last executing test programs: 14.221703477s ago: executing program 2 (id=727): syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) epoll_create1(0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) syz_io_uring_setup(0x3cb5, &(0x7f00000001c0)={0x0, 0x4cef, 0x2000, 0x1, 0x2ea}, 0x0, &(0x7f0000000140)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) 11.321837389s ago: executing program 2 (id=739): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20002) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20000) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000003e00000001000000000000001684f936f902"], 0x18}, 0x4008000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x5, 0x1800, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r5 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000d40)="01", 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sysfs$3(0x3) pipe2$watch_queue(0x0, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "04f10000efdb00", "a78560d99f00", 0x800000}) 11.126758017s ago: executing program 4 (id=740): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) socket$inet6(0xa, 0x3, 0x101) writev(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) 10.023163778s ago: executing program 0 (id=741): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$WG_CMD_GET_DEVICE(r3, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff}) 9.776313894s ago: executing program 4 (id=743): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) socket$inet6(0xa, 0x3, 0x101) writev(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdir(0x0, 0x8) 9.48865782s ago: executing program 0 (id=744): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x306, @random="40407e20b0dd"}, 0xa8, {0x2, 0x4e20, @private=0xa010102}, 'bridge_slave_1\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020640d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.533023178s ago: executing program 0 (id=746): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.135126851s ago: executing program 1 (id=747): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet6(0xa, 0x3, 0x101) writev(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) 7.991149784s ago: executing program 0 (id=748): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x40001, &(0x7f0000000180)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCGETA(r4, 0x8924, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 7.652582557s ago: executing program 4 (id=749): mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xdf}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="130000001800010025bd7000000000081d"], 0x154}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0xfffffffffffffed8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x5c}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) chdir(&(0x7f0000000100)='./file0\x00') 7.507013199s ago: executing program 2 (id=750): socket$netlink(0x10, 0x3, 0x4) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$video4linux(0x0, 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = dup(0xffffffffffffffff) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 7.24798478s ago: executing program 1 (id=751): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20002) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20000) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, 0x0, 0x4008000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x5, 0x1800, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r5 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000d40)="01", 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sysfs$3(0x3) pipe2$watch_queue(&(0x7f0000000200), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "04f10000efdb00", "a78560d99f00", 0x800000}) 6.654627254s ago: executing program 2 (id=752): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350006000000fbab694ccf9d2b930368bae0c190"], 0x30}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 5.559711399s ago: executing program 2 (id=753): mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xdf}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x80) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="130000001800010025bd7000000000081d"], 0x154}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0xfffffffffffffed8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x5c}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) chdir(&(0x7f0000000100)='./file0\x00') 5.518778954s ago: executing program 3 (id=754): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$WG_CMD_GET_DEVICE(r3, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff}) 5.366887103s ago: executing program 1 (id=755): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350006000000fbab694ccf9d2b930368bae0c190"], 0x30}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 4.365657724s ago: executing program 1 (id=756): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) 4.33758324s ago: executing program 0 (id=757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 4.264315997s ago: executing program 3 (id=758): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.821192808s ago: executing program 1 (id=759): syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004503007800000000002f907800000000ffffffff000088000064907802000000030000000400000044c108fc5ce23aa1fa1930cef821fa9ef26d78b501b40000000000000000ff001261b6b63b29d2396379bcc0226ed355261e4842183ff3929a0d1927f2044ca14ce436003e70a59c0d6ec961259b5f5f087294be2de7ad39fb33575ea464d525e10f8c62609386c1ace92e5bd1c8be908cf3298ac9a2274c14471475182923225d8fc520dac24a83eb0916e68e96ab4d8f523a9f6990472ce522faf80a501612b3b9a4b347c631dd325849a4ee068e0001ba41c4f002ccc92619a9b204ffcba29f49c0130a2b7a32317e5fb8ade2710da70af66c511c9596bc0dc48a283c9e9ba14f88d845661f136dfd48f32d8a04691a16dd5a32a5bd558daf2335c1858b57cee4f199f68bda5e4a0f9d4d858d34948120b1400f88ae8d68e1f815abd4c4d469f720e584ff69a226cbcc6236b909fe9a4ce743ebbe72096b420f312df21f5d0548bc73394afa79f57b15bc05ef26ff3490479486308646a687a65e9529405e1cfaa3c7e23e825a877723100e652a3fedb76af2cf82984a8abd0073ef5bb4cef597ccfd22657964b8a1acdd588bb63960ab32bedd414c30accc91d06051ae3c041811cd048db1636a2918dcba2dd733388fec41de5e1de78daf39"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x40001, &(0x7f0000000180)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCGETA(r4, 0x8924, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 3.772171461s ago: executing program 3 (id=760): mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="130000001800010025bd7000000000081d"], 0x154}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0xfffffffffffffed8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x5c}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) chdir(&(0x7f0000000100)='./file0\x00') 2.805536598s ago: executing program 3 (id=761): ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0xdbde8f94d813f6d3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="dd00", @ANYBLOB], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 2.5507087s ago: executing program 2 (id=762): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20002) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20000) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000003e00000001000000000000001684f936f902"], 0x18}, 0x4008000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x5, 0x1800, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r5 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000d40)="01", 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sysfs$3(0x3) pipe2$watch_queue(0x0, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "04f10000efdb00", "a78560d99f00", 0x800000}) 2.339676585s ago: executing program 4 (id=763): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) socket$inet6(0xa, 0x3, 0x101) writev(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) 1.422527659s ago: executing program 3 (id=764): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x3}}], 0x1, 0x40, 0x0) 1.400290012s ago: executing program 4 (id=765): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x306, @random="40407e20b0dd"}, 0xa8, {0x2, 0x4e20, @private=0xa010102}, 'bridge_slave_1\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020640d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 546.944617ms ago: executing program 3 (id=766): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350006000000fbab694ccf9d2b930368bae0c190"], 0x30}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 363.270199ms ago: executing program 4 (id=767): socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x2221c0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, {0x0}, 0x0, 0x4}, 0xa0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x703, 0xfff) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0, 0x500}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}}) 224.186909ms ago: executing program 1 (id=768): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r3 = dup(r2) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x381, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x804) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x2, {}, [{0x50, 0x1, [@m_tunnel_key={0x4c, 0x1, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 0s ago: executing program 0 (id=769): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x306, @random="40407e20b0dd"}, 0xa8, {0x2, 0x4e20, @private=0xa010102}, 'bridge_slave_1\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020640d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts. [ 58.965144][ T30] audit: type=1400 audit(1743912387.369:88): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.969266][ T5808] cgroup: Unknown subsys name 'net' [ 58.988045][ T30] audit: type=1400 audit(1743912387.369:89): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.015956][ T30] audit: type=1400 audit(1743912387.399:90): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.126022][ T5808] cgroup: Unknown subsys name 'cpuset' [ 59.134122][ T5808] cgroup: Unknown subsys name 'rlimit' [ 59.271737][ T30] audit: type=1400 audit(1743912387.669:91): avc: denied { setattr } for pid=5808 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.308733][ T30] audit: type=1400 audit(1743912387.669:92): avc: denied { create } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.330999][ T30] audit: type=1400 audit(1743912387.669:93): avc: denied { write } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.351486][ T30] audit: type=1400 audit(1743912387.669:94): avc: denied { read } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.371946][ T30] audit: type=1400 audit(1743912387.669:95): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.397419][ T30] audit: type=1400 audit(1743912387.669:96): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.420921][ T30] audit: type=1400 audit(1743912387.699:97): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.441695][ T5811] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.322516][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.967998][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.977040][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.985207][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.992983][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.000990][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.008999][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.017955][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.025750][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.033403][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.041929][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.043646][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.049509][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.062838][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.071396][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.073187][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.085207][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 64.085224][ T30] audit: type=1400 audit(1743912392.489:107): avc: denied { read } for pid=5818 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.088137][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.101437][ T30] audit: type=1400 audit(1743912392.499:108): avc: denied { open } for pid=5818 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.112605][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.143393][ T30] audit: type=1400 audit(1743912392.499:109): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.149865][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.185137][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.193938][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.201572][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.209071][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.234574][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.254949][ T5137] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.263030][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.404830][ T30] audit: type=1400 audit(1743912392.799:110): avc: denied { module_request } for pid=5818 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.463701][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 64.578162][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.585414][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.592700][ T5818] bridge_slave_0: entered allmulticast mode [ 64.599696][ T5818] bridge_slave_0: entered promiscuous mode [ 64.613121][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.621889][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.629171][ T5818] bridge_slave_1: entered allmulticast mode [ 64.636112][ T5818] bridge_slave_1: entered promiscuous mode [ 64.692620][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.731624][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.784364][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 64.830209][ T5818] team0: Port device team_slave_0 added [ 64.866680][ T5818] team0: Port device team_slave_1 added [ 64.930280][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 