last executing test programs: 10.100012137s ago: executing program 2 (id=1643): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40) rseq(&(0x7f0000000040), 0xfffffffffffffe82, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) write$qrtrtun(r0, &(0x7f0000002500)="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", 0x102a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\xff\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84\x03\x00\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) lseek(r1, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) ptrace$setsig(0x4203, r5, 0xfa5, &(0x7f00000001c0)={0x3a, 0x7, 0x7ff}) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x30) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$peekuser(0x3, r9, 0x6) 9.522538407s ago: executing program 2 (id=1646): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x5840000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0xfdef}}, 0x0) 8.555839897s ago: executing program 0 (id=1648): iopl(0x3) fspick(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2c003300d0000000ffffffffffff08021100000050505050505000000f"], 0x48}}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x99, 0x0, &(0x7f00000007c0)="b534cb98c2ef09573bad82595735687d9b65365c17b4a85449193c5cb2ed3fb9327ae1437e2873e6da34c6408b05f15dc3ba8b61d6051871a443aea6e12ee66027192d149e8f1f8b616f93d9164d77d8f2c0eda41f44000723ecdc9055ace691190df1c49df95801efd1885b400baf20359450614512f181443ced0ec64966b55a2a8f6567dd3c9ef7941a2ea521ad4bb1d214b2e16112722f", 0x0, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000000880)="8c27bdaccd2a9fc0a8cdbe36ec2f039b66c56a85f34acf57f3b4cf501c09661a269b9646606a3cbdc825d186c03fbc82daa460d54f7dce88d7c181131d0664f2eb83015219885ae12a89cb89bb614c42df35f518d7eb5ad1916eeec3f1011ec565c04636b92a3b12b1f2e84f3e92acf6308d5d17159d57fe6a67997423310d6a108489383c8ee36dcb8c26a5cb4f1648a02d1220cceed0e891b7952b8e9fb0979d0afae4ed3cc00fc691a4765189d97e18e3ab3854c16264e9a6b72fa8132fc5781831090912d2bf184832892462b0d9b874dee5d35a746e430a0bafb5b531dbbf704edb57df3b01c378d672b317c5c93f", 0x0, 0x2, 0x0, 0x8000}, 0x50) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) sendmsg$unix(r2, 0x0, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 7.547089545s ago: executing program 0 (id=1651): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f00000000c0)='}', 0xffca, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) io_uring_setup(0x806d0f, &(0x7f0000001280)={0x0, 0x2, 0x0, 0x80000, 0x1c2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r6 = io_uring_setup(0x410f, &(0x7f0000000200)) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x400}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 6.600984566s ago: executing program 0 (id=1656): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10c800, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000280)={0x8, @capture={0x1000, 0x0, {0x1, 0x9}, 0x7ff, 0xfffffff9}}) listen(r0, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000080200001030000c3040c8bf7f179a8310000000000cc020014"], 0x1c}}, 0x0) 6.32353737s ago: executing program 0 (id=1658): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000070ffffff00000000000000050000000300010001010000020000000000001202000000000061"], 0x0, 0xfffffffffffffe4e}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.192149334s ago: executing program 3 (id=1659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000640)="e0", 0x1, 0x4000800, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000001c0), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x5b, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000d880)={'vxcan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000dac0)={&(0x7f000000c1c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000da80)={&(0x7f000000d8c0)=@acquire={0x1a4, 0x17, 0x300, 0x70bd2c, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d6, 0x2b}, @in=@rand_addr=0x64010100, {@in=@multicast2, @in=@empty, 0x4e21, 0x4, 0x4e23, 0x7, 0x2, 0x80, 0x20, 0x8}, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e23, 0x8001, 0xa, 0x20, 0x20, 0xe, r4}, {0x3aa6, 0x9, 0x4, 0x8000000000000001, 0x2, 0x1, 0x3, 0x7}, {0x2, 0x1, 0xa0b7, 0x7}, 0x3ff, 0x6e6bb8, 0x1, 0x1, 0x3}, 0x8001, 0x400, 0x0, 0x70bd25}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @sec_ctx={0x47, 0x8, {0x43, 0x8, 0x6b5f2987778b9db2, 0x8, 0x3b, "b47cf8f18c7d34acbf9ef0cac12a87d108989877c74072c5802a1b058740e51322a91ff8d1744b56b9fda8f4ad4698e07b2696721cd73c8073f84b"}}, @policy_type={0xa}, @offload={0xc, 0x1c, {r5, 0x1}}, @coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000e80)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.85381269s ago: executing program 2 (id=1661): mknod(&(0x7f0000000040)='./file1\x00', 0x40, 0xfffd) inotify_init() (async) r0 = inotify_init() r1 = fcntl$dupfd(r0, 0x0, r0) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x10000440) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(r1, r2) 5.736607573s ago: executing program 3 (id=1663): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240023800600180009"], 0x40}}, 0x0) 5.362403398s ago: executing program 2 (id=1664): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) io_setup(0x4, &(0x7f0000002c40)=0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r6, &(0x7f0000000740)=""/377, 0x179) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000001500)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r12, 0x0) connect$unix(r11, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_uring_setup(0x758c, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x3}) socket$unix(0x1, 0x1, 0x0) 5.355404172s ago: executing program 4 (id=1665): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48) memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000029000000040000000000000000000000180000000000000029000000040000000000000000000000140000000000000029000000430000001331000000000000880000000000000029000000390000001d05000000000000fc020000000000000000000000000000ff02000000000000000000000000000120010020000000000000000000000002fe8000000000000000000000000000bbfe8000000000000000000000000000bbff010000000000000000000000000001fe8000000000000000000000000000aa"], 0xd0}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r4, 0x8912, &(0x7f0000000840)) 4.996810973s ago: executing program 3 (id=1666): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f00000000c0)='}', 0xffca, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) io_uring_setup(0x806d0f, &(0x7f0000001280)={0x0, 0x2, 0x0, 0x80000, 0x1c2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r6 = io_uring_setup(0x410f, &(0x7f0000000200)) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x400}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 4.33103515s ago: executing program 4 (id=1667): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0), 0x8040, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f0000000340)="2007019f2e124982246bf69e75a43f67228fef7aa4d128339797f21a3eadd50ac3572877e3981646fc59a4bbe4a5bf51b094c1af1f378db14b57cf9e7736c81c78c20bd920d85271574adcb87c789e04892a44f31d29027687457ea26309fc9186c77aa6321f5533b3f6bd471eff584f29e728832c6a2400b0ef1e8faf1b6d5394c1e3ed3ab261ce9c653c563f37327883b11870724f9c7b9fff6cd08ecae227982c9680153c9012a0", &(0x7f0000000400)=""/172, &(0x7f0000000580)="b0df97054786dad67254870c6f7f761fcf88889e2d4422e87292f4353f696d8cc466a4a0ef97a45f4d77e4a724cf5b8146b263b5e075ae831f693ee65a7e9744fe9d527473b385bea6e8970472e430edd258117c190087b9172e16baae6b848d8aded0b7183ae046c7d483df4cea7ddca27a196e4c1cafd023e50c484c3cd69308cbc8a51784db", &(0x7f0000000640)="eef768bbd6fb2304b5580edc98ef21b17bf49d89a514de1854366651f8bcf179d02573ee9b93f8ed8f9d017e22798e2b951e8746c6e1eccdadf4d06fbfae711cd3294687394e8c6cec5b6427394d2baf2628da0dcda6de54de4b3203dbfa4955bbd95c67f1b5b0608244c84508a8cba55e8c3a19842b31eb2d74b07754080bcc237e54c1d477f574548aee2e6e", 0xfa4, r1}, 0x38) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x4, 0x0, &(0x7f0000000140)) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003400)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000100)) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000240)) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8a000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.821023616s ago: executing program 1 (id=1668): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x48200, 0x0) r2 = io_uring_setup(0x30d5, &(0x7f00000000c0)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x26}, 0x10) (async) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000000001"], 0x2c}}, 0x0) (async) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @loopback={0xfec0ffff00000000}}]}, 0x2c}}, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000008847000000", 0x39}], 0x1) (async) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snddsp(r11, &(0x7f0000000740)=""/56, 0x38) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000100)={0xc5, 0x0, r11}) (async) socket$inet6(0xa, 0x6, 0x0) 3.820162797s ago: executing program 2 (id=1669): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='spmi_read_begin\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @auto="b654b47d2a0a7e456bdf0ba94281c897"}}) 3.714767604s ago: executing program 4 (id=1670): socket$inet6(0xa, 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff000000000f003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="148071334d000900000000000000000001600000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x393, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_usb_connect$hid(0x4, 0x84, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x2}}, 0x20) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x44, {0x44, 0x22, "3880a5486650f24bfb6e3908695fd8e8d042dcd55170e418405b1e65efc859d377b5f7a3983dbecd59a6dc224fd7650449a816952509b938698ee863c84409680b16"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000640)={0x20, 0x11, 0x98, "036fddddb4a439cf5b96747ac98a52af1b58a155fa41d11dfbd9787d256a38418f456353b9f48c5e7fa67ca838ebbae58478475a8f7cafe9f378758df84157d7656fbcfd67028653383815fb966284e12383878851afbb30c50a3ace3b977f46e2d26a088f35beae4df21013eac3ad9a41c260342e85be35c0919ad0ce572daf145cd4b824c837d742c435e456b0e99650ddd47bca6ac76a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0xaf, {0xad, "d938bec9fb1de43df40e2a17ed1772d15e09e35b200a248447f0fea54828ba0a1fa66ef08405ab85c463e4bd81d3655e2ff97a3072190540a4b5274444776e58f966c50b79149062807a3e0c3ff7dbebf0f2702f7c6e40fc42c3e00e05ed273e65efbd694629db2bb2b9bc88a3e35866b2dea57bbdbcbc6532e890acc3e59bfbe67139c90a85a52d69bf7f3c563640b6755bd8ea59533fec46b14fe3a0ab79514b768934a399c60a0568a7777a"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x8}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.56897211s ago: executing program 0 (id=1671): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x5840000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0xfdef}}, 0x0) 3.389723807s ago: executing program 1 (id=1672): r0 = getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) setrlimit(0x8, &(0x7f0000000380)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) r8 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 3.381976154s ago: executing program 3 (id=1673): r0 = getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) setrlimit(0x8, &(0x7f0000000380)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) r8 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 2.290279589s ago: executing program 0 (id=1674): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x200) socket$netlink(0x10, 0x3, 0x400000000000004) syz_emit_vhci(&(0x7f0000000ac0)=ANY=[@ANYBLOB="043e1a0d011b0000aaaa000000000000000000000000ffffffff"], 0x1d) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) getpgid(0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r5, 0x0, 0x0) 1.959229154s ago: executing program 4 (id=1675): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x6a) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x15) getpeername$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x7) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x60, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a8e0b00000000000000076e0a00691e0300ffffffffffff05cf05e77791ff07000000000000f404f25e1308ff07ffffffffffff00fc00699cf70200"], 0x58) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04460400000000"], 0x7) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c93010000c000100032d0800090081ff01000600f0bca44383594a347cdb69620fba71243ddac01d76103172cfc95654c7dbddae3ad2819db7b738e2e07ca065a681b497fcdd8cf3dd693306050bf838cd73bfd2a5da2e5ebc792b89e1dabaf51d7f4957665406e189433c39541237b8f620a31af5411a7768db19ffcdf34d99570117ee54f1aab2b840cc829ca216690b121f3aff229edc77439b9628716e8186"], 0x15) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0xfffffffffffffffe}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1000, 0xffffffff, 0x3, 0x740, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0xe}, 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.749472389s ago: executing program 1 (id=1676): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="240023800600180009"], 0x40}}, 0x0) 1.534051862s ago: executing program 1 (id=1677): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48) memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000029000000040000000000000000000000180000000000000029000000040000000000000000000000140000000000000029000000430000001331000000000000880000000000000029000000390000001d05000000000000fc020000000000000000000000000000ff02000000000000000000000000000120010020000000000000000000000002fe8000000000000000000000000000bbfe8000000000000000000000000000bbff010000000000000000000000000001fe8000000000000000000000000000aa"], 0xd0}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r4, 0x8912, &(0x7f0000000840)) 1.438268433s ago: executing program 4 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/74, 0x0, 0x5000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n ', @ANYRES32=r2, @ANYBLOB="140035006d616373656330000000000000000000"], 0x3c}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 1.118030378s ago: executing program 3 (id=1679): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x6, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063014e000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000000)) sendmmsg$inet6(r4, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @private1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400"/24], 0x18}}], 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendto$packet(r5, &(0x7f00000020c0)='`', 0x1, 0x4, &(0x7f0000000240)={0x6, 0x18, 0x0, 0x1, 0x0, 0x6, @random="4a919dac3a4d"}, 0x14) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000001040), 0x8) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000001fc0), 0x3, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000340)=[0x63cc07b6], &(0x7f00000003c0)=[r11], &(0x7f0000000340)}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000000500020002000000180001801400020073797a5f74756e000000000000000000050003"], 0x3c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000022c0)={0x3}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000002300), 0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 730.720593ms ago: executing program 4 (id=1680): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='spmi_read_begin\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x541b, 0x20000000) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @auto="b654b47d2a0a7e456bdf0ba94281c897"}}) 386.746487ms ago: executing program 1 (id=1681): r0 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0xb20002, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='Mw\tdno=', @ANYRESHEX=r4, @ANYBLOB=',mask=^MAY_EXEC,obj_type=wfdno,\x00']) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x105180) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) fcntl$dupfd(r1, 0x0, r1) r5 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0xa38) 338.206599ms ago: executing program 2 (id=1682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r3 = getpgrp(0x0) syz_pidfd_open(r3, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) fchdir(0xffffffffffffffff) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000001940)=""/4098) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x1}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000007c0)) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) r10 = fcntl$dupfd(r7, 0x0, r8) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000080)={0x0, r9}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r0}) 22.466404ms ago: executing program 3 (id=1683): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) semget(0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000002680)={0xa, 0x4e23, 0x0, @dev}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f033608260712002c001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) r7 = msgget$private(0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000002700)='net/l2cap\x00') ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @default, 0xffffffffffffffff}) 0s ago: executing program 1 (id=1684): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0xfdef}}, 0x0) kernel console output (not intermixed with test programs): acquire_held_locks+0x480/0x4c0 [ 936.368663][T11705] ? __pfx___sys_bpf+0x10/0x10 [ 936.373442][T11705] ? vfs_write+0x14d/0x1140 [ 936.377982][T11705] ? __mutex_unlock_slowpath+0x164/0x650 [ 936.383649][T11705] ? fput+0x32/0x390 [ 936.387558][T11705] ? ksys_write+0x1ab/0x260 [ 936.392087][T11705] ? __pfx_ksys_write+0x10/0x10 [ 936.396972][T11705] __x64_sys_bpf+0x78/0xc0 [ 936.401402][T11705] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.406624][T11705] do_syscall_64+0xcd/0x250 [ 936.411161][T11705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.417097][T11705] RIP: 0033:0x7f3c22b75bd9 [ 936.421535][T11705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.441172][T11705] RSP: 002b:00007f3c2389f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 936.449610][T11705] RAX: ffffffffffffffda RBX: 00007f3c22d03f60 RCX: 00007f3c22b75bd9 [ 936.457596][T11705] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 936.465590][T11705] RBP: 00007f3c2389f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 936.473595][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.481581][T11705] R13: 000000000000000b R14: 00007f3c22d03f60 R15: 00007ffdf17ceec8 [ 936.489572][T11705] [ 936.504633][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 936.537811][T11705] syz.0.1148: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 936.573779][T11705] CPU: 0 PID: 11705 Comm: syz.0.1148 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 936.584027][T11705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 936.594144][T11705] Call Trace: [ 936.597457][T11705] [ 936.600427][T11705] dump_stack_lvl+0x16c/0x1f0 [ 936.605172][T11705] warn_alloc+0x24d/0x3a0 [ 936.609560][T11705] ? __pfx_warn_alloc+0x10/0x10 [ 936.614460][T11705] ? dump_stack_lvl+0x197/0x1f0 [ 936.619361][T11705] ? rcu_is_watching+0x12/0xc0 [ 936.624170][T11705] ? __kmalloc_node_noprof+0x233/0x440 [ 936.629688][T11705] __vmalloc_node_range_noprof+0xff7/0x1520 [ 936.635651][T11705] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 936.641285][T11705] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 936.647688][T11705] ? __pfx___lock_acquire+0x10/0x10 [ 936.652954][T11705] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 936.658562][T11705] __vmalloc_noprof+0x6d/0x90 [ 936.663299][T11705] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 936.668908][T11705] bpf_prog_alloc_no_stats+0x58/0x440 [ 936.674352][T11705] bpf_prog_alloc+0x3b/0x240 [ 936.679002][T11705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 936.684941][T11705] bpf_prog_load+0x1b32/0x2660 [ 936.689757][T11705] ? __pfx_bpf_prog_load+0x10/0x10 [ 936.694937][T11705] ? avc_has_perm+0x11b/0x1c0 [ 936.699679][T11705] ? selinux_bpf+0xde/0x130 [ 936.702897][T11326] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.704208][T11705] ? security_bpf+0x8c/0xc0 [ 936.715333][T11705] __sys_bpf+0x8e9/0x49a0 [ 936.719711][T11705] ? ksys_write+0x21c/0x260 [ 936.724293][T11705] ? reacquire_held_locks+0x480/0x4c0 [ 936.729728][T11705] ? __pfx___sys_bpf+0x10/0x10 [ 936.734533][T11705] ? vfs_write+0x14d/0x1140 [ 936.737767][T11317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.739072][T11705] ? __mutex_unlock_slowpath+0x164/0x650 [ 936.751348][T11705] ? fput+0x32/0x390 [ 936.755286][T11705] ? ksys_write+0x1ab/0x260 [ 936.759847][T11705] ? __pfx_ksys_write+0x10/0x10 [ 936.764762][T11705] __x64_sys_bpf+0x78/0xc0 [ 936.768803][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.769210][T11705] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.776492][ T9621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.781414][T11705] do_syscall_64+0xcd/0x250 [ 936.793245][T11705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.799205][T11705] RIP: 0033:0x7f3c22b75bd9 [ 936.803660][T11705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.823323][T11705] RSP: 002b:00007f3c2389f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 936.831799][T11705] RAX: ffffffffffffffda RBX: 00007f3c22d03f60 RCX: 00007f3c22b75bd9 [ 936.839824][T11705] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 936.847844][T11705] RBP: 00007f3c2389f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 936.855877][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.863908][T11705] R13: 000000000000000b R14: 00007f3c22d03f60 R15: 00007ffdf17ceec8 [ 936.871942][T11705] [ 936.896086][T11705] Mem-Info: [ 936.899371][T11705] active_anon:5451 inactive_anon:0 isolated_anon:0 [ 936.899371][T11705] active_file:5837 inactive_file:39111 isolated_file:0 [ 936.899371][T11705] unevictable:0 dirty:156 writeback:0 [ 936.899371][T11705] slab_reclaimable:10152 slab_unreclaimable:97070 [ 936.899371][T11705] mapped:14752 shmem:1271 pagetables:722 [ 936.899371][T11705] sec_pagetables:0 bounce:0 [ 936.899371][T11705] kernel_misc_reclaimable:0 [ 936.899371][T11705] free:1401937 free_pcp:487 free_cma:0 [ 936.959077][T11705] Node 0 active_anon:20368kB inactive_anon:0kB active_file:23348kB inactive_file:156376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59008kB dirty:620kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10032kB pagetables:2888kB sec_pagetables:0kB all_unreclaimable? no [ 937.007813][T11705] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 937.046276][T11705] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 937.062602][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.080753][ T9621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.100280][T11705] lowmem_reserve[]: 0 2565 2567 0 0 [ 937.105624][T11705] Node 0 DMA32 free:1641132kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:20440kB inactive_anon:0kB active_file:23348kB inactive_file:154568kB unevictable:0kB writepending:616kB present:3129332kB managed:2654728kB mlocked:0kB bounce:0kB free_pcp:1932kB local_pcp:1020kB free_cma:0kB [ 937.119536][T11317] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.163171][T11705] lowmem_reserve[]: 0 0 1 0 0 [ 937.163993][ T7977] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 937.189314][T11705] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:4kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 937.249268][T11705] lowmem_reserve[]: 0 0 0 0 0 [ 937.282428][T11705] Node 1 Normal free:3950976kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 937.316528][T11705] lowmem_reserve[]: 0 0 0 0 0 [ 937.321517][T11705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 937.334850][T11705] Node 0 DMA32: 1207*4kB (UM) 1652*8kB (UME) 597*16kB (UME) 377*32kB (UME) 462*64kB (UME) 137*128kB (UM) 103*256kB (UME) 64*512kB (UME) 12*1024kB (UME) 2*2048kB (ME) 361*4096kB (UM) = 1640940kB [ 937.372424][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.379737][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.393077][T11705] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 937.412974][ T7977] usb 4-1: config 0 has no interfaces? [ 937.419454][ T7977] usb 4-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 937.436137][ T7977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.444359][T11705] Node 1 Normal: 7*4kB (U) 7*8kB (U) 7*16kB (U) 14*32kB (U) 12*64kB (UM) 4*128kB (U) 2*256kB (UM) 4*512kB (UM) 2*1024kB (U) 4*2048kB (U) 961*4096kB (M) = 3950980kB [ 937.465247][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.472594][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.485602][ T7977] usb 4-1: config 0 descriptor?? [ 937.490887][T11705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.524035][T11705] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 937.574328][T11705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.619495][T11705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 937.666862][T11705] 46203 total pagecache pages [ 937.671615][T11705] 0 pages in swap cache [ 937.683675][T11705] Free swap = 124728kB [ 937.695231][T11705] Total swap = 124996kB [ 937.700230][T11705] 2097051 pages RAM [ 937.704247][T11705] 0 pages HighMem/MovableOnly [ 937.709151][T11705] 401775 pages reserved [ 937.713330][T11705] 0 pages cma reserved [ 937.802241][T11326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 937.826430][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.835290][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.951941][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.959541][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.027266][ T5135] usb 4-1: USB disconnect, device number 16 [ 939.257508][T11602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 939.298179][T11602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 939.378035][T11602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 939.399195][ T7763] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 939.442106][T11602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 939.501035][T11326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.554051][T11317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.598663][ T7763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.617208][ T7763] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.672784][ T7763] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 939.692804][ T7763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 939.724271][ T7763] usb 1-1: SerialNumber: syz [ 939.870748][T11326] veth0_vlan: entered promiscuous mode [ 940.143940][T11326] veth1_vlan: entered promiscuous mode [ 942.046328][T11602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.087214][T11326] veth0_macvtap: entered promiscuous mode [ 942.420535][T11326] veth1_macvtap: entered promiscuous mode [ 942.571016][T11602] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.742486][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.749816][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.827502][ T7763] usb 1-1: 0:2 : does not exist [ 942.923159][ T7763] usb 1-1: USB disconnect, device number 13 [ 942.974209][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.981519][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.166517][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 943.339470][T11604] udevd[11604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.193468][ T9348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.204941][ T9348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.216280][ T9348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.229920][ T9348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.241065][ T9348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 944.251691][ T9348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.392296][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 944.405737][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 944.419871][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 944.437479][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 944.445659][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 944.456945][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 945.783671][T11602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.352991][ T9348] Bluetooth: hci0: command tx timeout [ 953.506639][ T9348] Bluetooth: hci2: command tx timeout [ 954.394648][ T9675] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 954.633845][ T9675] usb 1-1: config 0 has no interfaces? [ 954.666190][ T9675] usb 1-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 954.754064][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.805798][ T1040] bridge_slave_1: left allmulticast mode [ 954.811647][ T1040] bridge_slave_1: left promiscuous mode [ 954.813543][ T9675] usb 1-1: config 0 descriptor?? [ 954.831168][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.854108][ T1040] bridge_slave_0: left allmulticast mode [ 954.876814][ T1040] bridge_slave_0: left promiscuous mode [ 954.897855][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.188180][T11837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.253453][T11837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.555225][ T5101] Bluetooth: hci2: command tx timeout [ 955.560704][ T5101] Bluetooth: hci0: command tx timeout [ 955.652887][ T8] usb 1-1: USB disconnect, device number 14 [ 956.063387][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.090423][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.111845][ T1040] bond0 (unregistering): Released all slaves [ 956.328877][T11784] chnl_net:caif_netlink_parms(): no params data found [ 956.393940][ T1040] hsr_slave_0: left promiscuous mode [ 956.452923][ T1040] hsr_slave_1: left promiscuous mode [ 956.485954][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.514111][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.135224][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 957.229439][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 958.927516][ T5101] Bluetooth: hci0: command tx timeout [ 958.933014][ T5101] Bluetooth: hci2: command tx timeout [ 960.095003][T11788] chnl_net:caif_netlink_parms(): no params data found [ 960.279045][T11602] veth0_vlan: entered promiscuous mode [ 960.809344][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.837319][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.865623][T11784] bridge_slave_0: entered allmulticast mode [ 960.881569][T11784] bridge_slave_0: entered promiscuous mode [ 960.925507][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.956780][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.980225][T11784] bridge_slave_1: entered allmulticast mode [ 960.999403][ T5101] Bluetooth: hci2: command tx timeout [ 960.999406][ T4478] Bluetooth: hci0: command tx timeout [ 961.014061][T11784] bridge_slave_1: entered promiscuous mode [ 961.120241][T11602] veth1_vlan: entered promiscuous mode [ 961.870077][T11788] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.421032][T11788] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.428451][T11788] bridge_slave_0: entered allmulticast mode [ 965.490384][T11788] bridge_slave_0: entered promiscuous mode [ 965.574630][T11788] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.582002][T11788] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.589262][T11788] bridge_slave_1: entered allmulticast mode [ 965.597979][T11788] bridge_slave_1: entered promiscuous mode [ 965.775174][T11784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.052098][T11784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.147347][ T5291] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 966.579928][ T5291] usb 4-1: config 0 has no interfaces? [ 966.585843][ T5291] usb 4-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 966.591338][T11788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.601038][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.636730][ T5291] usb 4-1: config 0 descriptor?? [ 