0\x00', 0x116, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0xe, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ptrace$setsig(0x4203, r1, 0x4, &(0x7f0000000380)={0x13, 0x3, 0x9}) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) write$FUSE_INIT(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{}]}) chroot(&(0x7f0000000000)='./file0/../file0\x00') r7 = memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x0) pwrite64(r7, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') kernel console output (not intermixed with test programs): :50:50:50:50 [ 549.535760][ T5306] usb 4-1: Using ep0 maxpacket: 32 [ 549.554992][ T5306] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.715861][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 549.880792][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 550.074930][ T5306] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 550.212627][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.290430][ T6841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.348197][ T6841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.362060][ T5306] usb 4-1: config 0 descriptor?? [ 550.413629][ T7746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 550.479247][ T5306] hub 4-1:0.0: USB hub found [ 550.568318][ T7510] veth0_vlan: entered promiscuous mode [ 550.599893][ T7467] veth0_vlan: entered promiscuous mode [ 550.768426][ T7467] veth1_vlan: entered promiscuous mode [ 550.812468][ T7510] veth1_vlan: entered promiscuous mode [ 550.846172][ T5306] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 551.159677][ T5306] usbhid 4-1:0.0: can't add hid device: -32 [ 551.160967][ T7510] veth0_macvtap: entered promiscuous mode [ 551.195743][ T5306] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 551.323200][ T7510] veth1_macvtap: entered promiscuous mode [ 551.416259][ T943] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 551.484453][ T7467] veth0_macvtap: entered promiscuous mode [ 551.640299][ T7467] veth1_macvtap: entered promiscuous mode [ 551.678281][ T943] usb 2-1: Using ep0 maxpacket: 8 [ 551.745597][ T943] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 551.783122][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.783433][ T943] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 551.858611][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.858630][ T943] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 551.912823][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.968055][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.974270][ T943] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.000859][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.017551][ T943] usb 2-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 552.054677][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.077723][ T943] usb 2-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际䛩 [ 552.102264][ T7758] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 552.121784][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.121809][ T943] usb 2-1: SerialNumber: ᐊ [ 552.213606][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.265939][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.294459][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.329598][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.403176][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.427460][ T7758] kvm: pic: level sensitive irq not supported [ 552.427772][ T7758] kvm: pic: non byte read [ 552.441097][ T7758] kvm: pic: level sensitive irq not supported [ 552.441279][ T7758] kvm: pic: non byte read [ 552.453852][ T7758] kvm: pic: level sensitive irq not supported [ 552.454179][ T7758] kvm: pic: non byte read [ 552.466604][ T7758] kvm: pic: level sensitive irq not supported [ 552.467131][ T7758] kvm: pic: non byte read [ 552.479975][ T7758] kvm: pic: level sensitive irq not supported [ 552.480123][ T7758] kvm: pic: non byte read [ 552.670209][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.695465][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.728887][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.759327][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.777569][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.789749][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.801397][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.813120][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.829156][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.843152][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.854805][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.872339][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.008367][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.056046][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.077885][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.090052][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.111957][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.166958][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.179147][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.193106][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.221114][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.255349][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.298926][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.331521][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.366631][ T943] cdc_ncm 2-1:1.0: bind() failure [ 553.394406][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.399651][ T943] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 553.461687][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.465414][ T943] cdc_ncm 2-1:1.1: bind() failure [ 553.499383][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.519320][ T943] usb 2-1: USB disconnect, device number 5 [ 553.521160][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.562521][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.573780][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.589888][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.610564][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.621753][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.655889][ T5277] usb 4-1: USB disconnect, device number 16 [ 553.669868][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.699098][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.734670][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.794427][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.840347][ T7510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.903490][ T7510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.932106][ T7510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.986117][ T7510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.113658][ T7467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.157004][ T7775] No control pipe specified [ 554.193692][ T7467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.217393][ T7467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.240813][ T7467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.313045][ T7777] netlink: 92 bytes leftover after parsing attributes in process `syz.1.365'. [ 556.765493][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.825909][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.084107][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.126618][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.015454][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.023727][ T1291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.044424][ T1291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.065306][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.685389][ T7802] netlink: 120 bytes leftover after parsing attributes in process `syz.3.370'. [ 561.955410][ T53] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 563.171111][ T7821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.026558][ T53] usb 2-1: Using ep0 maxpacket: 8 [ 564.656917][ T7808] netlink: 'syz.2.210': attribute type 9 has an invalid length. [ 564.719239][ T7808] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.210'. [ 564.783655][ T11] team0: left allmulticast mode [ 564.815532][ T11] team_slave_0: left allmulticast mode [ 564.821673][ T11] team_slave_1: left allmulticast mode [ 564.866104][ T11] team0: left promiscuous mode [ 564.871129][ T11] team_slave_0: left promiscuous mode [ 564.919188][ T11] team_slave_1: left promiscuous mode [ 564.925262][ T11] bridge0: port 3(team0) entered disabled state [ 564.989730][ T11] bridge_slave_1: left allmulticast mode [ 564.996395][ T11] bridge_slave_1: left promiscuous mode [ 565.035032][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.089734][ T11] bridge_slave_0: left allmulticast mode [ 565.146939][ T11] bridge_slave_0: left promiscuous mode [ 565.183298][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.844824][ T5277] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 566.164598][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 566.321565][ T5277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 566.476436][ T5277] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 566.506274][ T5277] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 567.420918][ T29] audit: type=1400 audit(1727273214.600:740): avc: denied { remount } for pid=7840 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 568.284146][ T53] usb 2-1: device descriptor read/all, error -71 [ 568.313169][ T29] audit: type=1400 audit(1727273215.560:741): avc: denied { unmount } for pid=7510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 568.972673][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.979487][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.215844][ T7850] syz.1.378 uses obsolete (PF_INET,SOCK_PACKET) [ 569.433043][ T7850] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 569.734717][ T29] audit: type=1400 audit(1727273217.010:742): avc: denied { ioctl } for pid=7848 comm="syz.1.378" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 569.877741][ T5277] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.898505][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.941053][ T29] audit: type=1400 audit(1727273217.210:743): avc: denied { append } for pid=7854 comm="syz.0.379" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 569.963715][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.997245][ T5277] usb 4-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 570.055550][ T7855] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 570.064683][ T7855] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 570.115448][ T5277] usb 4-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际䛩 [ 570.188899][ T5277] usb 4-1: can't set config #1, error -71 [ 570.224444][ T5277] usb 4-1: USB disconnect, device number 17 [ 570.780455][ T29] audit: type=1400 audit(1727273218.020:744): avc: denied { map } for pid=7860 comm="syz.3.380" path="socket:[23350]" dev="sockfs" ino=23350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 571.503903][ T29] audit: type=1400 audit(1727273218.020:745): avc: denied { read } for pid=7860 comm="syz.3.380" path="socket:[23350]" dev="sockfs" ino=23350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 571.527594][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.895508][ T29] audit: type=1400 audit(1727273220.930:746): avc: denied { append } for pid=7864 comm="syz.3.381" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 577.485306][ T25] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 577.556336][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.589549][ T11] bond_slave_0: left promiscuous mode [ 577.646447][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.677474][ T11] bond_slave_1: left promiscuous mode [ 577.712515][ T11] bond0 (unregistering): Released all slaves [ 577.727434][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.772872][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 577.950335][ T29] audit: type=1400 audit(1727273225.210:747): avc: denied { connect } for pid=7875 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 578.291860][ T25] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 578.507023][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.531656][ T25] usb 1-1: Product: syz [ 578.545706][ T25] usb 1-1: Manufacturer: syz [ 578.550395][ T25] usb 1-1: SerialNumber: syz [ 578.603271][ T25] usb 1-1: config 0 descriptor?? [ 578.671308][ T25] usb 1-1: Found UVC 0.00 device syz (468c:90ea) [ 578.715751][ T25] usb 1-1: No valid video chain found. [ 579.323726][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 579.363388][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 579.373325][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 579.390320][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 579.399145][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 579.407484][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 579.569352][ T29] audit: type=1400 audit(1727273226.840:748): avc: denied { read } for pid=7873 comm="syz.0.384" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 579.646946][ T11] hsr_slave_0: left promiscuous mode [ 579.659336][ T29] audit: type=1400 audit(1727273226.840:749): avc: denied { open } for pid=7873 comm="syz.0.384" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 579.747567][ T11] hsr_slave_1: left promiscuous mode [ 579.780058][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.810546][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.903448][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.966904][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.154266][ T11] veth1_macvtap: left promiscuous mode [ 580.192321][ T11] veth0_macvtap: left promiscuous mode [ 580.232386][ T11] veth1_vlan: left promiscuous mode [ 580.286635][ T11] veth0_vlan: left promiscuous mode [ 580.863244][ T25] usb 1-1: USB disconnect, device number 12 [ 581.055478][ T7130] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 581.359503][ T7130] usb 4-1: Using ep0 maxpacket: 8 [ 581.524354][ T5224] Bluetooth: hci4: command tx timeout [ 582.255005][ T7130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 582.352694][ T7130] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 582.415428][ T7130] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 582.462339][ T7130] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.504156][ T7130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.550461][ T7130] usb 4-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 582.582582][ T7130] usb 4-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际䛩 [ 582.593935][ T7130] usb 4-1: SerialNumber: ᐊ [ 582.925798][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.944383][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.959353][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.973548][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.991929][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 583.005882][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 583.059615][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 583.072700][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 583.081820][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 583.092868][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 583.101749][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 583.109926][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.625243][ T7082] Bluetooth: hci4: command tx timeout [ 584.121984][ T7130] cdc_ncm 4-1:1.0: bind() failure [ 584.153888][ T7130] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 584.200627][ T7130] cdc_ncm 4-1:1.1: bind() failure [ 584.218793][ T7130] usb 4-1: USB disconnect, device number 18 [ 584.497006][ T11] team0 (unregistering): Port device team_slave_1 removed [ 584.621885][ T11] team0 (unregistering): Port device team_slave_0 removed [ 584.857356][ T29] audit: type=1400 audit(1727273232.150:750): avc: denied { create } for pid=7904 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 584.890597][ T29] audit: type=1400 audit(1727273232.150:751): avc: denied { setopt } for pid=7904 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 585.017767][ T7082] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 585.715536][ T5238] Bluetooth: hci0: command tx timeout [ 585.725904][ T7082] Bluetooth: hci2: command tx timeout [ 585.733663][ T5224] Bluetooth: hci4: command tx timeout [ 586.577814][ T29] audit: type=1400 audit(1727273233.880:752): avc: denied { write } for pid=7908 comm="syz.3.392" path="socket:[23513]" dev="sockfs" ino=23513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 587.370529][ T7910] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 587.721081][ T29] audit: type=1400 audit(1727273235.000:753): avc: denied { read } for pid=7914 comm="syz.0.393" name="btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 587.791485][ T5239] Bluetooth: hci2: command tx timeout [ 587.791496][ T5224] Bluetooth: hci0: command tx timeout [ 587.826986][ T29] audit: type=1400 audit(1727273235.010:754): avc: denied { open } for pid=7914 comm="syz.0.393" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 587.853537][ T5224] Bluetooth: hci4: command tx timeout [ 589.018066][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 589.027014][ T29] audit: type=1400 audit(1727273236.320:755): avc: denied { nlmsg_read } for pid=7918 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 589.541678][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.836328][ T5224] Bluetooth: hci0: command tx timeout [ 589.836343][ T5239] Bluetooth: hci2: command tx timeout [ 589.842722][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 590.045352][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 590.053880][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.072757][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.083735][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.124261][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.147208][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.147761][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.175299][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.297982][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.445426][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 590.451295][ T25] usbtmc 1-1:16.0: can't read capabilities [ 590.463498][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.548501][ T7898] chnl_net:caif_netlink_parms(): no params data found [ 590.593304][ T7896] chnl_net:caif_netlink_parms(): no params data found [ 590.678133][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.703846][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.725547][ T7879] bridge_slave_0: entered allmulticast mode [ 590.733524][ T7879] bridge_slave_0: entered promiscuous mode [ 591.124804][ T7939] xt_nfacct: accounting object `syz1' does not exists [ 591.144331][ T7939] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 591.918666][ T5239] Bluetooth: hci0: command tx timeout [ 591.918679][ T5224] Bluetooth: hci2: command tx timeout [ 591.996001][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.003558][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.012592][ T7879] bridge_slave_1: entered allmulticast mode [ 592.021561][ T7879] bridge_slave_1: entered promiscuous mode [ 592.218486][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.333739][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.668941][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.687678][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.698407][ T7898] bridge_slave_0: entered allmulticast mode [ 592.713860][ T7898] bridge_slave_0: entered promiscuous mode [ 592.738335][ T7879] team0: Port device team_slave_0 added [ 592.763627][ T7879] team0: Port device team_slave_1 added [ 592.770958][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.779660][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.787683][ T7896] bridge_slave_0: entered allmulticast mode [ 592.797147][ T7896] bridge_slave_0: entered promiscuous mode [ 592.859513][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.908093][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.915632][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.923093][ T7898] bridge_slave_1: entered allmulticast mode [ 592.934163][ T7898] bridge_slave_1: entered promiscuous mode [ 593.008946][ T53] usb 1-1: USB disconnect, device number 13 [ 593.107423][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.131410][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.139287][ T7896] bridge_slave_1: entered allmulticast mode [ 593.192175][ T7896] bridge_slave_1: entered promiscuous mode [ 593.295459][ T29] audit: type=1400 audit(1727273240.590:756): avc: denied { bind } for pid=7946 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 593.431442][ T7947] Bluetooth: MGMT ver 1.23 [ 593.436787][ T29] audit: type=1400 audit(1727273240.720:757): avc: denied { write } for pid=7946 comm="syz.0.396" path="socket:[24861]" dev="sockfs" ino=24861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 593.460989][ T7947] Bluetooth: hci3: unsupported parameter 1540 [ 593.468209][ T7947] Bluetooth: hci3: unsupported parameter 1540 [ 593.506584][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.556029][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.563039][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.595276][ T7879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.610284][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.617810][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.645595][ T7879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.717851][ T7896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.770758][ T7898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.922911][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.969822][ T7896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.413054][ T7898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.975136][ T7961] xt_connbytes: Forcing CT accounting to be enabled [ 595.982526][ T7961] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 597.589966][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.762966][ T7896] team0: Port device team_slave_0 added [ 600.138531][ T7879] hsr_slave_0: entered promiscuous mode [ 600.165947][ T7879] hsr_slave_1: entered promiscuous mode [ 600.183665][ T7879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.203681][ T7879] Cannot create hsr debugfs directory [ 601.122471][ T7896] team0: Port device team_slave_1 added [ 601.436513][ T29] audit: type=1400 audit(1727273248.740:758): avc: denied { write } for pid=7977 comm="syz.0.403" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 601.643991][ T7898] team0: Port device team_slave_0 added [ 601.680072][ T7898] team0: Port device team_slave_1 added [ 601.749380][ T29] audit: type=1400 audit(1727273249.010:759): avc: denied { relabelfrom } for pid=7967 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 601.849543][ T29] audit: type=1400 audit(1727273249.090:760): avc: denied { relabelto } for pid=7967 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 601.908525][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.923332][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.958171][ T7896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.291161][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.310541][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.411729][ T7896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.531737][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.560283][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.604632][ T7898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.858362][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.889629][ T29] audit: type=1400 audit(1727273250.180:761): avc: denied { unlink } for pid=7985 comm="syz.0.404" name="#1" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 602.891482][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.946537][ T7898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.019879][ T29] audit: type=1400 audit(1727273250.300:762): avc: denied { mount } for pid=7985 comm="syz.0.404" name="/" dev="overlay" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 603.917459][ T29] audit: type=1400 audit(1727273251.010:763): avc: denied { write } for pid=7988 comm="syz.3.405" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 604.008335][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.751835][ T7896] hsr_slave_0: entered promiscuous mode [ 604.832070][ T7896] hsr_slave_1: entered promiscuous mode [ 604.839084][ T7896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.851440][ T7896] Cannot create hsr debugfs directory [ 604.858328][ T7986] fuse: Unknown parameter 'fd0x0000000000000006' [ 605.162682][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.846746][ T7898] hsr_slave_0: entered promiscuous mode [ 605.899724][ T7898] hsr_slave_1: entered promiscuous mode [ 606.235467][ T7898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.254064][ T7898] Cannot create hsr debugfs directory [ 606.796445][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.024159][ T8009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65304 sclass=netlink_route_socket pid=8009 comm=syz.0.408 [ 608.238978][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.110652][ T8012] 9pnet_fd: Insufficient options for proto=fd [ 611.335407][ T29] audit: type=1400 audit(1727273258.621:764): avc: denied { mount } for pid=8033 comm="syz.0.413" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 611.441337][ T29] audit: type=1400 audit(1727273258.731:765): avc: denied { create } for pid=8033 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 611.473252][ T8035] virtio-fs: tag <(null)> not found [ 611.573988][ T29] audit: type=1400 audit(1727273258.861:766): avc: denied { ioctl } for pid=8033 comm="syz.0.413" path="socket:[25617]" dev="sockfs" ino=25617 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 611.730600][ T8038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 611.737334][ T8038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 611.760757][ T8038] vhci_hcd vhci_hcd.0: Device attached [ 611.956954][ T7714] vhci_hcd: vhci_device speed not set [ 612.056125][ T7714] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 612.321248][ T8039] vhci_hcd: connection reset by peer [ 612.346368][ T1116] vhci_hcd: stop threads [ 612.366166][ T1116] vhci_hcd: release socket [ 612.376635][ T1116] vhci_hcd: disconnect device [ 612.487294][ T11] bridge_slave_1: left allmulticast mode [ 612.543210][ T11] bridge_slave_1: left promiscuous mode [ 612.549450][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.611307][ T11] bridge_slave_0: left allmulticast mode [ 612.629233][ T11] bridge_slave_0: left promiscuous mode [ 612.645911][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.809263][ T11] bridge_slave_1: left allmulticast mode [ 612.815055][ T11] bridge_slave_1: left promiscuous mode [ 612.844413][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.883991][ T11] bridge_slave_0: left allmulticast mode [ 612.889965][ T11] bridge_slave_0: left promiscuous mode [ 612.915700][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.209638][ T11] bridge_slave_1: left allmulticast mode [ 613.215530][ T11] bridge_slave_1: left promiscuous mode [ 613.221583][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.616119][ T29] audit: type=1400 audit(1727273260.741:767): avc: denied { mount } for pid=8044 comm="syz.3.414" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 613.688547][ T29] audit: type=1400 audit(1727273260.811:768): avc: denied { remount } for pid=8044 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 614.168478][ T29] audit: type=1400 audit(1727273261.411:769): avc: denied { unmount } for pid=6615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 614.168542][ T11] bridge_slave_0: left allmulticast mode [ 614.275278][ T11] bridge_slave_0: left promiscuous mode [ 614.281245][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.454424][ T29] audit: type=1400 audit(1727273261.741:770): avc: denied { unmount } for pid=7494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 614.849241][ T29] audit: type=1400 audit(1727273262.121:771): avc: denied { mount } for pid=8054 comm="syz.0.416" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 615.350166][ T29] audit: type=1400 audit(1727273262.141:772): avc: denied { mounton } for pid=8054 comm="syz.0.416" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 615.452841][ T29] audit: type=1400 audit(1727273262.741:773): avc: denied { unmount } for pid=7494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 617.199515][ T7714] vhci_hcd: vhci_device speed not set [ 617.813407][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.828986][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.844827][ T11] bond0 (unregistering): Released all slaves [ 618.129368][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.141973][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.160178][ T11] bond0 (unregistering): Released all slaves [ 618.456367][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.474662][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.499475][ T11] bond0 (unregistering): Released all slaves [ 619.790648][ T7879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.007369][ T7879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.114998][ T7879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 620.161403][ T7879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 621.166376][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 621.207322][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 621.226338][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 621.265519][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 621.284651][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 621.298782][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 621.655250][ T11] hsr_slave_0: left promiscuous mode [ 621.668024][ T11] hsr_slave_1: left promiscuous mode [ 621.694583][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.705008][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.714769][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.726582][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.016346][ T11] hsr_slave_0: left promiscuous mode [ 622.023023][ T11] hsr_slave_1: left promiscuous mode [ 625.613359][ T5224] Bluetooth: hci1: command tx timeout [ 625.815722][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.857303][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.884506][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.905751][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.960857][ T11] hsr_slave_0: left promiscuous mode [ 625.968227][ T11] hsr_slave_1: left promiscuous mode [ 625.974897][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.988520][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.997721][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.007806][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.110994][ T11] veth1_macvtap: left promiscuous mode [ 626.118525][ T11] veth0_macvtap: left promiscuous mode [ 626.124353][ T11] veth1_vlan: left promiscuous mode [ 626.130841][ T11] veth0_vlan: left promiscuous mode [ 626.138704][ T11] veth1_macvtap: left promiscuous mode [ 626.145005][ T11] veth0_macvtap: left promiscuous mode [ 626.151861][ T11] veth1_vlan: left promiscuous mode [ 626.158934][ T11] veth0_vlan: left promiscuous mode [ 626.178651][ T11] veth1_macvtap: left promiscuous mode [ 626.184279][ T11] veth0_macvtap: left promiscuous mode [ 626.202584][ T11] veth1_vlan: left promiscuous mode [ 626.210937][ T11] veth0_vlan: left promiscuous mode [ 627.132987][ T29] audit: type=1400 audit(1727273274.411:774): avc: denied { view } for pid=8090 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 627.675620][ T5224] Bluetooth: hci1: command tx timeout [ 629.755463][ T5224] Bluetooth: hci1: command tx timeout [ 630.300386][ T11] team0 (unregistering): Port device team_slave_1 removed [ 630.409197][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.415731][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.458373][ T29] audit: type=1400 audit(1727273277.751:775): avc: denied { append } for pid=8104 comm="syz.3.425" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 630.466249][ T11] team0 (unregistering): Port device team_slave_0 removed [ 631.835622][ T5224] Bluetooth: hci1: command tx timeout [ 631.925338][ T7130] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 632.141280][ T7130] usb 4-1: Using ep0 maxpacket: 8 [ 632.169684][ T7130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 632.203116][ T7130] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 632.215839][ T7130] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 632.275650][ T7130] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.289112][ T7130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.298883][ T7130] usb 4-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 632.323056][ T7130] usb 4-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际 [ 632.332146][ T7130] usb 4-1: SerialNumber: ᐊ [ 633.613896][ T7130] cdc_ncm 4-1:1.0: bind() failure [ 633.651444][ T7130] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 633.659482][ T7130] cdc_ncm 4-1:1.1: bind() failure [ 633.689207][ T7130] usb 4-1: USB disconnect, device number 19 [ 634.276625][ T11] team0 (unregistering): Port device team_slave_1 removed [ 634.422478][ T11] team0 (unregistering): Port device team_slave_0 removed [ 635.233359][ T29] audit: type=1326 audit(1727273282.441:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b277def9 code=0x7ffc0000 [ 635.576187][ T29] audit: type=1326 audit(1727273282.441:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b277def9 code=0x7ffc0000 [ 635.600418][ T29] audit: type=1326 audit(1727273282.461:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f35b277def9 code=0x7ffc0000 [ 635.624761][ T29] audit: type=1326 audit(1727273282.461:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b277def9 code=0x7ffc0000 [ 635.648913][ T29] audit: type=1326 audit(1727273282.461:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b277def9 code=0x7ffc0000 [ 635.692876][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.296983][ T5239] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 637.670211][ T11] team0 (unregistering): Port device team_slave_1 removed [ 637.833525][ T8122] process 'syz.3.428' launched './file0' with NULL argv: empty string added [ 637.999577][ T29] audit: type=1400 audit(1727273285.121:781): avc: denied { execute } for pid=8119 comm="syz.3.428" name="file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.319622][ T29] audit: type=1400 audit(1727273285.151:782): avc: denied { execute_no_trans } for pid=8119 comm="syz.3.428" path="/103/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.686779][ T11] team0 (unregistering): Port device team_slave_0 removed [ 639.046072][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.071121][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.085637][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.437407][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.452869][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 639.470401][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.507048][ T8133] serio: Serial port pts0 [ 641.048677][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 641.075637][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 641.094189][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 641.114064][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 641.137887][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 641.154340][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 641.307120][ T5224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 641.328962][ T5224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 641.342362][ T5224] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 641.353771][ T5224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 641.362286][ T5224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 641.378844][ T5224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 641.665324][ T2639] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 641.775497][ T5224] Bluetooth: hci5: command tx timeout [ 641.855702][ T2639] usb 4-1: Using ep0 maxpacket: 8 [ 641.893421][ T2639] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 641.915434][ T2639] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 641.945268][ T2639] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 641.970659][ T2639] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 642.001108][ T2639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.038401][ T2639] usb 4-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 642.087428][ T2639] usb 4-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际䛩 [ 642.134492][ T2639] usb 4-1: SerialNumber: ᐊ [ 642.852583][ T2639] cdc_ncm 4-1:1.0: bind() failure [ 642.897100][ T2639] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 642.924666][ T2639] cdc_ncm 4-1:1.1: bind() failure [ 642.966814][ T2639] usb 4-1: USB disconnect, device number 20 [ 643.286135][ T5224] Bluetooth: hci6: command tx timeout [ 643.516123][ T5224] Bluetooth: hci7: command tx timeout [ 643.838201][ T5224] Bluetooth: hci5: command tx timeout [ 645.375926][ T5224] Bluetooth: hci6: command tx timeout [ 645.596100][ T5224] Bluetooth: hci7: command tx timeout [ 645.854083][ T5224] Bluetooth: hci3: unexpected event for opcode 0x204e [ 645.915425][ T5224] Bluetooth: hci5: command tx timeout [ 646.690293][ T29] audit: type=1400 audit(1727273293.701:783): avc: denied { read } for pid=8170 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 646.710269][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.360386][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 647.435888][ T5224] Bluetooth: hci6: command tx timeout [ 647.749986][ T5224] Bluetooth: hci7: command tx timeout [ 650.496855][ T5224] Bluetooth: hci5: command tx timeout [ 650.503028][ T7082] Bluetooth: hci7: command tx timeout [ 650.508695][ T5239] Bluetooth: hci6: command tx timeout [ 651.504923][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 651.622157][ T8136] chnl_net:caif_netlink_parms(): no params data found [ 651.693242][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 651.905096][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.915528][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.933345][ T8079] bridge_slave_0: entered allmulticast mode [ 651.948788][ T8079] bridge_slave_0: entered promiscuous mode [ 651.969726][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.993471][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.008447][ T8079] bridge_slave_1: entered allmulticast mode [ 652.025895][ T8079] bridge_slave_1: entered promiscuous mode [ 652.418897][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.554307][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.800952][ T29] audit: type=1400 audit(1727273299.991:784): avc: denied { setopt } for pid=8199 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 653.907591][ T29] audit: type=1400 audit(1727273301.091:785): avc: denied { mount } for pid=8210 comm="syz.3.437" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 654.571661][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.582828][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.590346][ T29] audit: type=1400 audit(1727273301.101:786): avc: denied { search } for pid=8210 comm="syz.3.437" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 654.615763][ T8141] bridge_slave_0: entered allmulticast mode [ 654.624446][ T8141] bridge_slave_0: entered promiscuous mode [ 654.655854][ T29] audit: type=1400 audit(1727273301.101:787): avc: denied { read } for pid=8210 comm="syz.3.437" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 654.660158][ T8079] team0: Port device team_slave_0 added [ 654.705584][ T29] audit: type=1400 audit(1727273301.101:788): avc: denied { open } for pid=8210 comm="syz.3.437" path="/112/file0" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 654.756065][ T29] audit: type=1400 audit(1727273302.051:789): avc: denied { unmount } for pid=6615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 654.843060][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.859164][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.867825][ T8136] bridge_slave_0: entered allmulticast mode [ 654.878912][ T8136] bridge_slave_0: entered promiscuous mode [ 654.890570][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.898206][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.922048][ T8136] bridge_slave_1: entered allmulticast mode [ 654.947219][ T8136] bridge_slave_1: entered promiscuous mode [ 