64.967406][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.974702][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.000739][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.037233][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.044260][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.070226][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.081312][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 65.108755][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.116071][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.123207][ T5823] bridge_slave_0: entered allmulticast mode [ 65.130820][ T5823] bridge_slave_0: entered promiscuous mode [ 65.155473][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.162573][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.169887][ T5823] bridge_slave_1: entered allmulticast mode [ 65.176898][ T5823] bridge_slave_1: entered promiscuous mode [ 65.220596][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 65.268620][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.281287][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.315724][ T5818] hsr_slave_0: entered promiscuous mode [ 65.322016][ T5818] hsr_slave_1: entered promiscuous mode [ 65.358355][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.365703][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.372849][ T5831] bridge_slave_0: entered allmulticast mode [ 65.379825][ T5831] bridge_slave_0: entered promiscuous mode [ 65.410304][ T5823] team0: Port device team_slave_0 added [ 65.418236][ T5823] team0: Port device team_slave_1 added [ 65.424501][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.431606][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.439519][ T5831] bridge_slave_1: entered allmulticast mode [ 65.446406][ T5831] bridge_slave_1: entered promiscuous mode [ 65.469680][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.478241][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.485492][ T5820] bridge_slave_0: entered allmulticast mode [ 65.492246][ T5820] bridge_slave_0: entered promiscuous mode [ 65.527231][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.534454][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.541644][ T5820] bridge_slave_1: entered allmulticast mode [ 65.549578][ T5820] bridge_slave_1: entered promiscuous mode [ 65.587675][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.598759][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.632716][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.639889][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.666172][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.699548][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.707284][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.714873][ T5827] bridge_slave_0: entered allmulticast mode [ 65.721546][ T5827] bridge_slave_0: entered promiscuous mode [ 65.730645][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.742716][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.752335][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.759460][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.786307][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.807919][ T5831] team0: Port device team_slave_0 added [ 65.817858][ T5831] team0: Port device team_slave_1 added [ 65.824069][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.831147][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.838444][ T5827] bridge_slave_1: entered allmulticast mode [ 65.845240][ T5827] bridge_slave_1: entered promiscuous mode [ 65.891365][ T5820] team0: Port device team_slave_0 added [ 65.934372][ T5820] team0: Port device team_slave_1 added [ 65.942057][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.959063][ T5823] hsr_slave_0: entered promiscuous mode [ 65.965389][ T5823] hsr_slave_1: entered promiscuous mode [ 65.971285][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.979755][ T5823] Cannot create hsr debugfs directory [ 65.986190][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.993137][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.019418][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.040632][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.056105][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.063086][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.089115][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.114409][ T5834] Bluetooth: hci0: command tx timeout [ 66.146067][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.153020][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.178971][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.199468][ T5827] team0: Port device team_slave_0 added [ 66.223184][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.230368][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.256553][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.267412][ T5834] Bluetooth: hci2: command tx timeout [ 66.275112][ T5827] team0: Port device team_slave_1 added [ 66.343589][ T5834] Bluetooth: hci3: command tx timeout [ 66.343900][ T55] Bluetooth: hci4: command tx timeout [ 66.359614][ T5137] Bluetooth: hci1: command tx timeout [ 66.380664][ T5831] hsr_slave_0: entered promiscuous mode [ 66.386874][ T5831] hsr_slave_1: entered promiscuous mode [ 66.392669][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.400483][ T5831] Cannot create hsr debugfs directory [ 66.415079][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.422063][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.448862][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.484348][ T5820] hsr_slave_0: entered promiscuous mode [ 66.490409][ T5820] hsr_slave_1: entered promiscuous mode [ 66.496936][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.504618][ T5820] Cannot create hsr debugfs directory [ 66.510774][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.518502][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.544554][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.696773][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.708200][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.727990][ T5827] hsr_slave_0: entered promiscuous mode [ 66.734944][ T5827] hsr_slave_1: entered promiscuous mode [ 66.740829][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.748603][ T5827] Cannot create hsr debugfs directory [ 