966.675381][T11788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.944203][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.989938][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.069731][T11788] team0: Port device team_slave_0 added [ 967.159999][T11784] team0: Port device team_slave_0 added [ 967.228512][T11788] team0: Port device team_slave_1 added [ 967.340637][T11784] team0: Port device team_slave_1 added [ 967.341581][ T785] usb 4-1: USB disconnect, device number 17 [ 967.503382][T11788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.510393][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.540847][T11788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.582078][T11788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.589088][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.622751][T11788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.662535][T11784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.669627][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.699440][T11784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.713989][T11602] veth0_macvtap: entered promiscuous mode [ 967.769466][T11784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.776852][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.804099][T11784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.908671][T11602] veth1_macvtap: entered promiscuous mode [ 968.165579][T11788] hsr_slave_0: entered promiscuous mode [ 968.204259][T11788] hsr_slave_1: entered promiscuous mode [ 968.261196][T11784] hsr_slave_0: entered promiscuous mode [ 968.274762][T11784] hsr_slave_1: entered promiscuous mode [ 968.324659][T11784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.340506][T11784] Cannot create hsr debugfs directory [ 970.143732][T11602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.173234][T11602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.201175][T11602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.239740][T11602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.275087][T11602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.302355][T11602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.808533][T11602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.870301][T11964] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 970.878020][T11964] VFS: Can't find a romfs filesystem on dev nullb0. [ 970.878020][T11964] [ 970.886049][T11602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.007784][T11602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.483676][T11602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.622497][T11602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.664668][T11602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.681868][T11602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.693310][T11602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.297450][ T1040] bridge_slave_1: left allmulticast mode [ 972.318799][ T1040] bridge_slave_1: left promiscuous mode [ 972.331095][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.391763][ T1040] bridge_slave_0: left allmulticast mode [ 972.398327][ T1040] bridge_slave_0: left promiscuous mode [ 972.427173][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.401968][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.416812][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.431731][ T1040] bond0 (unregistering): Released all slaves [ 973.551846][ T5138] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 973.679438][ T1040] hsr_slave_0: left promiscuous mode [ 973.687334][ T1040] hsr_slave_1: left promiscuous mode [ 973.693602][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.704990][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.732675][ T1040] veth1_macvtap: left promiscuous mode [ 973.739385][ T1040] veth0_macvtap: left promiscuous mode [ 973.747032][ T1040] veth1_vlan: left promiscuous mode [ 973.752476][ T1040] veth0_vlan: left promiscuous mode [ 973.771519][ T5138] usb 4-1: config 0 has no interfaces? [ 973.780607][ T5138] usb 4-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 973.793952][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.811987][ T5138] usb 4-1: config 0 descriptor?? [ 974.093064][T11990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.107872][T11990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.317754][ T5138] usb 4-1: USB disconnect, device number 18 [ 974.501740][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 974.560058][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 975.554881][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.623310][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.989541][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.065546][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.721984][T11784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 979.049314][T11784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 979.062725][T11784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 979.172280][T11784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 979.748546][ T9675] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 980.010357][ T9675] usb 4-1: config 0 has no interfaces? [ 980.027743][ T9675] usb 4-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 980.061048][ T9675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.144613][ T9675] usb 4-1: config 0 descriptor?? [ 981.779953][T12058] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 983.761163][T11784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.817804][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.827087][T11788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 983.837893][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.851617][T11788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 983.938943][T11788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 984.082423][T11784] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.134358][T11788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 984.217286][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.224643][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.243449][ T5291] usb 4-1: USB disconnect, device number 19 [ 984.353311][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.360564][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.972920][T11788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.156448][T11788] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.208576][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.215982][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.306753][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.313983][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.803315][T11784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.514797][T11788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.036566][T11788] veth0_vlan: entered promiscuous mode [ 990.160237][T11788] veth1_vlan: entered promiscuous mode [ 990.605732][T11788] veth0_macvtap: entered promiscuous mode [ 990.725288][T11784] veth0_vlan: entered promiscuous mode [ 990.787259][T11788] veth1_macvtap: entered promiscuous mode [ 990.904706][T11788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.942746][T11788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.008848][T11788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.031082][T11788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.051937][T11788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.108892][T11788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.146357][T11788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.184732][T11784] veth1_vlan: entered promiscuous mode [ 991.237716][T11788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.266380][T11788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.286331][T11788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.307395][T11788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.569232][T11788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.598456][T11788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.618339][T11788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.707458][T11788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.742889][T11788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.789600][T11788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.823230][T11788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.879775][T11784] veth0_macvtap: entered promiscuous mode [ 991.969930][T11784] veth1_macvtap: entered promiscuous mode [ 992.227072][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.255283][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.274024][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.303534][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.323675][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.341219][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.361385][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.381214][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.403367][T12149] netlink: 'syz.0.1198': attribute type 11 has an invalid length. [ 992.414439][T11784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.447786][T12149] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1198'. [ 992.506983][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.550691][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.569492][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.602568][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.624290][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.624725][T12149] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 992.651577][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.663958][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.704636][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.727669][T11784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.811119][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.852582][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.889100][T11784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.916648][T11784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.937151][T11784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.964162][T11784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.907450][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.944444][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.420167][ T3215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.479112][ T3215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.677326][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.714382][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.299224][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 999.546301][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.568314][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.352225][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'. [ 1000.361805][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'. [ 1001.958702][T12226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1002.639126][ T5142] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1002.988113][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1219'. [ 1003.012443][ T5101] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1003.015067][T12230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1218'. [ 1003.057292][ T5142] usb 5-1: config 0 has no interfaces? [ 1003.069547][ T5142] usb 5-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 1003.079340][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.092541][ T5142] usb 5-1: config 0 descriptor?? [ 1003.122659][ T5101] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11 [ 1003.458021][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 1003.595043][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.663504][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.991177][T12257] netlink: 'syz.1.1223': attribute type 11 has an invalid length. [ 1006.999039][T12257] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1223'. [ 1007.765199][T12259] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1010.659580][ T5135] usb 5-1: USB disconnect, device number 8 [ 1010.925071][ T29] audit: type=1400 audit(1720888840.976:600): avc: denied { mount } for pid=12272 comm="syz.2.1228" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1011.082186][ T29] audit: type=1400 audit(1720888841.136:601): avc: denied { unmount } for pid=11788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1011.260097][ T29] audit: type=1400 audit(1720888841.315:602): avc: denied { ioctl } for pid=12271 comm="syz.4.1227" path="socket:[46047]" dev="sockfs" ino=46047 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1011.577145][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1231'. [ 1011.724165][T12291] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1011.731643][T12291] VFS: Can't find a romfs filesystem on dev nullb0. [ 1011.731643][T12291] [ 1015.217578][T12307] netlink: 'syz.2.1236': attribute type 11 has an invalid length. [ 1015.225613][T12307] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1236'. [ 1015.239615][T12307] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1017.925346][T12318] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1239'. [ 1018.006507][T12318] netlink: 'syz.0.1239': attribute type 9 has an invalid length. [ 1018.031565][T12318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1239'. [ 1018.068317][T12318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1239'. [ 1018.412910][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 1018.512817][T12329] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1018.522113][T12329] VFS: Can't find a romfs filesystem on dev nullb0. [ 1018.522113][T12329] [ 1019.749245][T12348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.364911][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 1025.038113][T12401] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1025.081101][ T5142] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1025.316255][ T5142] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1025.349976][ T5142] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1025.398485][ T5142] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1025.428362][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.464317][T12380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1027.147725][T12414] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1027.461067][ T5170] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1027.902579][ T5170] usb 3-1: config 0 has no interfaces? [ 1027.936458][ T5170] usb 3-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 1028.912335][ T5170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.973820][ T5170] usb 3-1: config 0 descriptor?? [ 1029.135058][ T9675] usb 1-1: USB disconnect, device number 15 [ 1029.158767][ T5170] usb 3-1: can't set config #0, error -71 [ 1029.203903][ T5170] usb 3-1: USB disconnect, device number 8 [ 1030.606516][T12451] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1270'. [ 1030.635498][T12451] netlink: 'syz.4.1270': attribute type 9 has an invalid length. [ 1030.717475][T12451] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1270'. [ 1030.753117][T12451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 1030.949886][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 1032.372687][T12460] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1036.115473][ T5135] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1037.309526][T12483] netlink: 'syz.4.1278': attribute type 11 has an invalid length. [ 1037.317522][T12483] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1278'. [ 1037.330732][T12483] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1038.129131][ T5135] usb 2-1: config 0 has no interfaces? [ 1039.056922][ T5135] usb 2-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 1039.104076][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.322970][ T5135] usb 2-1: config 0 descriptor?? [ 1039.411664][ T5135] usb 2-1: can't set config #0, error -71 [ 1039.442914][ T5135] usb 2-1: USB disconnect, device number 17 [ 1040.242112][T12509] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1284'. [ 1040.280547][T12509] netlink: 'syz.4.1284': attribute type 9 has an invalid length. [ 1040.310549][T12509] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1284'. [ 1040.346346][T12509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1284'. [ 1040.488724][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 1040.628857][ T4478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1040.677912][ T4478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1040.689509][ T4478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1040.755555][ T4478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.764265][ T4478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1040.774503][ T4478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1042.155045][T12518] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1043.019050][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 1043.025299][ T5101] Bluetooth: hci2: command tx timeout [ 1044.352144][ T5280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.483271][ T9348] Bluetooth: hci2: command tx timeout [ 1046.043493][ T5280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.053987][ T9675] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1046.494731][ T9675] usb 5-1: config 0 has no interfaces? [ 1046.500310][ T9675] usb 5-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 1046.520376][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.056902][ T9675] usb 5-1: config 0 descriptor?? [ 1047.078069][ T5280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.264817][ T5280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.454105][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.521217][ T9348] Bluetooth: hci2: command tx timeout [ 1047.526084][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.734962][ T5280] bridge_slave_1: left allmulticast mode [ 1047.795240][ T5280] bridge_slave_1: left promiscuous mode [ 1047.807144][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.919843][ T5280] bridge_slave_0: left allmulticast mode [ 1047.953948][ T5280] bridge_slave_0: left promiscuous mode [ 1047.959896][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.994360][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 1048.004709][ T5142] usb 5-1: USB disconnect, device number 9 [ 1049.384563][ T5280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.418256][ T5280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.450357][ T5280] bond0 (unregistering): Released all slaves [ 1049.602384][ T9348] Bluetooth: hci2: command tx timeout [ 1049.656954][T12566] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1294'. [ 1049.709327][T12566] netlink: 'syz.1.1294': attribute type 9 has an invalid length. [ 1049.719398][T12566] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1294'. [ 1049.728611][T12566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1294'. [ 1051.319109][T12577] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1057.107995][T12512] chnl_net:caif_netlink_parms(): no params data found [ 1057.288818][ T5280] hsr_slave_0: left promiscuous mode [ 1057.357589][ T5280] hsr_slave_1: left promiscuous mode [ 1057.409688][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.426421][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.707037][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.747504][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.908316][T12598] netlink: 'syz.3.1302': attribute type 11 has an invalid length. [ 1058.916216][T12598] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1302'. [ 1058.929900][T12598] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1060.490583][ T5280] veth1_macvtap: left promiscuous mode [ 1060.496244][ T5280] veth0_macvtap: left promiscuous mode [ 1060.619726][ T5280] veth1_vlan: left promiscuous mode [ 1060.647163][ T5280] veth0_vlan: left promiscuous mode [ 1061.016558][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.039603][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.140119][T12621] netlink: 'syz.4.1306': attribute type 11 has an invalid length. [ 1062.148826][T12621] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1306'. [ 1062.615598][T12621] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1065.177989][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 1067.013056][T12637] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1068.838716][T12631] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1307'. [ 1069.832654][T12631] netlink: 'syz.4.1307': attribute type 9 has an invalid length. [ 1069.845894][T12631] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1307'. [ 1070.082654][T12631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1307'. [ 1077.971216][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 1079.564707][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1079.590899][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1079.601468][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1079.649571][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1079.658562][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1079.667479][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1080.028629][ T9352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1080.039149][ T9352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1080.049534][ T9352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1080.058087][ T9352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1080.068570][ T4478] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1080.080812][ T9352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1080.089855][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1080.101224][ T9352] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1080.109337][ T9352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1080.117175][ T9352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1080.127143][ T9352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1080.163144][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1080.636333][ T5280] team0 (unregistering): Port device team_slave_1 removed [ 1080.697931][ T5280] team0 (unregistering): Port device team_slave_0 removed [ 1081.779564][ T5101] Bluetooth: hci4: command tx timeout [ 1081.997605][T12512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.008016][T12512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.024983][T12512] bridge_slave_0: entered allmulticast mode [ 1082.052094][T12512] bridge_slave_0: entered promiscuous mode [ 1082.085434][T12512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.093893][T12512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.102522][T12512] bridge_slave_1: entered allmulticast mode [ 1082.111525][T12512] bridge_slave_1: entered promiscuous mode [ 1082.194267][ T5101] Bluetooth: hci5: command tx timeout [ 1082.259832][ T5101] Bluetooth: hci0: command tx timeout [ 1082.355004][T12512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.422610][T12512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.835622][T12512] team0: Port device team_slave_0 added [ 1082.954647][T12512] team0: Port device team_slave_1 added [ 1083.008375][ T5101] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 1083.094944][T12512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.117334][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.144713][T12512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.159638][T12512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.168287][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.196934][T12512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.455272][ T5280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.791329][ T5280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.832917][T12512] hsr_slave_0: entered promiscuous mode [ 1083.850200][T12512] hsr_slave_1: entered promiscuous mode [ 1083.865791][ T5101] Bluetooth: hci4: command tx timeout [ 1084.161718][ T5280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.321991][ T5101] Bluetooth: hci5: command tx timeout [ 1084.339524][ T5101] Bluetooth: hci0: command tx timeout [ 1084.829869][T12665] chnl_net:caif_netlink_parms(): no params data found [ 1084.895260][ T5280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.965015][T12658] chnl_net:caif_netlink_parms(): no params data found [ 1085.071390][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 1085.467058][T12666] chnl_net:caif_netlink_parms(): no params data found [ 1085.940579][ T5101] Bluetooth: hci4: command tx timeout [ 1086.341188][ T5101] Bluetooth: hci5: command tx timeout [ 1086.423450][ T5101] Bluetooth: hci0: command tx timeout [ 1086.561521][T12665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.568757][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.578139][T12665] bridge_slave_0: entered allmulticast mode [ 1086.596676][T12665] bridge_slave_0: entered promiscuous mode [ 1086.607042][T12665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.624271][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.667361][T12665] bridge_slave_1: entered allmulticast mode [ 1086.679353][T12665] bridge_slave_1: entered promiscuous mode [ 1086.709768][T12658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.727630][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.743391][T12658] bridge_slave_0: entered allmulticast mode [ 1086.771477][T12658] bridge_slave_0: entered promiscuous mode [ 1086.781834][T12658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.788986][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.811089][T12658] bridge_slave_1: entered allmulticast mode [ 1086.819213][T12658] bridge_slave_1: entered promiscuous mode [ 1087.006161][ T5280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.021367][ T5101] Bluetooth: hci4: command tx timeout [ 1088.380608][ T5280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.422230][ T5101] Bluetooth: hci5: command tx timeout [ 1088.501819][ T5101] Bluetooth: hci0: command tx timeout [ 1088.572481][T12658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.587041][T12666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.598151][T12666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.606107][T12666] bridge_slave_0: entered allmulticast mode [ 1088.614188][T12666] bridge_slave_0: entered promiscuous mode [ 1088.730508][ T5280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.786176][T12665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.850483][T12665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.917036][T12658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.929123][T12666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.942213][T12666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.949516][T12666] bridge_slave_1: entered allmulticast mode [ 1088.964058][T12666] bridge_slave_1: entered promiscuous mode [ 1089.049457][ T5280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.480070][T12665] team0: Port device team_slave_0 added [ 1089.523636][T12665] team0: Port device team_slave_1 added [ 1089.559674][T12658] team0: Port device team_slave_0 added [ 1089.599360][T12658] team0: Port device team_slave_1 added [ 1089.626406][T12666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.839433][T12666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.177504][T12665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.189805][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.233795][T12665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.320282][T12658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.328262][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.380826][T12658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.425585][T12658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.448306][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.480016][T12658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.542863][T12666] team0: Port device team_slave_0 added [ 1090.600744][T12665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.618314][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.658856][T12665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.727388][T12666] team0: Port device team_slave_1 added [ 1090.866745][T12512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1091.173158][T12666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.190484][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.218509][T12666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.245597][T12512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1091.289269][T12512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1091.550195][ T5280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.637978][T12781] netlink: 'syz.0.1324': attribute type 11 has an invalid length. [ 1092.645967][T12781] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1324'. [ 1092.663770][T12781] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1092.730712][T12666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.752901][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.884790][T12666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.913377][T12512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1093.117532][T12665] hsr_slave_0: entered promiscuous mode [ 1093.375090][T12665] hsr_slave_1: entered promiscuous mode [ 1093.386485][T12665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.394279][T12665] Cannot create hsr debugfs directory [ 1094.467834][T12658] hsr_slave_0: entered promiscuous mode [ 1094.516081][T12658] hsr_slave_1: entered promiscuous mode [ 1094.526766][T12658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.534381][T12658] Cannot create hsr debugfs directory [ 1095.413930][ T5280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.553586][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 1095.580548][ T5280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.811373][ T5280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.177158][T12666] hsr_slave_0: entered promiscuous mode [ 1096.200005][T12666] hsr_slave_1: entered promiscuous mode [ 1096.210889][T12666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.220156][T12666] Cannot create hsr debugfs directory [ 1097.077837][ T5280] bridge_slave_1: left allmulticast mode [ 1097.083573][ T5280] bridge_slave_1: left promiscuous mode [ 1097.096754][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.117461][ T5280] bridge_slave_0: left allmulticast mode [ 1097.123176][ T5280] bridge_slave_0: left promiscuous mode [ 1097.145703][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.193132][ T5280] bridge_slave_1: left allmulticast mode [ 1097.205223][ T5280] bridge_slave_1: left promiscuous mode [ 1097.214345][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.240555][ T5280] bridge_slave_0: left allmulticast mode [ 1097.259377][ T5280] bridge_slave_0: left promiscuous mode [ 1097.274583][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.307309][ T5280] bridge_slave_1: left allmulticast mode [ 1097.313014][ T5280] bridge_slave_1: left promiscuous mode [ 1097.319762][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.377775][ T5280] bridge_slave_0: left allmulticast mode [ 1097.383499][ T5280] bridge_slave_0: left promiscuous mode [ 1097.416647][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.564739][ T5135] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1098.740277][ T5135] usb 1-1: device descriptor read/64, error -71 [ 1099.053284][ T5135] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1099.096873][ T5280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.112415][ T5280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.124827][ T5280] bond0 (unregistering): Released all slaves [ 