655.131711][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.141535][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.149791][ T8141] bridge_slave_1: entered allmulticast mode [ 655.171505][ T8141] bridge_slave_1: entered promiscuous mode [ 655.243026][ T8079] team0: Port device team_slave_1 added [ 655.371910][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.379723][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.391725][ T8125] bridge_slave_0: entered allmulticast mode [ 655.411520][ T8125] bridge_slave_0: entered promiscuous mode [ 655.538457][ T8136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.555116][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.578215][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.585506][ T29] audit: type=1400 audit(1727273302.861:790): avc: denied { write } for pid=8214 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 655.609173][ T8125] bridge_slave_1: entered allmulticast mode [ 655.643642][ T8125] bridge_slave_1: entered promiscuous mode [ 655.757474][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.846920][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.853929][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.886787][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.922343][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.932611][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.962087][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.994999][ T8136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.089209][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.294357][ T8141] team0: Port device team_slave_0 added [ 656.310629][ T8141] team0: Port device team_slave_1 added [ 656.429089][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.677443][ T8136] team0: Port device team_slave_0 added [ 656.690713][ T8136] team0: Port device team_slave_1 added [ 656.857268][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.572271][ T8079] hsr_slave_0: entered promiscuous mode [ 657.593697][ T8079] hsr_slave_1: entered promiscuous mode [ 657.613528][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.644091][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.675587][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.100436][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.108073][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.134373][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.592194][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.615351][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.673339][ T8136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.698949][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.715291][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.758260][ T8136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.853246][ T8125] team0: Port device team_slave_0 added [ 659.879005][ T8125] team0: Port device team_slave_1 added [ 660.837488][ T29] audit: type=1400 audit(1727273308.131:791): avc: denied { listen } for pid=8227 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 660.885448][ T29] audit: type=1400 audit(1727273308.131:792): avc: denied { accept } for pid=8227 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 661.112426][ T8136] hsr_slave_0: entered promiscuous mode [ 661.153646][ T8136] hsr_slave_1: entered promiscuous mode [ 661.163251][ T8136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.178898][ T8136] Cannot create hsr debugfs directory [ 661.189197][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.215481][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.241915][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.269998][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.277350][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.307483][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.369480][ T8141] hsr_slave_0: entered promiscuous mode [ 661.387434][ T8141] hsr_slave_1: entered promiscuous mode [ 661.415801][ T8141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.423586][ T8141] Cannot create hsr debugfs directory [ 662.022221][ T8125] hsr_slave_0: entered promiscuous mode [ 662.037396][ T8125] hsr_slave_1: entered promiscuous mode [ 662.045700][ T8125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.084398][ T8125] Cannot create hsr debugfs directory [ 662.952231][ T8079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.283181][ T8079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.897000][ T29] audit: type=1400 audit(1727273311.111:793): avc: denied { connect } for pid=8238 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 663.946015][ T29] audit: type=1400 audit(1727273311.161:794): avc: denied { write } for pid=8238 comm="syz.3.443" path="socket:[26553]" dev="sockfs" ino=26553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 664.006986][ T29] audit: type=1400 audit(1727273311.171:795): avc: denied { getopt } for pid=8238 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 664.425888][ T8079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.772092][ T8079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.821540][ T29] audit: type=1400 audit(1727273312.111:796): avc: denied { bind } for pid=8242 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 664.939480][ T11] bridge_slave_1: left allmulticast mode [ 664.960012][ T11] bridge_slave_1: left promiscuous mode [ 665.002097][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.021263][ T11] bridge_slave_0: left allmulticast mode [ 665.035889][ T11] bridge_slave_0: left promiscuous mode [ 665.046770][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.077304][ T11] bridge_slave_1: left allmulticast mode [ 665.083150][ T11] bridge_slave_1: left promiscuous mode [ 665.105855][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.137337][ T11] bridge_slave_0: left allmulticast mode [ 665.143084][ T11] bridge_slave_0: left promiscuous mode [ 665.159528][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.186898][ T11] bridge_slave_1: left allmulticast mode [ 665.203054][ T11] bridge_slave_1: left promiscuous mode [ 665.214216][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.237874][ T11] bridge_slave_0: left allmulticast mode [ 665.243715][ T11] bridge_slave_0: left promiscuous mode [ 665.265756][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.289427][ T11] bridge_slave_1: left allmulticast mode [ 665.307132][ T11] bridge_slave_1: left promiscuous mode [ 665.313106][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.346915][ T11] bridge_slave_0: left allmulticast mode [ 665.362033][ T11] bridge_slave_0: left promiscuous mode [ 665.375991][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.958033][ T5224] Bluetooth: hci7: command tx timeout [ 667.246099][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.273755][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.299043][ T11] bond0 (unregistering): Released all slaves [ 667.324477][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.353091][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.379088][ T11] bond0 (unregistering): Released all slaves [ 667.446189][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.472425][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.499084][ T11] bond0 (unregistering): Released all slaves [ 667.905383][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.933629][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.956220][ T11] bond0 (unregistering): Released all slaves [ 668.012812][ T8246] bridge0: port 3(bond0) entered disabled state [ 669.356123][ T29] audit: type=1400 audit(1727273316.031:797): avc: denied { mount } for pid=8298 comm="syz.3.445" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 670.069027][ T8079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 670.077914][ T29] audit: type=1400 audit(1727273317.361:798): avc: denied { unmount } for pid=6615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 670.135121][ T8079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 670.508025][ T8079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 670.540773][ T8079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 670.856177][ T11] hsr_slave_0: left promiscuous mode [ 670.872192][ T11] hsr_slave_1: left promiscuous mode [ 670.901443][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.917127][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.974991][ T11] hsr_slave_0: left promiscuous mode [ 670.992488][ T11] hsr_slave_1: left promiscuous mode [ 671.007356][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.037281][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.091436][ T11] hsr_slave_0: left promiscuous mode [ 671.162377][ T11] hsr_slave_1: left promiscuous mode [ 671.188656][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.226549][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.295265][ T11] hsr_slave_0: left promiscuous mode [ 671.315339][ T11] hsr_slave_1: left promiscuous mode [ 671.383405][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.395284][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.426264][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.433857][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.533098][ T11] veth1_macvtap: left promiscuous mode [ 671.541295][ T11] veth0_macvtap: left promiscuous mode [ 671.547329][ T11] veth1_vlan: left promiscuous mode [ 671.552800][ T11] veth0_vlan: left promiscuous mode [ 671.850912][ T29] audit: type=1400 audit(1727273319.071:799): avc: denied { bind } for pid=8321 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 673.229940][ T11] team0 (unregistering): Port device team_slave_1 removed [ 673.300434][ T11] team0 (unregistering): Port device team_slave_0 removed [ 674.012062][ T11] team0 (unregistering): Port device team_slave_1 removed [ 674.070001][ T11] team0 (unregistering): Port device team_slave_0 removed [ 674.711151][ T11] team0 (unregistering): Port device team_slave_1 removed [ 674.782515][ T11] team0 (unregistering): Port device team_slave_0 removed [ 675.992807][ T11] team0 (unregistering): Port device team_slave_1 removed [ 676.074040][ T11] team0 (unregistering): Port device team_slave_0 removed [ 677.760261][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.910214][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.952199][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.959475][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.024656][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.032051][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.313798][ T8079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.699885][ T8136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 678.954401][ T8136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 678.961828][ T8339] mkiss: ax0: crc mode is auto. [ 679.028011][ T8136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 679.430322][ T8136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.867142][ T8141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.916377][ T8141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.988183][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.024757][ T8141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.107940][ T8141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.530649][ T8125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 680.594040][ T8125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 680.621621][ T8125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 680.674473][ T8125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 680.821335][ T8079] veth0_vlan: entered promiscuous mode [ 681.088186][ T11] bridge_slave_1: left allmulticast mode [ 681.118059][ T11] bridge_slave_1: left promiscuous mode [ 681.124647][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.233866][ T11] bridge_slave_0: left allmulticast mode [ 681.244785][ T11] bridge_slave_0: left promiscuous mode [ 681.272224][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.502835][ T29] audit: type=1400 audit(1727273328.781:800): avc: denied { getopt } for pid=8354 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.585251][ T29] audit: type=1400 audit(1727273328.841:801): avc: denied { ioctl } for pid=8354 comm="syz.3.450" path="socket:[27332]" dev="sockfs" ino=27332 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 682.064868][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 682.089947][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.109083][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.142830][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.154075][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 682.161849][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.549126][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.561582][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.574336][ T11] bond0 (unregistering): Released all slaves [ 683.148408][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.202254][ T8136] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.379455][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.386802][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.406502][ T5224] Bluetooth: hci0: command tx timeout [ 684.610595][ T11] hsr_slave_0: left promiscuous mode [ 684.618147][ T11] hsr_slave_1: left promiscuous mode [ 684.624452][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.665616][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.886651][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.933186][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.169980][ T11] veth1_macvtap: left promiscuous mode [ 685.208808][ T11] veth0_macvtap: left promiscuous mode [ 685.244242][ T11] veth1_vlan: left promiscuous mode [ 685.273685][ T11] veth0_vlan: left promiscuous mode [ 686.515308][ T5224] Bluetooth: hci0: command tx timeout [ 687.450253][ T11] team0 (unregistering): Port device team_slave_1 removed [ 687.580577][ T11] team0 (unregistering): Port device team_slave_0 removed [ 688.555946][ T5224] Bluetooth: hci0: command tx timeout [ 688.739955][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.747250][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.890113][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.064418][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.084494][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.247885][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.255115][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.341935][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.363122][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.370411][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.431973][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.439941][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.517731][ T8359] chnl_net:caif_netlink_parms(): no params data found [ 689.614239][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.621680][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.096702][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.106229][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.113628][ T8359] bridge_slave_0: entered allmulticast mode [ 690.132963][ T8359] bridge_slave_0: entered promiscuous mode [ 690.239368][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.253357][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.261270][ T8359] bridge_slave_1: entered allmulticast mode [ 690.270758][ T8359] bridge_slave_1: entered promiscuous mode [ 690.353253][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.513221][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.542113][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.567018][ T8136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.636020][ T5224] Bluetooth: hci0: command tx timeout [ 690.821924][ T8359] team0: Port device team_slave_0 added [ 690.868200][ T8359] team0: Port device team_slave_1 added [ 690.898515][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.087705][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.094724][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.132622][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.149236][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.169194][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.196396][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.399763][ T8359] hsr_slave_0: entered promiscuous mode [ 691.414203][ T8359] hsr_slave_1: entered promiscuous mode [ 691.422323][ T8359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.437750][ T8359] Cannot create hsr debugfs directory [ 691.450656][ T11] bridge_slave_1: left allmulticast mode [ 691.461557][ T11] bridge_slave_1: left promiscuous mode [ 691.475924][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.502713][ T11] bridge_slave_0: left allmulticast mode [ 691.516222][ T11] bridge_slave_0: left promiscuous mode [ 691.522076][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.843533][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.850034][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.371215][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.384961][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.403221][ T11] bond0 (unregistering): Released all slaves [ 692.609113][ T8141] veth0_vlan: entered promiscuous mode [ 692.649998][ T11] hsr_slave_0: left promiscuous mode [ 692.660413][ T11] hsr_slave_1: left promiscuous mode [ 692.669290][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.680470][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.711411][ T11] veth0_vlan: left promiscuous mode [ 693.655027][ T11] team0 (unregistering): Port device team_slave_1 removed [ 693.750070][ T11] team0 (unregistering): Port device team_slave_0 removed [ 694.944026][ T8125] veth0_vlan: entered promiscuous mode [ 694.961862][ T8141] veth1_vlan: entered promiscuous mode [ 695.079704][ T8136] veth0_vlan: entered promiscuous mode [ 695.121671][ T8125] veth1_vlan: entered promiscuous mode [ 695.351192][ T8136] veth1_vlan: entered promiscuous mode [ 695.479889][ T8125] veth0_macvtap: entered promiscuous mode [ 695.656719][ T8141] veth0_macvtap: entered promiscuous mode [ 695.671719][ T8125] veth1_macvtap: entered promiscuous mode [ 695.734813][ T8136] veth0_macvtap: entered promiscuous mode [ 695.884396][ T8141] veth1_macvtap: entered promiscuous mode [ 695.918068][ T8136] veth1_macvtap: entered promiscuous mode [ 696.004836][ T8125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.032928][ T8125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.047422][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.091978][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.117836][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.132890][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.144372][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.164213][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.194423][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.220117][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.234365][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.250987][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.261328][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.272502][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.288747][ T8136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.307199][ T8125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.324131][ T8125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.344078][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.379879][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.394738][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.405171][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.416593][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.428962][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.451371][ T8141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.460369][ T8141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.473267][ T8141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.482352][ T8141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.494830][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.510314][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.520332][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.531780][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.541750][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.552417][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.567469][ T8136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.578670][ T8125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.588346][ T8125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.598263][ T8125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.607904][ T8125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.660995][ T8136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.677817][ T8136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.690932][ T8136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.699897][ T8136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.784773][ T8359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.841801][ T8359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.879191][ T8359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.894755][ T8359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 697.220536][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.245796][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.404020][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.436626][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.647241][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.669205][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.035094][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.089569][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.105991][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.755500][ T29] audit: type=1400 audit(1727273345.871:802): avc: denied { create } for pid=8456 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 699.164366][ T29] audit: type=1400 audit(1727273345.891:803): avc: denied { sys_admin } for pid=8456 comm="syz.1.387" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 699.193246][ T29] audit: type=1400 audit(1727273346.011:804): avc: denied { execute } for pid=8456 comm="syz.1.387" path=2F6D656D66643A25202864656C6574656429 dev="hugetlbfs" ino=29995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 700.538868][ T6841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.550726][ T6841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.625735][ T8464] No control pipe specified [ 700.686702][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 700.700038][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.714833][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 700.745405][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 700.818969][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 700.828049][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 700.836044][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.994076][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.001539][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.211671][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.219084][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.853122][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.920290][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 702.946714][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 702.958037][ T5239] Bluetooth: hci1: command tx timeout [ 702.958313][ T7082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 702.978695][ T7082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 702.987390][ T7082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 702.998732][ T7082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.038936][ T5224] Bluetooth: hci1: command tx timeout [ 705.115498][ T5224] Bluetooth: hci2: command tx timeout [ 707.499900][ T8517] fuse: Bad value for 'fd' [ 707.536276][ T5224] Bluetooth: hci1: command tx timeout [ 707.540053][ T7082] Bluetooth: hci2: command tx timeout [ 707.601892][ T8516] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 707.636214][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.099831][ T29] audit: type=1400 audit(1727273355.331:805): avc: denied { create } for pid=8521 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 708.352395][ T29] audit: type=1400 audit(1727273355.331:806): avc: denied { connect } for pid=8521 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 708.414514][ T29] audit: type=1400 audit(1727273355.351:807): avc: denied { write } for pid=8521 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 709.088624][ T29] audit: type=1400 audit(1727273355.431:808): avc: denied { read } for pid=8521 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 709.264411][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.605267][ T7082] Bluetooth: hci1: command tx timeout [ 709.610754][ T7082] Bluetooth: hci2: command tx timeout [ 709.765737][ T29] audit: type=1400 audit(1727273357.061:809): avc: denied { write } for pid=8531 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 710.834283][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.925424][ T29] audit: type=1400 audit(1727273358.171:810): avc: denied { setopt } for pid=8531 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 711.234422][ T8550] binder: 8545:8550 ioctl c0306201 0 returned -14 [ 711.244379][ T29] audit: type=1400 audit(1727273358.521:811): avc: denied { map } for pid=8545 comm="syz.1.465" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 711.685277][ T7082] Bluetooth: hci2: command tx timeout [ 712.561054][ T63] bridge_slave_1: left allmulticast mode [ 712.568251][ T63] bridge_slave_1: left promiscuous mode [ 712.716457][ T29] audit: type=1400 audit(1727273359.931:812): avc: denied { bind } for pid=8558 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.051797][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.240270][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 713.457657][ T63] bridge_slave_0: left allmulticast mode [ 713.463403][ T63] bridge_slave_0: left promiscuous mode [ 713.485609][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.616775][ T25] usb 4-1: config 253 has an invalid interface number: 109 but max is 0 [ 713.646827][ T25] usb 4-1: config 253 has no interface number 0 [ 713.654926][ T25] usb 4-1: config 253 interface 109 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 713.719866][ T25] usb 4-1: New USB device found, idVendor=5a57, idProduct=0284, bcdDevice=3d.d3 [ 713.747790][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.768514][ T25] usb 4-1: Product: syz [ 713.772872][ T25] usb 4-1: Manufacturer: syz [ 713.789055][ T25] usb 4-1: SerialNumber: syz [ 714.874157][ T8584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.141482][ T5370] usb 4-1: USB disconnect, device number 21 [ 715.753506][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.827686][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.889348][ T63] bond0 (unregistering): Released all slaves [ 716.040129][ T8472] chnl_net:caif_netlink_parms(): no params data found [ 717.223362][ T63] hsr_slave_0: left promiscuous mode [ 717.267947][ T63] hsr_slave_1: left promiscuous mode [ 717.298498][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.325446][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.344690][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.354021][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.508977][ T63] veth1_macvtap: left promiscuous mode [ 717.517133][ T63] veth0_macvtap: left promiscuous mode [ 717.524962][ T63] veth1_vlan: left promiscuous mode [ 717.532135][ T63] veth0_vlan: left promiscuous mode [ 717.726214][ T2639] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 717.924609][ T2639] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 717.941301][ T2639] usb 2-1: New USB device strings: Mfr=1, Product=19, SerialNumber=3 [ 717.952134][ T2639] usb 2-1: Product: syz [ 717.961011][ T2639] usb 2-1: Manufacturer: syz [ 717.969175][ T2639] usb 2-1: SerialNumber: syz [ 717.981838][ T2639] usb 2-1: config 0 descriptor?? [ 718.011529][ T2639] go7007 2-1:0.0: Sensoray 2250 found [ 718.041678][ T2639] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 718.898303][ T63] team0 (unregistering): Port device team_slave_1 removed [ 718.993913][ T63] team0 (unregistering): Port device team_slave_0 removed [ 720.077655][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.118715][ T8609] bridge0: port 4(syz_tun) entered blocking state [ 720.138136][ T8609] bridge0: port 4(syz_tun) entered disabled state [ 720.151277][ T8609] syz_tun: entered allmulticast mode [ 720.179877][ T8609] syz_tun: entered promiscuous mode [ 720.194546][ T8609] bridge0: port 4(syz_tun) entered blocking state [ 720.201965][ T8609] bridge0: port 4(syz_tun) entered forwarding state [ 720.243247][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.252356][ T8472] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.261645][ T8472] bridge_slave_0: entered allmulticast mode [ 720.270470][ T8472] bridge_slave_0: entered promiscuous mode [ 720.335828][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.343776][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.353190][ T8472] bridge_slave_1: entered allmulticast mode [ 720.362429][ T8472] bridge_slave_1: entered promiscuous mode [ 720.599337][ T8472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.622081][ T8472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.763908][ T5370] usb 2-1: USB disconnect, device number 8 [ 720.942190][ T8472] team0: Port device team_slave_0 added [ 720.971748][ T8472] team0: Port device team_slave_1 added [ 720.997883][ T53] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 722.013795][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 722.035795][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 722.053213][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 722.068808][ T53] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 722.105224][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.139492][ T53] usb 4-1: Product: syz [ 722.143758][ T53] usb 4-1: Manufacturer: syz [ 722.171490][ T53] usb 4-1: SerialNumber: syz [ 722.208229][ T53] usb 4-1: config 0 descriptor?? [ 722.251454][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.271858][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.311120][ T8472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.356660][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 723.899184][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.944073][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.091775][ T8472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.205912][ T53] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 724.237920][ T8359] veth0_vlan: entered promiscuous mode [ 724.246244][ T53] usb 4-1: USB disconnect, device number 22 [ 724.621283][ T8472] hsr_slave_0: entered promiscuous mode [ 724.639314][ T8472] hsr_slave_1: entered promiscuous mode [ 724.787086][ T8359] veth1_vlan: entered promiscuous mode [ 724.835719][ T53] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 725.000934][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.051239][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 725.091414][ T53] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 725.110540][ T53] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 725.133423][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.141108][ T53] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 725.142753][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.164628][ T8494] bridge_slave_0: entered allmulticast mode [ 725.173124][ T53] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.175521][ T8494] bridge_slave_0: entered promiscuous mode [ 725.183638][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.198326][ T53] usb 4-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 725.201883][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.227482][ T53] usb 4-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际䛩 [ 725.228365][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.239595][ T53] usb 4-1: SerialNumber: ᐊ [ 725.251508][ T8494] bridge_slave_1: entered allmulticast mode [ 725.280355][ T8494] bridge_slave_1: entered promiscuous mode [ 725.324084][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.541714][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.583861][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.600569][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.694810][ T53] cdc_ncm 4-1:1.0: bind() failure [ 725.704999][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.752813][ T53] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 725.763808][ T53] cdc_ncm 4-1:1.1: bind() failure [ 725.803397][ T53] usb 4-1: USB disconnect, device number 23 [ 725.940349][ T8494] team0: Port device team_slave_0 added [ 725.960430][ T8494] team0: Port device team_slave_1 added [ 726.109101][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.136376][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.167302][ T8494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.267276][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.274283][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.309756][ T8494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.452425][ T8359] veth0_macvtap: entered promiscuous mode [ 726.504313][ T8359] veth1_macvtap: entered promiscuous mode [ 726.893854][ T8494] hsr_slave_0: entered promiscuous mode [ 726.916467][ T8494] hsr_slave_1: entered promiscuous mode [ 726.923339][ T8494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.931854][ T8494] Cannot create hsr debugfs directory [ 726.969914][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.001728][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.022474][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.033108][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.044801][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.056150][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.069119][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.146634][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.160013][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.172728][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.183428][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.193396][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.204005][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.222248][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.237308][ T63] bridge_slave_1: left allmulticast mode [ 727.244852][ T63] bridge_slave_1: left promiscuous mode [ 727.251454][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.287689][ T63] bridge_slave_0: left allmulticast mode [ 727.294850][ T63] bridge_slave_0: left promiscuous mode [ 727.307414][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.894113][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.910495][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.923237][ T63] bond0 (unregistering): Released all slaves [ 727.986658][ T8359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.007341][ T8359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.019088][ T8359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.033380][ T8359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.553291][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.572038][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.595621][ T8472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 728.621409][ T8472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 728.682495][ T63] hsr_slave_0: left promiscuous mode [ 728.692376][ T63] hsr_slave_1: left promiscuous mode [ 728.700857][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.710340][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.719994][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.734418][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.801609][ T63] veth1_macvtap: left promiscuous mode [ 728.807757][ T63] veth0_macvtap: left promiscuous mode [ 728.816081][ T63] veth1_vlan: left promiscuous mode [ 728.822045][ T63] veth0_vlan: left promiscuous mode [ 729.915465][ T63] team0 (unregistering): Port device team_slave_1 removed [ 730.004467][ T63] team0 (unregistering): Port device team_slave_0 removed [ 730.972291][ T8472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 731.069927][ T8472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 731.102095][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.129282][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.712177][ T8702] ubi0: attaching mtd0 [ 731.718546][ T8702] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 733.505307][ T29] audit: type=1400 audit(1727273380.761:813): avc: denied { unmount } for pid=8141 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 734.122233][ T29] audit: type=1400 audit(1727273381.231:814): avc: denied { name_bind } for pid=8693 comm="syz.0.420" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 735.476447][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 737.883988][ T8472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.130433][ T8750] 9pnet_fd: Insufficient options for proto=fd [ 739.451983][ T8472] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.657974][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.665330][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.745008][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.752447][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.377210][ T8764] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 740.603555][ T29] audit: type=1400 audit(1727273387.871:815): avc: denied { override_creds } for pid=8759 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 741.252014][ T8494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 741.319975][ T8494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 741.408166][ T8494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 741.479609][ T8494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 741.652781][ T29] audit: type=1400 audit(1727273388.931:816): avc: denied { ioctl } for pid=8756 comm="syz.1.481" path="socket:[31040]" dev="sockfs" ino=31040 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 742.471248][ T8472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.622062][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.667874][ T2639] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 742.788779][ T8494] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.845760][ T943] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 742.911188][ T2639] usb 4-1: config 0 has no interfaces? [ 742.980873][ T2639] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 742.981106][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.997359][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.075569][ T943] usb 1-1: Using ep0 maxpacket: 8 [ 743.101298][ T2639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.143654][ T2639] usb 4-1: Product: syz [ 743.186899][ T2639] usb 4-1: Manufacturer: syz [ 743.204960][ T2639] usb 4-1: SerialNumber: syz [ 743.222386][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.230179][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.263943][ T943] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 743.285194][ T2639] usb 4-1: config 0 descriptor?? [ 743.331306][ T943] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 743.385769][ T943] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 743.474660][ T8472] veth0_vlan: entered promiscuous mode [ 743.487471][ T943] usb 1-1: string descriptor 0 read error: -22 [ 743.545754][ T943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 743.594221][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.873898][ T8472] veth1_vlan: entered promiscuous mode [ 744.342358][ T8472] veth0_macvtap: entered promiscuous mode [ 744.444012][ T8472] veth1_macvtap: entered promiscuous mode [ 744.726222][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.813979][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.892235][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.005275][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.032093][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.165185][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.194853][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.450487][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.610233][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.692777][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.704653][ T943] cdc_ncm 1-1:1.0: bind() failure [ 745.728383][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.742231][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.756454][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.769728][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.782289][ T943] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 745.804490][ T943] cdc_ncm 1-1:1.1: bind() failure [ 745.882252][ T943] usb 1-1: USB disconnect, device number 14 [ 745.889305][ T8472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.934865][ T8472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.970375][ T8472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.001514][ T8472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.407349][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.924521][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.940507][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.114836][ T5370] usb 4-1: USB disconnect, device number 24 [ 747.381439][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.445643][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.969712][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.490'. [ 748.453702][ T8494] veth0_vlan: entered promiscuous mode [ 748.600267][ T8494] veth1_vlan: entered promiscuous mode [ 748.673001][ T8838] Bluetooth: hci3: invalid len left 7, exp >= 119 [ 748.682613][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 748.854422][ T8494] veth0_macvtap: entered promiscuous mode [ 748.913637][ T8494] veth1_macvtap: entered promiscuous mode [ 749.052056][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.079814][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.206673][ T29] audit: type=1400 audit(1727273396.461:817): avc: denied { create } for pid=8833 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 749.226139][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.253121][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.287134][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.305061][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.354555][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.404293][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.488055][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.558537][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.647485][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.699648][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.856355][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.117717][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.868404][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.017478][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.076664][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.117179][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.192461][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.317700][ T8494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.372418][ T8494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.416077][ T8494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.442779][ T8494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.452909][ T7082] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 751.623424][ T8862] ax25_connect(): syz.2.494 uses autobind, please contact jreuter@yaina.de [ 751.644803][ T29] audit: type=1400 audit(1727273398.911:818): avc: denied { connect } for pid=8858 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 752.797053][ T8864] virtio-fs: tag <(null)> not found [ 752.846261][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.854213][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.204357][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.238733][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.297755][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.304190][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.556631][ T29] audit: type=1400 audit(1727273400.831:819): avc: denied { read } for pid=8874 comm="syz.1.496" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 753.651646][ T29] audit: type=1400 audit(1727273400.881:820): avc: denied { open } for pid=8874 comm="syz.1.496" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 754.692484][ T29] audit: type=1400 audit(1727273401.601:821): avc: denied { ioctl } for pid=8874 comm="syz.1.496" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 754.732517][ T5307] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 755.799856][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 756.544023][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 757.442985][ T29] audit: type=1400 audit(1727273404.721:822): avc: denied { nlmsg_read } for pid=8886 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 759.136320][ T5307] usb 3-1: device descriptor read/all, error -71 [ 759.854413][ T8926] netlink: 'syz.0.502': attribute type 21 has an invalid length. [ 759.899687][ T8926] netlink: 'syz.0.502': attribute type 20 has an invalid length. [ 759.909709][ T8926] IPv6: NLM_F_CREATE should be specified when creating new route [ 760.361051][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 762.002695][ T29] audit: type=1400 audit(1727273409.291:823): avc: denied { bind } for pid=8937 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 762.139754][ T8938] mkiss: ax0: crc mode is auto. [ 762.565583][ T5370] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 762.816944][ T5370] usb 5-1: Using ep0 maxpacket: 8 [ 762.897469][ T5370] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 763.007741][ T5370] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 763.093564][ T5370] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 763.117544][ T29] audit: type=1400 audit(1727273410.411:824): avc: denied { connect } for pid=8942 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 763.122825][ T5370] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.137176][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.198725][ T5370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.214015][ T8943] program syz.0.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 764.038071][ T5370] usb 5-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 764.212235][ T29] audit: type=1400 audit(1727273410.651:825): avc: denied { ioctl } for pid=8945 comm="syz.2.509" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 764.236908][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.339869][ T5370] usb 5-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际䛩 [ 764.378822][ T5370] usb 5-1: SerialNumber: ᐊ [ 764.978709][ T8954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.037463][ T29] audit: type=1400 audit(1727273412.321:826): avc: denied { create } for pid=8951 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 769.291960][ T5370] usb 5-1: can't set config #1, error -71 [ 769.350340][ T5370] usb 5-1: USB disconnect, device number 13 [ 769.609913][ T2639] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 769.840979][ T2639] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 769.875008][ T2639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.961585][ T29] audit: type=1400 audit(1727273417.251:827): avc: denied { setopt } for pid=8974 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 769.988557][ T2639] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 770.045692][ T2639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.099451][ T2639] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 770.160643][ T2639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.205354][ T2639] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 770.312688][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 770.345173][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 770.374204][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 770.413338][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 770.509581][ T2639] usb 3-1: unable to read config index 3 descriptor/start: -71 [ 770.517662][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 770.536711][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 770.663464][ T2639] usb 3-1: can't read configurations, error -71 [ 773.013032][ T7082] Bluetooth: hci4: command tx timeout [ 774.755640][ T29] audit: type=1400 audit(1727273422.011:828): avc: denied { accept } for pid=8984 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 775.040173][ T7082] Bluetooth: hci4: command tx timeout [ 776.451609][ T9001] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 777.125350][ T7082] Bluetooth: hci4: command tx timeout [ 777.314886][ T9005] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.522'. [ 779.196164][ T7082] Bluetooth: hci4: command tx timeout [ 781.202645][ T8979] chnl_net:caif_netlink_parms(): no params data found [ 781.685446][ T7130] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 782.827866][ T7130] usb 2-1: Using ep0 maxpacket: 8 [ 783.045915][ T7130] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 783.131851][ T29] audit: type=1400 audit(1727273430.421:829): avc: denied { map } for pid=9021 comm="syz.4.527" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 783.180464][ T7130] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 783.263069][ T7130] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 783.320955][ T7130] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.364136][ T7130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.382461][ T7130] usb 2-1: Product: 蔘ತ䛦≢⸺倃氟⧶ṬK堮㊡※࿰ꙴ⿜陾꧆钋꒹ነ늵띮섛婥햷﯒ᛥ뇳ᾶ燡䚘詊찚葷룃ꈌ죇귽璕惫ꈤꫀ뜧㥊쮥熨잱䨫䩋㟣牗 [ 783.472507][ T7130] usb 2-1: Manufacturer: 䜰뢉饚ﾮᨉ鸺姄욛걮蓖䦗㑂迼际䛩 [ 783.568697][ T7130] usb 2-1: SerialNumber: ᐊ [ 783.750894][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 783.785399][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.802448][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 783.817268][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 783.835784][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 783.845578][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 784.010189][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.074430][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.114225][ T8979] bridge_slave_0: entered allmulticast mode [ 784.436595][ T8979] bridge_slave_0: entered promiscuous mode [ 785.996508][ T5224] Bluetooth: hci0: command tx timeout [ 786.650549][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.673301][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.279888][ T8979] bridge_slave_1: entered allmulticast mode [ 787.570304][ T8979] bridge_slave_1: entered promiscuous mode [ 788.075464][ T7082] Bluetooth: hci0: command tx timeout [ 788.122898][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.206230][ T9044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.322772][ T7130] cdc_ncm 2-1:1.0: bind() failure [ 788.377440][ T7130] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 788.409776][ T7130] cdc_ncm 2-1:1.1: bind() failure [ 788.520002][ T7130] usb 2-1: USB disconnect, device number 9 [ 790.063092][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.159031][ T5224] Bluetooth: hci0: command tx timeout [ 790.581707][ T9055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.555411][ T29] audit: type=1400 audit(1727273438.161:830): avc: denied { read } for pid=9051 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 791.574682][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.094164][ T7082] Bluetooth: hci7: command 0x0406 tx timeout [ 792.313035][ T5224] Bluetooth: hci0: command tx timeout [ 793.143264][ T29] audit: type=1400 audit(1727273438.571:831): avc: denied { ioctl } for pid=9051 comm="syz.4.534" path="socket:[33176]" dev="sockfs" ino=33176 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 793.231388][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.351838][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.574538][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.231895][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.796793][ T9069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.206550][ T7082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 797.219624][ T7082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 797.229614][ T7082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 797.239942][ T7082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 797.255478][ T7082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 797.263203][ T7082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 797.356642][ T8979] team0: Port device team_slave_0 added [ 797.368578][ T8979] team0: Port device team_slave_1 added [ 798.097401][ T9078] Cannot find add_set index 0 as target [ 798.406129][ T29] audit: type=1400 audit(1727273445.361:832): avc: denied { bind } for pid=9075 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 798.734842][ T9079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'. [ 799.089748][ T29] audit: type=1400 audit(1727273445.381:833): avc: denied { setopt } for pid=9075 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 799.366831][ T5224] Bluetooth: hci5: command tx timeout [ 801.032440][ T8889] bridge0: port 4(syz_tun) entered disabled state [ 801.124725][ T8889] syz_tun (unregistering): left allmulticast mode [ 801.133174][ T8889] syz_tun (unregistering): left promiscuous mode [ 801.158778][ T8889] bridge0: port 4(syz_tun) entered disabled state [ 801.226885][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.233915][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.327345][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.379373][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.394304][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.424608][ T8979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.455993][ T5224] Bluetooth: hci5: command tx timeout [ 805.105306][ T5224] Bluetooth: hci5: command tx timeout [ 805.511867][ T29] audit: type=1400 audit(1727273452.801:834): avc: denied { setattr } for pid=9099 comm="syz.4.543" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 805.595147][ T29] audit: type=1400 audit(1727273452.881:835): avc: denied { write } for pid=9099 comm="syz.4.543" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 805.638753][ T29] audit: type=1400 audit(1727273452.931:836): avc: denied { open } for pid=9099 comm="syz.4.543" path="/15/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 805.954026][ T8979] hsr_slave_0: entered promiscuous mode [ 805.996506][ T8979] hsr_slave_1: entered promiscuous mode [ 806.285592][ T29] audit: type=1400 audit(1727273453.311:837): avc: denied { write } for pid=9106 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 807.245366][ T5224] Bluetooth: hci5: command tx timeout [ 807.313446][ T8979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.332459][ T8979] Cannot create hsr debugfs directory [ 807.436026][ T9100] ================================================================== [ 807.444180][ T9100] BUG: KASAN: slab-use-after-free in iov_iter_advance+0x677/0x6c0 [ 807.452070][ T9100] Read of size 8 at addr ffff8880626f8120 by task syz.4.543/9100 [ 807.459838][ T9100] [ 807.462179][ T9100] CPU: 0 UID: 0 PID: 9100 Comm: syz.4.543 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 807.472616][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 807.482706][ T9100] Call Trace: [ 807.486001][ T9100] [ 807.488945][ T9100] dump_stack_lvl+0x116/0x1f0 [ 807.493653][ T9100] print_report+0xc3/0x620 [ 807.498087][ T9100] ? __virt_addr_valid+0x5e/0x590 [ 807.503132][ T9100] ? __phys_addr+0xc6/0x150 [ 807.507660][ T9100] kasan_report+0xd9/0x110 [ 807.512088][ T9100] ? iov_iter_advance+0x677/0x6c0 [ 807.517160][ T9100] ? iov_iter_advance+0x677/0x6c0 [ 807.522247][ T9100] iov_iter_advance+0x677/0x6c0 [ 807.527149][ T9100] netfs_write_folio+0x745/0x18f0 [ 807.532296][ T9100] netfs_writepages+0x2ba/0xb90 [ 807.537176][ T9100] ? __pfx_netfs_writepages+0x10/0x10 [ 807.542569][ T9100] ? do_raw_spin_lock+0x12d/0x2c0 [ 807.547631][ T9100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 807.553033][ T9100] ? mark_lock+0xb5/0xc60 [ 807.557395][ T9100] ? mark_lock+0xb5/0xc60 [ 807.561762][ T9100] ? __pfx_netfs_writepages+0x10/0x10 [ 807.567153][ T9100] do_writepages+0x1a3/0x7f0 [ 807.571784][ T9100] ? __pfx_do_writepages+0x10/0x10 [ 807.576928][ T9100] ? __pfx_lock_acquire+0x10/0x10 [ 807.581990][ T9100] ? do_raw_spin_lock+0x12d/0x2c0 [ 807.587039][ T9100] ? do_raw_spin_unlock+0x172/0x230 [ 807.592262][ T9100] ? _raw_spin_unlock+0x28/0x50 [ 807.597155][ T9100] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 807.603175][ T9100] filemap_fdatawrite_wbc+0x148/0x1c0 [ 807.608596][ T9100] __filemap_fdatawrite_range+0xba/0x100 [ 807.614260][ T9100] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 807.620574][ T9100] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 807.626679][ T9100] v9fs_dir_release+0x429/0x590 [ 807.631567][ T9100] ? __pfx_v9fs_dir_release+0x10/0x10 [ 807.636976][ T9100] ? __pfx___might_resched+0x10/0x10 [ 807.642287][ T9100] ? __pfx_v9fs_dir_release+0x10/0x10 [ 807.647685][ T9100] __fput+0x3f6/0xb60 [ 807.651713][ T9100] task_work_run+0x14e/0x250 [ 807.656345][ T9100] ? __pfx_task_work_run+0x10/0x10 [ 807.661516][ T9100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 807.667433][ T9100] ? task_work_add+0x1d6/0x370 [ 807.672233][ T9100] get_signal+0x1ca/0x2770 [ 807.676684][ T9100] ? fput+0x148/0x390 [ 807.680702][ T9100] ? __pfx_get_signal+0x10/0x10 [ 807.685849][ T9100] arch_do_signal_or_restart+0x90/0x7e0 [ 807.691439][ T9100] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 807.697637][ T9100] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 807.703486][ T9100] syscall_exit_to_user_mode+0x150/0x2a0 [ 807.709168][ T9100] do_syscall_64+0xda/0x250 [ 807.713738][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.720018][ T9100] RIP: 0033:0x7f4e8d97def9 [ 807.724464][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.744093][ T9100] RSP: 002b:00007f4e8e6f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.752528][ T9100] RAX: 000000000038a000 RBX: 00007f4e8db35f80 RCX: 00007f4e8d97def9 [ 807.760519][ T9100] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000b [ 807.768507][ T9100] RBP: 00007f4e8d9f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 807.776490][ T9100] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 807.784477][ T9100] R13: 0000000000000000 R14: 00007f4e8db35f80 R15: 00007ffcd5b18a88 [ 807.792479][ T9100] [ 807.795507][ T9100] [ 807.797836][ T9100] Allocated by task 9100: [ 807.802194][ T9100] kasan_save_stack+0x33/0x60 [ 807.806942][ T9100] kasan_save_track+0x14/0x30 [ 807.811660][ T9100] __kasan_kmalloc+0xaa/0xb0 [ 807.816284][ T9100] netfs_buffer_append_folio+0x181/0x750 [ 807.821954][ T9100] netfs_write_folio+0x542/0x18f0 [ 807.826993][ T9100] netfs_writepages+0x2ba/0xb90 [ 807.831858][ T9100] do_writepages+0x1a3/0x7f0 [ 807.836578][ T9100] filemap_fdatawrite_wbc+0x148/0x1c0 [ 807.842006][ T9100] __filemap_fdatawrite_range+0xba/0x100 [ 807.847666][ T9100] v9fs_dir_release+0x429/0x590 [ 807.852546][ T9100] __fput+0x3f6/0xb60 [ 807.856561][ T9100] task_work_run+0x14e/0x250 [ 807.861185][ T9100] get_signal+0x1ca/0x2770 [ 807.865626][ T9100] arch_do_signal_or_restart+0x90/0x7e0 [ 807.871211][ T9100] syscall_exit_to_user_mode+0x150/0x2a0 [ 807.877243][ T9100] do_syscall_64+0xda/0x250 [ 807.881963][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.887994][ T9100] [ 807.890761][ T9100] Freed by task 7826: [ 807.894750][ T9100] kasan_save_stack+0x33/0x60 [ 807.899550][ T9100] kasan_save_track+0x14/0x30 [ 807.904268][ T9100] kasan_save_free_info+0x3b/0x60 [ 807.909323][ T9100] poison_slab_object+0xf7/0x160 [ 807.914304][ T9100] __kasan_slab_free+0x32/0x50 [ 807.919342][ T9100] kfree+0x12a/0x3b0 [ 807.923262][ T9100] netfs_delete_buffer_head+0xa6/0x100 [ 807.928748][ T9100] netfs_write_collection_worker+0x20f9/0x4f80 [ 807.934936][ T9100] process_one_work+0x9c5/0x1b40 [ 807.939893][ T9100] worker_thread+0x6c8/0xf00 [ 807.944512][ T9100] kthread+0x2c1/0x3a0 [ 807.948704][ T9100] ret_from_fork+0x45/0x80 [ 807.953157][ T9100] ret_from_fork_asm+0x1a/0x30 [ 807.957965][ T9100] [ 807.960299][ T9100] The buggy address belongs to the object at ffff8880626f8000 [ 807.960299][ T9100] which belongs to the cache kmalloc-512 of size 512 [ 807.974399][ T9100] The buggy address is located 288 bytes inside of [ 807.974399][ T9100] freed 512-byte region [ffff8880626f8000, ffff8880626f8200) [ 807.988245][ T9100] [ 807.990590][ T9100] The buggy address belongs to the physical page: [ 807.997640][ T9100] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x626f8 [ 808.006432][ T9100] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 808.015035][ T9100] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 808.023042][ T9100] page_type: 0xfdffffff(slab) [ 808.027736][ T9100] raw: 00fff00000000040 ffff88801ac41c80 0000000000000000 dead000000000001 [ 808.036339][ T9100] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 808.044939][ T9100] head: 00fff00000000040 ffff88801ac41c80 0000000000000000 dead000000000001 [ 808.053631][ T9100] head: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 808.062320][ T9100] head: 00fff00000000002 ffffea000189be01 ffffffffffffffff 0000000000000000 [ 808.071119][ T9100] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 808.079925][ T9100] page dumped because: kasan: bad access detected [ 808.086362][ T9100] page_owner tracks the page as allocated [ 808.092094][ T9100] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7443, tgid 7443 (syz-executor), ts 543201946981, free_ts 542989596770 [ 808.115075][ T9100] post_alloc_hook+0x2d1/0x350 [ 808.119895][ T9100] get_page_from_freelist+0x1351/0x2e50 [ 808.125469][ T9100] __alloc_pages_noprof+0x22b/0x2460 [ 808.130780][ T9100] alloc_slab_page+0x4e/0xf0 [ 808.135415][ T9100] new_slab+0x84/0x260 [ 808.139523][ T9100] ___slab_alloc+0xdac/0x1870 [ 808.144262][ T9100] __slab_alloc.constprop.0+0x56/0xb0 [ 808.149711][ T9100] __kmalloc_noprof+0x367/0x400 [ 808.154587][ T9100] fib6_info_alloc+0x40/0x160 [ 808.159306][ T9100] ip6_route_info_create+0x337/0x1910 [ 808.164700][ T9100] ip6_route_add+0x26/0x1c0 [ 808.169216][ T9100] addrconf_add_mroute+0x1de/0x350 [ 808.174348][ T9100] addrconf_add_dev+0x14e/0x1c0 [ 808.179228][ T9100] addrconf_init_auto_addrs+0x380/0x820 [ 808.184820][ T9100] addrconf_notify+0xe91/0x19c0 [ 808.189719][ T9100] notifier_call_chain+0xb9/0x410 [ 808.194796][ T9100] page last free pid 7510 tgid 7510 stack trace: [ 808.201139][ T9100] free_unref_page+0x64a/0xe40 [ 808.205921][ T9100] qlist_free_all+0x4e/0x140 [ 808.210540][ T9100] kasan_quarantine_reduce+0x192/0x1e0 [ 808.216042][ T9100] __kasan_slab_alloc+0x69/0x90 [ 808.220942][ T9100] kmem_cache_alloc_node_noprof+0x153/0x310 [ 808.226876][ T9100] __alloc_skb+0x2b1/0x380 [ 808.231318][ T9100] rtmsg_ifinfo_build_skb+0x81/0x280 [ 808.236637][ T9100] rtnetlink_event+0xf3/0x1f0 [ 808.241341][ T9100] notifier_call_chain+0xb9/0x410 [ 808.246389][ T9100] call_netdevice_notifiers_info+0xbe/0x140 [ 808.252316][ T9100] dev_set_mac_address+0x370/0x4a0 [ 808.257444][ T9100] dev_set_mac_address_user+0x30/0x50 [ 808.262834][ T9100] do_setlink+0x949/0x41c0 [ 808.267284][ T9100] __rtnl_newlink+0xc35/0x1920 [ 808.272102][ T9100] rtnl_newlink+0x67/0xa0 [ 808.276466][ T9100] rtnetlink_rcv_msg+0x3c7/0xea0 [ 808.281443][ T9100] [ 808.283770][ T9100] Memory state around the buggy address: [ 808.289409][ T9100] ffff8880626f8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 808.297481][ T9100] ffff8880626f8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 808.305551][ T9100] >ffff8880626f8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 808.313649][ T9100] ^ [ 808.318812][ T9100] ffff8880626f8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 808.326890][ T9100] ffff8880626f8200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 808.334957][ T9100] ================================================================== [ 808.700789][ T9100] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 808.708074][ T9100] CPU: 1 UID: 0 PID: 9100 Comm: syz.4.543 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 808.718358][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 808.728458][ T9100] Call Trace: [ 808.731767][ T9100] [ 808.734728][ T9100] dump_stack_lvl+0x3d/0x1f0 [ 808.739370][ T9100] panic+0x6dc/0x7c0 [ 808.743325][ T9100] ? __pfx_panic+0x10/0x10 [ 808.747801][ T9100] ? preempt_schedule_thunk+0x1a/0x30 [ 808.753217][ T9100] ? preempt_schedule_common+0x44/0xc0 [ 808.758755][ T9100] check_panic_on_warn+0xab/0xb0 [ 808.764282][ T9100] end_report+0x117/0x180 [ 808.768659][ T9100] kasan_report+0xe9/0x110 [ 808.773118][ T9100] ? iov_iter_advance+0x677/0x6c0 [ 808.778204][ T9100] ? iov_iter_advance+0x677/0x6c0 [ 808.783293][ T9100] iov_iter_advance+0x677/0x6c0 [ 808.788205][ T9100] netfs_write_folio+0x745/0x18f0 [ 808.793284][ T9100] netfs_writepages+0x2ba/0xb90 [ 808.798182][ T9100] ? __pfx_netfs_writepages+0x10/0x10 [ 808.803942][ T9100] ? do_raw_spin_lock+0x12d/0x2c0 [ 808.809010][ T9100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 808.814421][ T9100] ? mark_lock+0xb5/0xc60 [ 808.818891][ T9100] ? mark_lock+0xb5/0xc60 [ 808.823279][ T9100] ? __pfx_netfs_writepages+0x10/0x10 [ 808.828695][ T9100] do_writepages+0x1a3/0x7f0 [ 808.833350][ T9100] ? __pfx_do_writepages+0x10/0x10 [ 808.838521][ T9100] ? __pfx_lock_acquire+0x10/0x10 [ 808.843611][ T9100] ? do_raw_spin_lock+0x12d/0x2c0 [ 808.848679][ T9100] ? do_raw_spin_unlock+0x172/0x230 [ 808.853925][ T9100] ? _raw_spin_unlock+0x28/0x50 [ 808.858835][ T9100] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 808.864872][ T9100] filemap_fdatawrite_wbc+0x148/0x1c0 [ 808.870306][ T9100] __filemap_fdatawrite_range+0xba/0x100 [ 808.875996][ T9100] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 808.882329][ T9100] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 808.888447][ T9100] v9fs_dir_release+0x429/0x590 [ 808.893361][ T9100] ? __pfx_v9fs_dir_release+0x10/0x10 [ 808.898799][ T9100] ? __pfx___might_resched+0x10/0x10 [ 808.904271][ T9100] ? __pfx_v9fs_dir_release+0x10/0x10 [ 808.909788][ T9100] __fput+0x3f6/0xb60 [ 808.913840][ T9100] task_work_run+0x14e/0x250 [ 808.918505][ T9100] ? __pfx_task_work_run+0x10/0x10 [ 808.923846][ T9100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.929793][ T9100] ? task_work_add+0x1d6/0x370 [ 808.934660][ T9100] get_signal+0x1ca/0x2770 [ 808.939134][ T9100] ? fput+0x148/0x390 [ 808.943182][ T9100] ? __pfx_get_signal+0x10/0x10 [ 808.948093][ T9100] arch_do_signal_or_restart+0x90/0x7e0 [ 808.953696][ T9100] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 808.959911][ T9100] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 808.965695][ T9100] syscall_exit_to_user_mode+0x150/0x2a0 [ 808.971392][ T9100] do_syscall_64+0xda/0x250 [ 808.975955][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.981920][ T9100] RIP: 0033:0x7f4e8d97def9 [ 808.986471][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.006220][ T9100] RSP: 002b:00007f4e8e6f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 809.014662][ T9100] RAX: 000000000038a000 RBX: 00007f4e8db35f80 RCX: 00007f4e8d97def9 [ 809.022651][ T9100] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000b [ 809.030686][ T9100] RBP: 00007f4e8d9f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 809.038690][ T9100] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 809.046684][ T9100] R13: 0000000000000000 R14: 00007f4e8db35f80 R15: 00007ffcd5b18a88 [ 809.054687][ T9100] [ 809.058041][ T9100] Kernel Offset: disabled [ 809.062372][ T9100] Rebooting in 86400 seconds..