66.767947][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.801648][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.906406][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.922195][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.936423][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.965424][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.058187][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.069439][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.079914][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.090164][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.192589][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.228380][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.256745][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.267703][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.310244][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.322702][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.336173][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.348171][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.370447][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.380091][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.397159][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.420288][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.427648][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.441623][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.466861][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.474012][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.500431][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.507585][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.546610][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.553772][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.609934][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.670062][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.699797][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.707267][ T30] audit: type=1400 audit(1743912396.099:111): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.737265][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.744427][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.782354][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.790026][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.808005][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.830347][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.871581][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.878752][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.909023][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.956735][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.963899][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.975022][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.982157][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.007718][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.014844][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.039926][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.051012][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.117525][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.131579][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.189816][ T5137] Bluetooth: hci0: command tx timeout [ 68.289286][ T5823] veth0_vlan: entered promiscuous mode [ 68.344513][ T5137] Bluetooth: hci2: command tx timeout [ 68.365472][ T5823] veth1_vlan: entered promiscuous mode [ 68.398200][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.424052][ T5137] Bluetooth: hci3: command tx timeout [ 68.429607][ T55] Bluetooth: hci1: command tx timeout [ 68.429927][ T5834] Bluetooth: hci4: command tx timeout [ 68.525978][ T5823] veth0_macvtap: entered promiscuous mode [ 68.542204][ T5823] veth1_macvtap: entered promiscuous mode [ 68.564737][ T5820] veth0_vlan: entered promiscuous mode [ 68.591302][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.603256][ T5820] veth1_vlan: entered promiscuous mode [ 68.612294][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.625638][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.650559][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.659560][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.671009][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.681975][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.719637][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.729877][ T5818] veth0_vlan: entered promiscuous mode [ 68.766131][ T5820] veth0_macvtap: entered promiscuous mode [ 68.777107][ T5818] veth1_vlan: entered promiscuous mode [ 68.787715][ T5820] veth1_macvtap: entered promiscuous mode [ 68.842072][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.858323][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.871326][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.910803][ T5827] veth0_vlan: entered promiscuous mode [ 68.931039][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.942986][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.955460][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.968090][ T5827] veth1_vlan: entered promiscuous mode [ 68.977512][ T5818] veth0_macvtap: entered promiscuous mode [ 68.987105][ T386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.997989][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.007690][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.009718][ T386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.017477][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.032800][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.048942][ T5831] veth0_vlan: entered promiscuous mode [ 69.089305][ T5831] veth1_vlan: entered promiscuous mode [ 69.099836][ T5818] veth1_macvtap: entered promiscuous mode [ 69.115312][ T386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.126947][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.137751][ T386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.138100][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.156204][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.166706][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.177496][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.192728][ T5827] veth0_macvtap: entered promiscuous mode [ 69.205781][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.216403][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.228345][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.239023][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.250147][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.274693][ T30] audit: type=1400 audit(1743912397.679:112): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.EKTGYC/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.287185][ T5827] veth1_macvtap: entered promiscuous mode [ 69.319203][ T30] audit: type=1400 audit(1743912397.679:113): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.321044][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.351024][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.351614][ T30] audit: type=1400 audit(1743912397.679:114): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.EKTGYC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.360787][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.389468][ T30] audit: type=1400 audit(1743912397.679:115): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.395705][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.427779][ T30] audit: type=1400 audit(1743912397.679:116): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.EKTGYC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.470934][ T30] audit: type=1400 audit(1743912397.679:117): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.EKTGYC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.473590][ T5831] veth0_macvtap: entered promiscuous mode [ 69.501232][ T30] audit: type=1400 audit(1743912397.719:118): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.536739][ T30] audit: type=1400 audit(1743912397.829:119): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.566474][ T30] audit: type=1400 audit(1743912397.829:120): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="gadgetfs" ino=6544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.592961][ T5831] veth1_macvtap: entered promiscuous mode [ 69.603215][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.608467][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.615476][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.636977][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.640778][ T30] audit: type=1400 audit(1743912397.929:121): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 69.672031][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.682168][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.692993][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.702897][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.716532][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.728552][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.799405][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.811558][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.823143][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.833960][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.843858][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.854405][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.864991][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.875530][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.889093][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.917377][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.976536][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.996955][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.025283][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.045356][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.056062][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.095685][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.166160][ T386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.184450][ T386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.263666][ T5834] Bluetooth: hci0: command tx timeout [ 70.308156][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.328424][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.338289][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.348979][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.392438][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.404052][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.415670][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.426906][ T5834] Bluetooth: hci2: command tx timeout [ 70.432938][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.443735][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.454374][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.465907][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.476465][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.506774][ T5834] Bluetooth: hci1: command tx timeout [ 70.506792][ T5137] Bluetooth: hci4: command tx timeout [ 70.506973][ T55] Bluetooth: hci3: command tx timeout [ 70.619214][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.772335][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.811323][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.820918][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.830484][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.980282][ T4488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.013348][ T4488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.119706][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.142904][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.258633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.361038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.374455][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.382526][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.525902][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.547118][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.634853][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.648499][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.689406][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.717462][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.975973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.072153][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.283691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 72.303524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.306342][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.312183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.380964][ T55] Bluetooth: hci0: command tx timeout [ 72.507484][ T55] Bluetooth: hci2: command tx timeout [ 72.584154][ T55] Bluetooth: hci3: command tx timeout [ 72.590675][ T5834] Bluetooth: hci4: command tx timeout [ 72.591079][ T5137] Bluetooth: hci1: command tx timeout [ 72.759463][ T5939] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 72.806746][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 73.013740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.022635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 73.031719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.040453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.298114][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 74.298171][ T30] audit: type=1400 audit(1743912402.659:153): avc: denied { read } for pid=5946 comm="syz.4.10" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.522408][ T30] audit: type=1400 audit(1743912402.659:154): avc: denied { open } for pid=5946 comm="syz.4.10" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.665445][ T30] audit: type=1400 audit(1743912402.669:155): avc: denied { ioctl } for pid=5946 comm="syz.4.10" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.177792][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 75.863443][ T30] audit: type=1400 audit(1743912404.249:156): avc: denied { create } for pid=5973 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.698186][ T5978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.704266][ T5978] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 76.924895][ T5978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.930835][ T5978] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 77.099947][ T30] audit: type=1400 audit(1743912405.429:157): avc: denied { map_create } for pid=5979 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.453207][ T30] audit: type=1400 audit(1743912405.429:158): avc: denied { perfmon } for pid=5979 comm="syz.2.18" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.516685][ T5978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.522657][ T5978] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 77.537318][ T30] audit: type=1400 audit(1743912405.429:159): avc: denied { map_read map_write } for pid=5979 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.715771][ T5978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 77.721690][ T5978] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 77.963432][ T5978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 77.969373][ T5978] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 78.608784][ T30] audit: type=1400 audit(1743912406.989:160): avc: denied { write } for pid=5992 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.018562][ T30] audit: type=1400 audit(1743912407.419:161): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.777997][ T30] audit: type=1400 audit(1743912409.149:162): avc: denied { create } for pid=5985 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.507830][ T30] audit: type=1400 audit(1743912409.399:163): avc: denied { setopt } for pid=6020 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.548314][ T972] cfg80211: failed to load regulatory.db [ 82.121823][ T6040] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 82.395632][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.249183][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 84.284059][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 90.820435][ T30] audit: type=1400 audit(1743912419.209:164): avc: denied { block_suspend } for pid=6104 comm="syz.2.48" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.123540][ T6017] Bluetooth: hci5: Frame reassembly failed (-84) [ 91.141008][ T6120] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 92.600406][ T30] audit: type=1400 audit(1743912420.829:165): avc: denied { create } for pid=6127 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.662882][ T30] audit: type=1400 audit(1743912420.829:166): avc: denied { setopt } for pid=6127 comm="syz.1.53" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.152950][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 93.159462][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 95.004977][ T6129] delete_channel: no stack [ 96.552681][ T30] audit: type=1400 audit(1743912424.949:167): avc: denied { connect } for pid=6178 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.608323][ T30] audit: type=1400 audit(1743912424.949:168): avc: denied { name_connect } for pid=6178 comm="syz.4.66" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 96.638050][ T30] audit: type=1400 audit(1743912424.989:169): avc: denied { listen } for pid=6178 comm="syz.4.66" lport=38396 faddr=::ffff:172.20.255.187 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.719697][ T30] audit: type=1400 audit(1743912425.039:170): avc: denied { accept } for pid=6178 comm="syz.4.66" lport=38396 faddr=::ffff:172.20.255.187 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.690765][ T6200] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 97.718935][ T1150] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.474815][ T6212] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 98.486825][ T6017] Bluetooth: hci6: Frame reassembly failed (-84) [ 99.704422][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.772525][ T5137] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 100.789062][ T55] Bluetooth: hci6: command 0x1003 tx timeout [ 102.832987][ T6257] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 102.862524][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 103.884329][ T6268] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 103.958716][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 104.904663][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 104.918011][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 105.943686][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 108.128328][ T6305] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 108.975987][ T30] audit: type=1400 audit(1743912437.059:171): avc: denied { create } for pid=6303 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.373751][ T30] audit: type=1400 audit(1743912437.069:172): avc: denied { bind } for pid=6303 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.503414][ T30] audit: type=1400 audit(1743912437.069:173): avc: denied { accept } for pid=6303 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.583430][ T30] audit: type=1400 audit(1743912437.069:174): avc: denied { ioctl } for pid=6303 comm="syz.2.93" path="socket:[8592]" dev="sockfs" ino=8592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.778294][ T30] audit: type=1400 audit(1743912438.179:175): avc: denied { open } for pid=6318 comm="syz.0.97" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 110.183436][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.690601][ T6341] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 111.801055][ T1150] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.414606][ T6316] delete_channel: no stack [ 113.866248][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 113.867969][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.132401][ T1555] IPVS: starting estimator thread 0... [ 114.292107][ T6354] IPVS: using max 49 ests per chain, 117600 per kthread [ 115.840202][ T1555] IPVS: starting estimator thread 0... [ 116.154784][ T6358] delete_channel: no stack [ 116.307163][ T6378] IPVS: using max 44 ests per chain, 105600 per kthread [ 118.030541][ T4488] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.240720][ T6392] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 118.325787][ T6403] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 118.339856][ T4488] Bluetooth: hci6: Frame reassembly failed (-84) [ 118.347567][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 118.491186][ T6402] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 120.108051][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 120.114426][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 120.363642][ T5137] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 120.370429][ T5829] Bluetooth: hci6: command 0x1003 tx timeout [ 120.370932][ T55] Bluetooth: hci7: command 0x1003 tx timeout [ 120.399690][ T5834] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 121.683809][ T6431] pimreg: entered allmulticast mode [ 121.933117][ T1555] IPVS: starting estimator thread 0... [ 122.033507][ T6435] IPVS: using max 38 ests per chain, 91200 per kthread [ 123.700042][ T6439] delete_channel: no stack [ 126.150647][ T6442] delete_channel: no stack [ 126.844974][ T9] IPVS: starting estimator thread 0... [ 127.132805][ T6493] IPVS: using max 37 ests per chain, 88800 per kthread [ 128.578034][ T6515] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 129.129483][ T4488] Bluetooth: hci5: Frame reassembly failed (-84) [ 129.282103][ T6520] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 