1099.217738][ T5135] usb 1-1: device descriptor read/64, error -71 [ 1099.282002][ T5280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.294245][ T5280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.307992][ T5280] bond0 (unregistering): Released all slaves [ 1099.348346][ T5135] usb usb1-port1: attempt power cycle [ 1099.457255][ T5280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.478087][ T5280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.489626][ T5280] bond0 (unregistering): Released all slaves [ 1099.818549][ T5135] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1099.879402][ T5135] usb 1-1: device descriptor read/8, error -71 [ 1100.177842][ T5135] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1100.246007][ T5135] usb 1-1: device descriptor read/8, error -71 [ 1100.397628][ T5135] usb usb1-port1: unable to enumerate USB device [ 1100.432871][ T9348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1100.449828][ T9348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1100.459433][ T9348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1100.469931][ T9348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1100.478870][ T9348] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1100.493439][ T9348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1100.737233][T12658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1100.791361][T12658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1100.915784][T12658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1100.989152][T12658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1102.588742][ T5101] Bluetooth: hci1: command tx timeout [ 1103.790345][ T5280] hsr_slave_0: left promiscuous mode [ 1103.801567][ T5280] hsr_slave_1: left promiscuous mode [ 1103.812054][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.842063][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.858446][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.871163][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.925141][ T5280] hsr_slave_0: left promiscuous mode [ 1103.935312][ T5280] hsr_slave_1: left promiscuous mode [ 1103.966696][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.982216][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.003366][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.012443][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.057413][ T5280] hsr_slave_0: left promiscuous mode [ 1104.076338][ T5280] hsr_slave_1: left promiscuous mode [ 1104.086107][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.096384][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.130628][ T5280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.138101][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.258919][ T5280] veth1_macvtap: left promiscuous mode [ 1104.268512][ T5280] veth0_macvtap: left promiscuous mode [ 1104.274849][ T5280] veth1_vlan: left promiscuous mode [ 1104.280434][ T5280] veth0_vlan: left promiscuous mode [ 1104.312974][ T5280] veth1_macvtap: left promiscuous mode [ 1104.324856][ T5280] veth0_macvtap: left promiscuous mode [ 1104.332369][ T5280] veth1_vlan: left promiscuous mode [ 1104.337710][ T5280] veth0_vlan: left promiscuous mode [ 1104.349871][ T5280] veth1_macvtap: left promiscuous mode [ 1104.355466][ T5280] veth0_macvtap: left promiscuous mode [ 1104.372559][ T5280] veth1_vlan: left promiscuous mode [ 1104.413245][ T5280] veth0_vlan: left promiscuous mode [ 1104.669960][ T5101] Bluetooth: hci1: command tx timeout [ 1105.534175][ T5280] team0 (unregistering): Port device team_slave_1 removed [ 1105.588518][ T5280] team0 (unregistering): Port device team_slave_0 removed [ 1106.639798][ T5280] team0 (unregistering): Port device team_slave_1 removed [ 1106.701915][ T5280] team0 (unregistering): Port device team_slave_0 removed [ 1106.750982][ T5101] Bluetooth: hci1: command tx timeout [ 1107.763230][ T5280] team0 (unregistering): Port device team_slave_1 removed [ 1107.816778][ T5280] team0 (unregistering): Port device team_slave_0 removed [ 1108.838165][ T5101] Bluetooth: hci1: command tx timeout [ 1109.150238][T12832] chnl_net:caif_netlink_parms(): no params data found [ 1110.401413][T12894] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1110.795236][T12658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.027146][T12658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.224072][T12832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.232153][T12832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.249171][T12832] bridge_slave_0: entered allmulticast mode [ 1111.269868][T12832] bridge_slave_0: entered promiscuous mode [ 1111.287837][T12832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.295553][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.303228][T12832] bridge_slave_1: entered allmulticast mode [ 1111.330184][T12832] bridge_slave_1: entered promiscuous mode [ 1111.339287][T12666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1111.463707][T12666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1111.506726][T12666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1111.537291][T12666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1111.657478][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.664819][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.697003][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.704386][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.790308][T12832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.886594][T12832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.130430][T12832] team0: Port device team_slave_0 added [ 1112.217090][T12832] team0: Port device team_slave_1 added [ 1112.505644][T12665] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1112.570018][T12832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.586973][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.695939][T12832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.747834][T12658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1112.813334][T12665] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1112.848088][T12832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.864893][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.900277][T12832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.940595][T12665] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1113.001868][T12665] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1113.332093][T12832] hsr_slave_0: entered promiscuous mode [ 1113.366909][T12832] hsr_slave_1: entered promiscuous mode [ 1113.408395][T12832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1113.430866][T12832] Cannot create hsr debugfs directory [ 1113.556371][T12944] netlink: 'syz.0.1339': attribute type 2 has an invalid length. [ 1114.020217][T12658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.299331][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.353687][T12658] veth0_vlan: entered promiscuous mode [ 1114.405093][T12665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.422068][T12666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.452308][T12658] veth1_vlan: entered promiscuous mode [ 1114.520727][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.528027][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.735327][T12665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.788904][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.796199][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.861717][ T5280] bridge_slave_1: left allmulticast mode [ 1114.873975][ T29] audit: type=1400 audit(1720888944.884:603): avc: denied { setopt } for pid=12963 comm="syz.0.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1114.902308][ T5280] bridge_slave_1: left promiscuous mode [ 1114.911704][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.932914][ T5280] bridge_slave_0: left allmulticast mode [ 1114.941353][ T5280] bridge_slave_0: left promiscuous mode [ 1114.952455][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.067786][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1115.309794][ T5280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.322941][ T5280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.345559][ T5280] bond0 (unregistering): Released all slaves [ 1115.395244][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.402541][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.617805][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.625127][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.642827][ T5101] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1115.688838][ T5280] hsr_slave_0: left promiscuous mode [ 1115.697267][ T5101] Bluetooth: Unexpected start frame (len 12) [ 1115.703932][ T5280] hsr_slave_1: left promiscuous mode [ 1115.726960][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.743204][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.775005][ T5101] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 1116.243798][ T5280] team0 (unregistering): Port device team_slave_1 removed [ 1116.307200][ T5280] team0 (unregistering): Port device team_slave_0 removed [ 1116.816672][T12658] veth0_macvtap: entered promiscuous mode [ 1116.936283][T12666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.953802][T13003] overlayfs: failed to resolve './file1': -2 [ 1116.964568][T12658] veth1_macvtap: entered promiscuous mode [ 1117.169060][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.200672][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.219546][T12658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.270406][T12665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1117.372080][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.404457][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.419889][T12658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.434982][T12658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.462952][T12658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.477036][T12658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.485814][T12658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.756519][T12832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1117.856661][T12832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1117.913505][T12666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.941820][T12832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1117.955805][T12832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1118.166827][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.174703][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.211195][T12665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.311640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.357056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.568180][T12665] veth0_vlan: entered promiscuous mode [ 1118.692202][T12665] veth1_vlan: entered promiscuous mode [ 1118.879788][T12832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.982471][T12666] veth0_vlan: entered promiscuous mode [ 1118.991417][T12665] veth0_macvtap: entered promiscuous mode [ 1119.032599][T12832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.049449][T12665] veth1_macvtap: entered promiscuous mode [ 1119.069914][T12666] veth1_vlan: entered promiscuous mode [ 1119.114351][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.121679][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.150971][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.158288][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.233246][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.259849][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.275271][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.293114][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.305947][T12665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.360539][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.376361][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.393978][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.408701][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.429192][T12665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.459313][T12665] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.475024][T12665] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.488074][T12665] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.496828][T12665] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.610553][T12666] veth0_macvtap: entered promiscuous mode [ 1119.689515][T12666] veth1_macvtap: entered promiscuous mode [ 1119.869568][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.891988][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.924753][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.957112][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.980270][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.997323][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.010471][T12666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.080008][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.103218][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.126076][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.149934][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.179344][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.224839][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.261259][T12666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.317672][ T5280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.325092][T12666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.341855][ T5280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.353059][T12666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.364852][T12666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.374575][T12666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.500211][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.508708][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.610845][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 1120.671916][T12832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.761423][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.791325][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.953331][T11646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.979753][T11646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.133302][T12832] veth0_vlan: entered promiscuous mode [ 1122.234570][T12832] veth1_vlan: entered promiscuous mode [ 1122.373442][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.381098][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.458457][ T29] audit: type=1400 audit(1720888952.450:604): avc: denied { write } for pid=13054 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1122.803073][T12832] veth0_macvtap: entered promiscuous mode [ 1122.857588][T12832] veth1_macvtap: entered promiscuous mode [ 1123.027496][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.078495][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.122289][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.158270][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.188970][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.263679][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.293807][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.320421][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.361807][T12832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.413420][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.444778][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.460230][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.479020][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.491190][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.517737][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.543482][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.572557][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.594733][T12832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.628747][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1352'. [ 