129.380002][ T53] Bluetooth: hci6: Frame reassembly failed (-84) [ 130.663808][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 130.670074][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.707871][ T6538] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 130.734986][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 131.383436][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 132.540036][ T6522] delete_channel: no stack [ 132.832962][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 132.845733][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.852253][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.854253][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.329941][ T6526] delete_channel: no stack [ 134.899868][ T6588] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 134.972570][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.245413][ T6593] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 135.384275][ T1150] Bluetooth: hci6: Frame reassembly failed (-84) [ 135.802112][ T6559] delete_channel: no stack [ 136.983506][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 137.321419][ T6618] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 137.351471][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.358147][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.383379][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 137.497782][ T6569] delete_channel: no stack [ 137.884885][ T6625] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 137.945187][ T5924] Bluetooth: hci6: Frame reassembly failed (-84) [ 138.138121][ T6628] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 138.203343][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 139.383609][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.956610][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 139.956757][ T5829] Bluetooth: hci6: command 0x1003 tx timeout [ 140.293953][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 140.367579][ T55] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 141.052969][ T30] audit: type=1400 audit(1743912469.449:176): avc: denied { create } for pid=6648 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.142674][ T30] audit: type=1400 audit(1743912469.449:177): avc: denied { write } for pid=6648 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.218349][ T6655] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 141.306342][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 141.450041][ T30] audit: type=1400 audit(1743912469.449:178): avc: denied { nlmsg_write } for pid=6648 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.828736][ T6634] delete_channel: no stack [ 143.081654][ T6679] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 143.116392][ T6680] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 143.171383][ T1150] Bluetooth: hci6: Frame reassembly failed (-84) [ 143.173829][ T53] Bluetooth: hci7: Frame reassembly failed (-84) [ 143.303539][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.814579][ T6691] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 143.869773][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 143.876808][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 143.887964][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.223533][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 145.230236][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 145.240341][ T55] Bluetooth: hci7: command 0x1003 tx timeout [ 145.246893][ T5137] Bluetooth: hci6: command 0x1003 tx timeout [ 145.863412][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 146.568423][ T1150] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.581752][ T6713] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 146.665898][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.187'. [ 146.995124][ T6722] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 147.036704][ T1150] Bluetooth: hci6: Frame reassembly failed (-84) [ 148.545685][ T6739] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 148.598988][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 148.603458][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.614936][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 148.926543][ T6747] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 148.974833][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.423383][ T55] Bluetooth: hci6: command 0x1003 tx timeout [ 149.429749][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 150.029306][ T30] audit: type=1400 audit(1743912478.349:179): avc: denied { prog_run } for pid=6751 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.768780][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 150.914874][ T30] audit: type=1400 audit(1743912478.489:180): avc: denied { execute } for pid=6749 comm="syz.1.194" path="/42/file1" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.938715][ T30] audit: type=1800 audit(1743912478.489:181): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.194" name="file1" dev="tmpfs" ino=229 res=0 errno=0 [ 150.983489][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 150.985180][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.023444][ T30] audit: type=1400 audit(1743912479.419:182): avc: denied { create } for pid=6757 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.088031][ T30] audit: type=1400 audit(1743912479.449:183): avc: denied { bind } for pid=6757 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.107378][ T30] audit: type=1400 audit(1743912479.449:184): avc: denied { write } for pid=6757 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.355035][ T6770] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 151.375786][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 151.662123][ T6775] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 151.695010][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 153.029767][ T6795] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 153.043485][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 153.463648][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 153.463828][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 153.715635][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 154.366485][ T6807] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 154.449506][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.079396][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 155.095042][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 155.104972][ T6781] delete_channel: no stack [ 156.002236][ T6831] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 156.038249][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 156.498145][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 156.504578][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 157.053917][ T6834] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 157.120604][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 157.626371][ T6841] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 