1123.677204][T12832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.721205][T12832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.761553][T12832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.791046][T12832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.420379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.450204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.544644][ T29] audit: type=1400 audit(1720888954.539:605): avc: denied { mount } for pid=13077 comm="syz.3.1354" name="/" dev="autofs" ino=53400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1124.712835][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.757902][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.912428][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 1125.303877][ T29] audit: type=1400 audit(1720888955.308:606): avc: denied { read } for pid=13091 comm="syz.4.1359" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1125.352984][ T29] audit: type=1400 audit(1720888955.338:607): avc: denied { open } for pid=13091 comm="syz.4.1359" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1125.613102][ T29] audit: type=1400 audit(1720888955.618:608): avc: denied { unmount } for pid=12665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1126.374073][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 1129.588519][ T7977] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1129.787950][ T29] audit: type=1400 audit(1720888959.786:609): avc: denied { setopt } for pid=13154 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1129.790985][T13155] block nbd4: NBD_DISCONNECT [ 1129.827178][ T7977] usb 4-1: config 0 has no interfaces? [ 1129.832788][ T7977] usb 4-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 1129.904698][ T7977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.921075][ T7977] usb 4-1: config 0 descriptor?? [ 1129.968231][T13155] block nbd4: Disconnected due to user request. [ 1129.992402][T13155] block nbd4: shutting down sockets [ 1130.522875][T13147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.562790][T13147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.863744][ T5142] usb 4-1: USB disconnect, device number 20 [ 1131.902026][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 1136.807477][T13216] netlink: 'syz.4.1390': attribute type 11 has an invalid length. [ 1136.815369][T13216] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1390'. [ 1136.833023][T13216] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1139.800276][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'. [ 1141.048869][ T29] audit: type=1400 audit(1720888971.041:610): avc: denied { ioctl } for pid=13263 comm="syz.1.1404" path="socket:[53243]" dev="sockfs" ino=53243 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1141.345281][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.394309][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.617851][ T5170] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1141.649605][T13277] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1143.079583][T13291] netlink: 'syz.1.1406': attribute type 11 has an invalid length. [ 1143.097807][T13291] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1406'. [ 1143.509865][T13291] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1147.512712][ T5170] usb 3-1: device descriptor read/64, error -110 [ 1147.801653][ T5170] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1148.932474][ T5170] usb 3-1: device descriptor read/64, error -32 [ 1149.102946][ T5170] usb usb3-port1: attempt power cycle [ 1149.532355][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 1150.210614][T13329] input: syz0 as /devices/virtual/input/input14 [ 1150.584401][ T29] audit: type=1400 audit(1720888980.566:611): avc: denied { setattr } for pid=13328 comm="syz.0.1417" path="/dev/uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1151.143872][T13341] netlink: 'syz.1.1418': attribute type 11 has an invalid length. [ 1151.151842][T13341] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1418'. [ 1151.165070][T13341] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1157.051407][ T29] audit: type=1400 audit(1720888987.043:612): avc: denied { mounton } for pid=13354 comm="syz.2.1422" path="/proc/34/task" dev="proc" ino=54054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1157.229128][ T29] audit: type=1400 audit(1720888987.222:613): avc: denied { map } for pid=13359 comm="syz.3.1423" path="socket:[54419]" dev="sockfs" ino=54419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1157.307606][ T29] audit: type=1400 audit(1720888987.252:614): avc: denied { create } for pid=13359 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1157.386161][ T29] audit: type=1400 audit(1720888987.282:615): avc: denied { write } for pid=13359 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1157.443649][ T29] audit: type=1400 audit(1720888987.322:616): avc: denied { ioctl } for pid=13359 comm="syz.3.1423" path="socket:[54426]" dev="sockfs" ino=54426 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1157.508435][ T29] audit: type=1400 audit(1720888987.342:617): avc: denied { read } for pid=13359 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1158.338582][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 1159.406812][T13389] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 1159.414802][T13389] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.1432'. [ 1159.453470][T13388] fuse: Unknown parameter 'fj' [ 1159.939303][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 1159.948778][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 1161.607896][ T29] audit: type=1326 audit(1720888991.590:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13405 comm="syz.1.1437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f064dd75bd9 code=0x0 [ 1161.820958][T13415] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1440'. [ 1161.853979][ T9348] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11 [ 1162.245012][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 1163.819716][ T9348] Bluetooth: hci1: command 0x0405 tx timeout [ 1165.045356][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 1165.054900][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 1167.929290][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 1175.603990][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 1175.613444][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 1185.643961][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.690123][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.429861][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1188.445063][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1188.458709][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1189.338698][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1189.347593][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1189.358587][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1189.641014][ T3865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.731897][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 1189.903766][ T3865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.089558][ T3865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.338511][ T3865] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.607918][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 1190.985638][T13537] chnl_net:caif_netlink_parms(): no params data found [ 1191.436500][ T5101] Bluetooth: hci2: command tx timeout [ 1193.625439][ T5101] Bluetooth: hci2: command tx timeout [ 1194.715812][ T5101] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1194.734759][ T5101] Bluetooth: hci0: Injecting HCI hardware error event [ 1194.746112][ T5101] Bluetooth: hci0: hardware error 0x00 [ 1194.867343][ T3865] bridge_slave_1: left allmulticast mode [ 1194.902149][ T3865] bridge_slave_1: left promiscuous mode [ 1194.943146][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.025557][ T3865] bridge_slave_0: left allmulticast mode [ 1195.084946][ T3865] bridge_slave_0: left promiscuous mode [ 1195.124187][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.365430][ T9348] Bluetooth: hci2: command tx timeout [ 1196.875774][ T5101] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1197.498729][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 1197.668459][ T29] audit: type=1400 audit(1720889027.642:619): avc: denied { setopt } for pid=13616 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1197.746518][ T29] audit: type=1400 audit(1720889027.692:620): avc: denied { setopt } for pid=13618 comm="syz.1.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1198.409005][ T5101] Bluetooth: hci2: command tx timeout [ 1200.598992][ T3865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.661554][ T3865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.728186][ T3865] bond0 (unregistering): Released all slaves [ 1200.874759][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1485'. [ 1201.541738][T13537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.558782][T13537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.566186][T13537] bridge_slave_0: entered allmulticast mode [ 1202.584254][T13537] bridge_slave_0: entered promiscuous mode [ 1202.807648][ T29] audit: type=1400 audit(1720889032.760:621): avc: denied { bind } for pid=13653 comm="syz.1.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1203.041224][T13537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.116748][T13537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.131970][T13537] bridge_slave_1: entered allmulticast mode [ 1203.142191][T13537] bridge_slave_1: entered promiscuous mode [ 1203.426005][T13537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.827008][T13537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.162222][ T29] audit: type=1400 audit(1720889042.115:622): avc: denied { mounton } for pid=13693 comm="syz.2.1507" path="/26/file0" dev="configfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1212.520800][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 1212.656773][T13537] team0: Port device team_slave_0 added [ 1212.719061][ T9352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1212.731002][ T9352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1212.742113][ T9352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1212.755608][ T9352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1212.764363][ T9352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1212.776540][ T9352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1213.013752][ T3865] hsr_slave_0: left promiscuous mode [ 1213.089695][ T3865] hsr_slave_1: left promiscuous mode [ 1213.192275][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.242144][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.295823][ T5101] Bluetooth: hci4: command tx timeout [ 1213.295947][ T9352] Bluetooth: hci5: command 0x0406 tx timeout [ 1213.352676][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.352730][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.654618][ T3865] veth1_macvtap: left promiscuous mode [ 1213.654743][ T3865] veth0_macvtap: left promiscuous mode [ 1213.655038][ T3865] veth1_vlan: left promiscuous mode [ 1213.655248][ T3865] veth0_vlan: left promiscuous mode [ 1214.814844][ T9348] Bluetooth: hci3: command tx timeout [ 1215.288261][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 1215.363395][ T3865] team0 (unregistering): Port device team_slave_0 removed [ 1217.076637][T13737] netlink: 'syz.3.1515': attribute type 11 has an invalid length. [ 1217.084658][T13737] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1515'. [ 1217.508353][T13737] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1218.956264][ T9348] Bluetooth: hci3: command tx timeout [ 1219.499610][T13537] team0: Port device team_slave_1 added [ 1219.821535][T13537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.832413][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.927250][T13537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.987095][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 1220.032887][T13537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.073045][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.118766][T13537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.792456][T13537] hsr_slave_0: entered promiscuous mode [ 1220.830873][T13537] hsr_slave_1: entered promiscuous mode [ 1220.968366][ T9352] Bluetooth: hci3: command tx timeout [ 1221.519961][ T29] audit: type=1400 audit(1720889051.480:623): avc: denied { append } for pid=13768 comm="syz.1.1522" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1222.024848][ T3865] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.376336][ T3865] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.659752][ T3865] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.815558][ T3865] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.048975][ T9352] Bluetooth: hci3: command tx timeout [ 1223.375261][T13704] chnl_net:caif_netlink_parms(): no params data found [ 1224.307725][ T3865] bridge_slave_1: left allmulticast mode [ 1224.313774][ T3865] bridge_slave_1: left promiscuous mode [ 1224.322741][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.373534][ T3865] bridge_slave_0: left allmulticast mode [ 1224.379250][ T3865] bridge_slave_0: left promiscuous mode [ 1224.390242][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.450660][T13838] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1225.131417][ T3865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.148668][ T3865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.163593][ T3865] bond0 (unregistering): Released all slaves [ 1225.235369][T13704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.259037][T13704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.271488][T13704] bridge_slave_0: entered allmulticast mode [ 1225.282956][T13704] bridge_slave_0: entered promiscuous mode [ 1225.347932][T13704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.390049][T13704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.402612][T13704] bridge_slave_1: entered allmulticast mode [ 1225.426184][T13704] bridge_slave_1: entered promiscuous mode [ 1225.927865][T13859] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1537'. [ 1226.770586][ T29] audit: type=1400 audit(1720889056.718:624): avc: denied { view } for pid=13853 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1226.800358][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 1226.891029][ T9348] Bluetooth: hci1: command 0x0406 tx timeout [ 1227.020620][T13704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.101367][T13704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.187090][T13537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1227.238155][T13537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1227.513020][ T3865] hsr_slave_0: left promiscuous mode [ 1227.519143][ T3865] hsr_slave_1: left promiscuous mode [ 1227.527622][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.573735][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.626096][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.641263][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.654021][ T3865] veth1_macvtap: left promiscuous mode [ 1228.659664][ T3865] veth0_macvtap: left promiscuous mode [ 1228.671366][ T3865] veth1_vlan: left promiscuous mode [ 1228.677164][ T3865] veth0_vlan: left promiscuous mode [ 1229.561339][ T29] audit: type=1400 audit(1720889059.496:625): avc: denied { mount } for pid=13878 comm="syz.1.1543" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1229.863241][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 1229.919737][ T3865] team0 (unregistering): Port device team_slave_0 removed [ 1230.410753][ T29] audit: type=1400 audit(1720889060.356:626): avc: denied { unmount } for pid=12658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1230.817616][T13537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1230.841454][T13537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1230.932471][T13889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.415948][T13704] team0: Port device team_slave_0 added [ 1231.477339][T13704] team0: Port device team_slave_1 added [ 1231.800719][T13900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.918125][ T29] audit: type=1400 audit(1720889061.865:627): avc: denied { remount } for pid=13892 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1231.952017][T13904] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1231.986381][T13704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.011092][T13704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.069318][T13704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.127714][T13704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.145254][T13704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.200163][T13704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.448171][T13704] hsr_slave_0: entered promiscuous mode [ 1232.467914][T13704] hsr_slave_1: entered promiscuous mode [ 1232.484797][T13704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1232.545186][T13704] Cannot create hsr debugfs directory [ 1233.139275][T13537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.633050][T13938] input: syz1 as /devices/virtual/input/input15 [ 1233.897135][T13537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.970168][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.977435][ T9621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.253680][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.261038][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.432662][T13949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1236.043526][T13704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1236.191237][ T29] audit: type=1400 audit(1720889066.113:628): avc: denied { mount } for pid=13964 comm="syz.3.1559" name="/" dev="ramfs" ino=57886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1236.459588][T13704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1236.539542][T13704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1236.851645][ T29] audit: type=1400 audit(1720889066.783:629): avc: denied { unmount } for pid=12665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1236.918574][T13704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1237.109575][T13537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.578994][T13537] veth0_vlan: entered promiscuous mode [ 1237.810904][T13537] veth1_vlan: entered promiscuous mode [ 1238.057174][T13704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.238652][T13704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.279357][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.286684][ T9621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.355969][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.363287][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.515261][ T29] audit: type=1400 audit(1720889068.462:630): avc: denied { bind } for pid=13999 comm="syz.1.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1239.303381][T14014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.983101][ T9352] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1246.994926][ T9352] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1247.017974][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.158288][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.322568][T13704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.917367][ T9352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1250.933345][ T9352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1250.946788][ T9352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1250.982971][ T9352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1251.001123][ T9352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1251.009660][ T9352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1251.086947][T14069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14069 comm=syz.2.1575 [ 1251.229744][T14074] 9pnet: Could not find request transport: xen [ 1251.597975][T14087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.426631][ T5280] bridge_slave_1: left allmulticast mode [ 1252.432466][ T5280] bridge_slave_1: left promiscuous mode [ 1252.663562][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.858257][ T5280] bridge_slave_0: left allmulticast mode [ 1253.234230][ T9352] Bluetooth: hci2: command tx timeout [ 1253.417730][ T5280] bridge_slave_0: left promiscuous mode [ 1253.423739][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.891371][T14115] FAULT_INJECTION: forcing a failure. [ 1253.891371][T14115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.982750][T14115] CPU: 0 PID: 14115 Comm: syz.3.1582 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 1253.992966][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1254.003030][T14115] Call Trace: [ 1254.006321][T14115] [ 1254.009259][T14115] dump_stack_lvl+0x16c/0x1f0 [ 1254.013964][T14115] should_fail_ex+0x497/0x5b0 [ 1254.018662][T14115] _copy_from_user+0x30/0xf0 [ 1254.023266][T14115] copy_msghdr_from_user+0x99/0x160 [ 1254.028484][T14115] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1254.034316][T14115] ? find_held_lock+0x2d/0x110 [ 1254.039102][T14115] ___sys_recvmsg+0xdc/0x1a0 [ 1254.043710][T14115] ? __pfx____sys_recvmsg+0x10/0x10 [ 1254.048930][T14115] ? __fget_light+0x173/0x210 [ 1254.053622][T14115] do_recvmmsg+0x2ba/0x750 [ 1254.058066][T14115] ? __pfx_do_recvmmsg+0x10/0x10 [ 1254.063039][T14115] ? vfs_write+0x14d/0x1140 [ 1254.067573][T14115] ? __mutex_unlock_slowpath+0x164/0x650 [ 1254.073237][T14115] __x64_sys_recvmmsg+0x239/0x290 [ 1254.078288][T14115] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1254.083860][T14115] do_syscall_64+0xcd/0x250 [ 1254.088386][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.094311][T14115] RIP: 0033:0x7f6d8c575bd9 [ 1254.098732][T14115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1254.118365][T14115] RSP: 002b:00007f6d8d389048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1254.126795][T14115] RAX: ffffffffffffffda RBX: 00007f6d8c704110 RCX: 00007f6d8c575bd9 [ 1254.134782][T14115] RDX: 0000000000000300 RSI: 0000000020001640 RDI: 0000000000000008 [ 1254.142784][T14115] RBP: 00007f6d8d3890a0 R08: 0000000000000000 R09: 0000000000000000 [ 1254.150768][T14115] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.158769][T14115] R13: 000000000000006e R14: 00007f6d8c704110 R15: 00007ffc796bfae8 [ 1254.166761][T14115] [ 1255.315142][ T9352] Bluetooth: hci2: command tx timeout [ 1255.832057][ T5280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.867095][ T5280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.913115][ T5280] bond0 (unregistering): Released all slaves [ 1256.344764][ T5280] hsr_slave_0: left promiscuous mode [ 1256.422625][ T5280] hsr_slave_1: left promiscuous mode [ 1256.467450][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.569576][ T5280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.708739][ T29] audit: type=1400 audit(1720889086.653:631): avc: denied { create } for pid=14138 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1256.734331][ T5280] veth1_vlan: left promiscuous mode [ 1256.775897][ T5280] veth0_vlan: left promiscuous mode [ 1256.802188][ T29] audit: type=1400 audit(1720889086.663:632): avc: denied { ioctl } for pid=14138 comm="syz.2.1588" path="socket:[58368]" dev="sockfs" ino=58368 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1257.177907][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 1257.466029][ T9352] Bluetooth: hci2: command tx timeout [ 1257.616689][T14146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1258.534179][ T5280] team0 (unregistering): Port device team_slave_1 removed [ 1258.620027][ T5280] team0 (unregistering): Port device team_slave_0 removed [ 1259.471703][T14068] chnl_net:caif_netlink_parms(): no params data found [ 1259.511827][T13704] veth0_vlan: entered promiscuous mode [ 1259.544748][T13704] veth1_vlan: entered promiscuous mode [ 1259.550678][ T9348] Bluetooth: hci2: command tx timeout [ 1260.597172][T13704] veth0_macvtap: entered promiscuous mode [ 1260.789667][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 1260.844825][T13704] veth1_macvtap: entered promiscuous mode [ 1260.911492][T14068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.956120][T14068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.978082][T14068] bridge_slave_0: entered allmulticast mode [ 1260.986496][T14068] bridge_slave_0: entered promiscuous mode [ 1261.005150][T14068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.034877][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.049732][T14068] bridge_slave_1: entered allmulticast mode [ 1261.072369][T14068] bridge_slave_1: entered promiscuous mode [ 1261.176910][T13704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.212408][T13704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.269931][T13704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.289328][T13704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.299463][T13704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.314320][T13704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.326872][T13704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.340388][T13704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.351125][T13704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.381593][T13704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.437609][T14192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.565602][T13704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.756413][T13704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.896698][T13704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.103677][T13704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.335389][T13704] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.385964][T13704] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.430906][T13704] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.475783][T13704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.532563][T14068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.652478][T14196] sp0: Synchronizing with TNC [ 1262.729295][T14068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.745900][T14195] [U] è [ 1263.108123][T14068] team0: Port device team_slave_0 added [ 1263.136316][T14068] team0: Port device team_slave_1 added [ 1263.208645][T14068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.278863][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.305721][T14068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.368243][T14068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.385186][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.412541][T14068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.986423][T14068] hsr_slave_0: entered promiscuous mode [ 1264.011499][T14068] hsr_slave_1: entered promiscuous mode [ 1264.052423][T14216] sctp: [Deprecated]: syz.2.1605 (pid 14216) Use of int in max_burst socket option. [ 1264.052423][T14216] Use struct sctp_assoc_value instead [ 1266.403725][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 1267.082708][ T29] audit: type=1326 audit(1720889096.858:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.351052][ T29] audit: type=1326 audit(1720889096.858:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.449175][ T29] audit: type=1326 audit(1720889096.868:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.495961][ T29] audit: type=1326 audit(1720889096.868:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.555953][ T29] audit: type=1326 audit(1720889096.868:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.642825][ T29] audit: type=1326 audit(1720889096.868:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.676197][ T29] audit: type=1326 audit(1720889096.868:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.701855][ T29] audit: type=1326 audit(1720889096.868:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.726373][ T29] audit: type=1326 audit(1720889096.878:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1267.764053][ T29] audit: type=1326 audit(1720889096.878:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956575bd9 code=0x7ffc0000 [ 1268.077744][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.088795][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.163589][T14250] veth1: mtu less than device minimum [ 1268.338368][T14250] pimreg: entered allmulticast mode [ 1268.739733][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.776592][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.133197][T14272] xt_NFQUEUE: number of total queues is 0 [ 1270.420486][T14292] netlink: 'syz.4.1504': attribute type 11 has an invalid length. [ 1270.555530][T14292] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1504'. [ 1270.641010][T14296] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1271.397248][T14307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.199506][T14068] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1272.252537][T14068] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1272.329835][T14068] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1272.404498][T14068] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1272.663726][T13630] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1272.887772][T13630] usb 4-1: config 0 has no interfaces? [ 1272.920437][T13630] usb 4-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 1272.956200][T14068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.972861][T13630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.024463][T13630] usb 4-1: config 0 descriptor?? [ 1273.116278][T14068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.241451][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.248849][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.297372][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.304651][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.738031][ T8] usb 4-1: USB disconnect, device number 21 [ 1274.322330][T14347] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1274.330092][T14347] VFS: Can't find a romfs filesystem on dev nullb0. [ 1274.330092][T14347] [ 1274.871037][T14068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.023861][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1627'. [ 1275.339919][T14068] veth0_vlan: entered promiscuous mode [ 1275.424800][T14364] FAULT_INJECTION: forcing a failure. [ 1275.424800][T14364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.465963][T14068] veth1_vlan: entered promiscuous mode [ 1275.493531][T14364] CPU: 1 PID: 14364 Comm: syz.1.1631 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 1275.503819][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1275.513899][T14364] Call Trace: [ 1275.517204][T14364] [ 1275.520155][T14364] dump_stack_lvl+0x16c/0x1f0 [ 1275.524876][T14364] should_fail_ex+0x497/0x5b0 [ 1275.529595][T14364] _copy_to_user+0x30/0xc0 [ 1275.534169][T14364] simple_read_from_buffer+0xd0/0x160 [ 1275.539581][T14364] proc_fail_nth_read+0x1b0/0x290 [ 1275.544654][T14364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.550252][T14364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.555865][T14364] vfs_read+0x1d4/0xbd0 [ 1275.560078][T14364] ? __fdget_pos+0xeb/0x180 [ 1275.564632][T14364] ? __pfx_vfs_read+0x10/0x10 [ 1275.569359][T14364] ? __pfx___mutex_lock+0x10/0x10 [ 1275.574435][T14364] ? __fget_files+0x256/0x400 [ 1275.579166][T14364] ksys_read+0x12f/0x260 [ 1275.583456][T14364] ? __pfx_ksys_read+0x10/0x10 [ 1275.588272][T14364] do_syscall_64+0xcd/0x250 [ 1275.592824][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.598769][T14364] RIP: 0033:0x7f064dd746bc [ 1275.603208][T14364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1275.622841][T14364] RSP: 002b:00007f064ea8a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1275.631270][T14364] RAX: ffffffffffffffda RBX: 00007f064df03f60 RCX: 00007f064dd746bc [ 1275.639276][T14364] RDX: 000000000000000f RSI: 00007f064ea8a0b0 RDI: 0000000000000004 [ 1275.647272][T14364] RBP: 00007f064ea8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.655275][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.663273][T14364] R13: 000000000000000b R14: 00007f064df03f60 R15: 00007fff771657f8 [ 1275.671262][T14364] [ 1275.723236][T14068] veth0_macvtap: entered promiscuous mode [ 1275.762450][T14068] veth1_macvtap: entered promiscuous mode [ 1275.867108][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.905382][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.943923][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.963783][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.995199][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.016749][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.027689][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.581746][T14383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.658644][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.913352][T14068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.050982][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.079852][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.358017][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.369281][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.379663][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.419947][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.939259][T14068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.331545][T14068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.416798][T14399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.145933][T14068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.260481][T14402] netlink: 'syz.4.1635': attribute type 11 has an invalid length. [ 1280.267375][ T9621] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1280.322128][T14068] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.379225][T14402] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1635'. [ 1280.390396][T14068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.410343][T14068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.428713][T14068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.445976][T14406] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1280.461954][T14409] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1280.469000][T14409] /dev/nullb0: Can't open blockdev [ 1280.476366][ T9621] usb 4-1: config 0 has no interfaces? [ 1280.494860][ T9621] usb 4-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 1280.512787][ T9621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.544331][ T9621] usb 4-1: config 0 descriptor?? [ 1280.987219][T14416] tmpfs: Bad value for 'mpol' [ 1281.029968][T11646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.056131][T11646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.114390][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1281.114413][ T29] audit: type=1400 audit(1720889111.021:667): avc: denied { write } for pid=14413 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1281.256369][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.288115][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.445944][ T9675] usb 4-1: USB disconnect, device number 22 [ 1281.662100][T14432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1465'. [ 1281.977470][ T5280] Bluetooth: (null): Invalid header checksum [ 1281.999934][T14437] ptrace attach of "./syz-executor exec"[12832] was attempted by "./syz-executor exec"[14437] [ 1282.018657][ T5280] Bluetooth: (null): Invalid header checksum [ 1282.197483][ T5280] Bluetooth: (null): Invalid header checksum [ 1282.211668][ T29] audit: type=1400 audit(1720889112.080:668): avc: denied { name_bind } for pid=14436 comm="syz.2.1643" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1282.283284][ T5280] Bluetooth: (null): Invalid header checksum [ 1282.344176][ T5280] Bluetooth: (null): Invalid header checksum [ 1282.798965][ T9621] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1283.187553][ T9621] usb 2-1: device descriptor read/64, error -71 [ 1283.539047][ T9621] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1283.819416][ T9621] usb 2-1: device descriptor read/64, error -71 [ 1283.949964][ T9621] usb usb2-port1: attempt power cycle [ 1284.174509][T14466] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1284.183108][T14466] VFS: Can't find a romfs filesystem on dev nullb0. [ 1284.183108][T14466] [ 1284.389595][ T9621] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1284.451937][ T9621] usb 2-1: device descriptor read/8, error -71 [ 1284.697525][T14472] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1652'. [ 1284.789673][ T9621] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1284.855462][ T9621] usb 2-1: device descriptor read/8, error -71 [ 1285.100225][ T9621] usb usb2-port1: unable to enumerate USB device [ 1286.406666][ T29] audit: type=1400 audit(1720889116.328:669): avc: denied { watch } for pid=14496 comm="syz.2.1661" path="/76/file1" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1286.581198][T14503] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1663'. [ 1288.301234][T14519] netlink: 'syz.1.1668': attribute type 4 has an invalid length. [ 1290.137321][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1290.180736][ T9348] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1290.297800][T14552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1676'. [ 1291.650219][T14568] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1681'. [ 1291.683286][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 1291.766025][T14568] ebt_among: dst integrity fail: 200 [ 1291.773206][ T29] audit: type=1400 audit(1720889121.675:670): avc: denied { read } for pid=14567 comm="syz.1.1681" dev="sockfs" ino=60930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1291.900977][ T29] audit: type=1400 audit(1720889121.815:671): avc: denied { read } for pid=14570 comm="syz.2.1682" dev="sockfs" ino=61452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1397.325739][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1397.332762][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14564/1:b..l [ 1397.341473][ C1] rcu: (detected by 1, t=10502 jiffies, g=111705, q=483 ncpus=2) [ 1397.349303][ C1] task:syz.4.1680 state:R running task stack:25920 pid:14564 tgid:14563 ppid:13704 flags:0x00004002 [ 1397.362551][ C1] Call Trace: [ 1397.365869][ C1] [ 1397.368830][ C1] __schedule+0xf15/0x5d00 [ 1397.373294][ C1] ? __pfx___schedule+0x10/0x10 [ 1397.378182][ C1] ? hlock_class+0x4e/0x130 [ 1397.382720][ C1] ? mark_held_locks+0x9f/0xe0 [ 1397.387531][ C1] preempt_schedule_irq+0x51/0x90 [ 1397.392597][ C1] irqentry_exit+0x36/0x90 [ 1397.397059][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1397.403093][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x28/0x40 [ 1397.409380][ C1] Code: 90 90 f3 0f 1e fa 8b 05 b2 ad fc 04 85 c0 74 20 8b 05 94 df fc 04 85 c0 74 16 65 48 8b 05 f0 fe 1b 75 8b 80 dc 0a 00 00 85 c0 <0f> 94 c0 0f b6 c0 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f [ 1397.429020][ C1] RSP: 0018:ffffc900032e7560 EFLAGS: 00000246 [ 1397.435119][ C1] RAX: 0000000000000000 RBX: 0000000020367000 RCX: 00000000f014e05e [ 1397.443112][ C1] RDX: 0000000000000001 RSI: ffffffff8b2cb200 RDI: ffffffff8b9039c0 [ 1397.451115][ C1] RBP: 0000000020367000 R08: 0000000000000000 R09: fffffbfff284d858 [ 1397.459110][ C1] R10: ffffffff9426c2c7 R11: 0000000000000001 R12: ffffc900032e75d0 [ 1397.467118][ C1] R13: ffff888062865808 R14: ffffc900032e7748 R15: ffff88806961a9b0 [ 1397.475125][ C1] __pte_offset_map+0x4d/0x540 [ 1397.479933][ C1] ? __pte_offset_map+0x42/0x540 [ 1397.484906][ C1] pte_offset_map_nolock+0x84/0x1c0 [ 1397.490154][ C1] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 1397.496016][ C1] ? __pfx_lock_release+0x10/0x10 [ 1397.501109][ C1] __handle_mm_fault+0xbbe/0x5410 [ 1397.506187][ C1] ? __pfx_mt_find+0x10/0x10 [ 1397.510833][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1397.516351][ C1] ? find_vma+0xc0/0x140 [ 1397.520643][ C1] ? __pfx_find_vma+0x10/0x10 [ 1397.525353][ C1] handle_mm_fault+0x476/0xa00 [ 1397.530168][ C1] ? lock_mm_and_find_vma+0xa6/0x6a0 [ 1397.535503][ C1] do_user_addr_fault+0x2e5/0xe50 [ 1397.540574][ C1] exc_page_fault+0x5c/0xc0 [ 1397.545116][ C1] asm_exc_page_fault+0x26/0x30 [ 1397.550021][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1397.555898][ C1] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1397.575571][ C1] RSP: 0018:ffffc900032e7958 EFLAGS: 00050206 [ 1397.581677][ C1] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 1397.589685][ C1] RDX: 0000000000000000 RSI: ffff888012e75180 RDI: 0000000020367000 [ 1397.597682][ C1] RBP: 0000000000001000 R08: 0000000000000000 R09: ffffed10025cebff [ 1397.605691][ C1] R10: ffff888012e75fff R11: 0000000000000000 R12: 0000000000366b80 [ 1397.613695][ C1] R13: ffffc900032e7d50 R14: ffff888012e75000 R15: 0000000020366e80 [ 1397.621705][ C1] _copy_to_iter+0x4d2/0x1140 [ 1397.626432][ C1] ? __pfx__copy_to_iter+0x10/0x10 [ 1397.631597][ C1] copy_page_to_iter+0xf1/0x180 [ 1397.636494][ C1] process_vm_rw_core.constprop.0+0x5c9/0xa10 [ 1397.642630][ C1] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1397.649276][ C1] process_vm_rw+0x301/0x360 [ 1397.653924][ C1] ? __pfx_process_vm_rw+0x10/0x10 [ 1397.659102][ C1] ? __pfx_file_has_perm+0x10/0x10 [ 1397.664262][ C1] ? xfd_validate_state+0x5d/0x180 [ 1397.669423][ C1] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1397.675107][ C1] ? do_syscall_64+0x91/0x250 [ 1397.679857][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.685107][ C1] do_syscall_64+0xcd/0x250 [ 1397.689674][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.695629][ C1] RIP: 0033:0x7fc3fe375bd9 [ 1397.700064][ C1] RSP: 002b:00007fc3ff0a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1397.708518][ C1] RAX: ffffffffffffffda RBX: 00007fc3fe503f60 RCX: 00007fc3fe375bd9 [ 1397.716535][ C1] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000033 [ 1397.724544][ C1] RBP: 00007fc3fe3e4e60 R08: 0000000000000286 R09: 0000000000000000 [ 1397.732533][ C1] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 1397.740501][ C1] R13: 000000000000000b R14: 00007fc3fe503f60 R15: 00007ffe85f17c68 [ 1397.748486][ C1] [ 1397.751522][ C1] rcu: rcu_preempt kthread starved for 10510 jiffies! g111705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1397.762836][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1397.772836][ C1] rcu: RCU grace-period kthread stack dump: [ 1397.778747][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1397.790528][ C1] Call Trace: [ 1397.793831][ C1] [ 1397.796794][ C1] __schedule+0xf15/0x5d00 [ 1397.801263][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1397.806534][ C1] ? __pfx___schedule+0x10/0x10 [ 1397.811442][ C1] ? schedule+0x298/0x350 [ 1397.815807][ C1] ? __pfx_lock_release+0x10/0x10 [ 1397.820909][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1397.825925][ C1] ? lock_acquire+0x1b1/0x560 [ 1397.827239][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.830645][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1397.842407][ C1] schedule+0xe7/0x350 [ 1397.846548][ C1] schedule_timeout+0x136/0x2a0 [ 1397.846722][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.851422][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1397.863058][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1397.868386][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1397.874198][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1397.879670][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1397.884440][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1397.889748][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1397.894967][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1397.900778][ C1] rcu_gp_kthread+0x271/0x380 [ 1397.905467][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1397.910672][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.915879][ C1] ? __kthread_parkme+0x148/0x220 [ 1397.920935][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1397.926142][ C1] kthread+0x2c1/0x3a0 [ 1397.930223][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1397.935439][ C1] ? __pfx_kthread+0x10/0x10 [ 1397.940030][ C1] ret_from_fork+0x45/0x80 [ 1397.944453][ C1] ? __pfx_kthread+0x10/0x10 [ 1397.949045][ C1] ret_from_fork_asm+0x1a/0x30 [ 1397.953823][ C1] [ 1397.956842][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1397.963179][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 1397.972891][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1397.982938][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1397.988221][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 c8 d4 1b 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 78 72 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1398.007830][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 1398.013893][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae7e759 [ 1398.021862][ C1] RDX: 0000000000000001 RSI: ffff888019a83800 RDI: ffff888019a83864 [ 1398.029828][ C1] RBP: ffff888019a83864 R08: 0000000000000001 R09: ffffed1017266fdd [ 1398.037795][ C1] R10: ffff8880b9337eeb R11: 0000000000000000 R12: ffff88801bb61000 [ 1398.045761][ C1] R13: ffffffff8e745940 R14: 0000000000000001 R15: 0000000000000000 [ 1398.053729][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1398.062659][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1398.069239][ C1] CR2: 0000000000000008 CR3: 000000002c0fe000 CR4: 00000000003506f0 [ 1398.077206][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1398.085171][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1398.093140][ C1] Call Trace: [ 1398.096421][ C1] [ 1398.099266][ C1] ? show_regs+0x8c/0xa0 [ 1398.103535][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1398.109898][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1398.115109][ C1] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 1398.120581][ C1] ? __pfx_lock_release+0x10/0x10 [ 1398.125630][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1398.131275][ C1] ? __asan_memcpy+0x3c/0x60 [ 1398.135910][ C1] ? update_process_times+0x175/0x220 [ 1398.141305][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1398.147029][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1398.152513][ C1] ? update_wall_time+0x1c/0x40 [ 1398.157375][ C1] ? tick_nohz_handler+0x376/0x530 [ 1398.162493][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1398.167952][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 1398.173353][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1398.179105][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 1398.185187][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 1398.190313][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1398.196484][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 1398.202303][ C1] [ 1398.205242][ C1] [ 1398.208183][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1398.214344][ C1] ? ct_kernel_exit+0x139/0x190 [ 1398.219223][ C1] ? acpi_safe_halt+0x1a/0x20 [ 1398.223906][ C1] acpi_idle_enter+0xc5/0x160 [ 1398.228584][ C1] cpuidle_enter_state+0x85/0x500 [ 1398.233615][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1398.239427][ C1] cpuidle_enter+0x4e/0xa0 [ 1398.243843][ C1] do_idle+0x313/0x3f0 [ 1398.247930][ C1] ? __pfx_do_idle+0x10/0x10 [ 1398.252521][ C1] cpu_startup_entry+0x4f/0x60 [ 1398.257282][ C1] start_secondary+0x220/0x2b0 [ 1398.262052][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1398.267353][ C1] common_startup_64+0x13e/0x148 [ 1398.272291][ C1]