157.641041][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 158.148385][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 158.514406][ T6845] netlink: 44 bytes leftover after parsing attributes in process `syz.0.215'. [ 159.192999][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.726295][ T5834] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 160.742131][ T6844] delete_channel: no stack [ 162.554747][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 163.820517][ T6866] delete_channel: no stack [ 164.065499][ T6906] Zero length message leads to an empty skb [ 164.226071][ T6875] delete_channel: no stack [ 164.462481][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 164.831411][ T6882] delete_channel: no stack [ 165.213742][ T6889] delete_channel: no stack [ 166.027669][ T6927] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 166.112304][ T5924] Bluetooth: hci5: Frame reassembly failed (-84) [ 166.695049][ T6902] delete_channel: no stack [ 166.853049][ T6933] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 166.970145][ T6904] delete_channel: no stack [ 167.039497][ T6937] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 167.084664][ T5924] Bluetooth: hci6: Frame reassembly failed (-84) [ 168.191834][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 168.354253][ T6916] delete_channel: no stack [ 168.842449][ T30] audit: type=1400 audit(1743912497.239:185): avc: denied { read } for pid=6947 comm="syz.2.237" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.892078][ T30] audit: type=1400 audit(1743912497.239:186): avc: denied { open } for pid=6947 comm="syz.2.237" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.915324][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.974530][ T6951] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 169.071871][ T5834] Bluetooth: hci6: command 0x1003 tx timeout [ 169.093666][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.097781][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 169.514065][ T30] audit: type=1400 audit(1743912497.509:187): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.825901][ T6955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.238'. [ 169.896767][ T6928] delete_channel: no stack [ 170.119783][ T6959] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 170.126404][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.136403][ T6959] vhci_hcd vhci_hcd.0: Device attached [ 171.057964][ T6961] vhci_hcd: connection closed [ 171.059189][ T69] vhci_hcd: stop threads [ 171.072452][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 171.072819][ T69] vhci_hcd: release socket [ 171.072854][ T69] vhci_hcd: disconnect device [ 171.082346][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 172.792769][ T6954] delete_channel: no stack [ 172.907309][ T30] audit: type=1400 audit(1743912501.189:188): avc: denied { create } for pid=6989 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.141539][ T30] audit: type=1400 audit(1743912501.199:189): avc: denied { setopt } for pid=6989 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.194183][ T30] audit: type=1400 audit(1743912501.289:190): avc: denied { write } for pid=6989 comm="syz.0.244" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.405631][ T30] audit: type=1400 audit(1743912501.289:191): avc: denied { ioctl } for pid=6989 comm="syz.0.244" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.415264][ T6997] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 174.421824][ T6997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.433762][ T6997] vhci_hcd vhci_hcd.0: Device attached [ 174.721332][ T7012] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 174.738502][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 174.768035][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 175.039336][ T7016] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 175.061783][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 175.230138][ T6977] delete_channel: no stack [ 175.866125][ T6985] delete_channel: no stack [ 176.120719][ T30] audit: type=1400 audit(1743912504.519:192): avc: denied { mount } for pid=7020 comm="syz.3.251" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.908141][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 176.920163][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 177.069449][ T55] Bluetooth: hci6: command 0x1003 tx timeout [ 177.076148][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 177.092788][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 177.304166][ T7031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 177.310740][ T7031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.318705][ T7031] vhci_hcd vhci_hcd.0: Device attached [ 178.330089][ T7032] vhci_hcd: connection closed [ 178.363104][ T6996] delete_channel: no stack [ 178.381737][ T5924] vhci_hcd: stop threads [ 178.395771][ T5924] vhci_hcd: release socket [ 178.411573][ T5924] vhci_hcd: disconnect device [ 178.557311][ T7042] vhci_hcd vhci_hcd.0: port 0 already used [ 179.778139][ T7047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 179.784711][ T7047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.793172][ T7047] vhci_hcd vhci_hcd.0: Device attached [ 180.512204][ T7049] vhci_hcd: connection closed [ 180.584532][ T4488] vhci_hcd: stop threads [ 180.782366][ T4488] vhci_hcd: release socket [ 180.788401][ T4488] vhci_hcd: disconnect device [ 180.925231][ T9] vhci_hcd: vhci_device speed not set [ 181.023571][ T30] audit: type=1400 audit(1743912509.399:193): avc: denied { ioctl } for pid=7061 comm="syz.1.259" path="mnt:[4026533102]" dev="nsfs" ino=4026533102 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 181.413731][ T30] audit: type=1400 audit(1743912509.409:194): avc: denied { create } for pid=7061 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 181.888953][ T30] audit: type=1400 audit(1743912509.409:195): avc: denied { ioctl } for pid=7061 comm="syz.1.259" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 182.485026][ T7087] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 182.491576][ T7087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.499296][ T7087] vhci_hcd vhci_hcd.0: Device attached [ 183.790826][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 183.932693][ T7087] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 184.030495][ T7102] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 184.149860][ T1150] Bluetooth: hci5: Frame reassembly failed (-84) [ 185.016869][ T7069] delete_channel: no stack [ 186.103327][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.103490][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 186.558013][ T7123] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 187.005707][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 187.677818][ T30] audit: type=1400 audit(1743912515.889:196): avc: denied { write } for pid=7134 comm="syz.1.277" path="socket:[10143]" dev="sockfs" ino=10143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 187.780209][ T30] audit: type=1400 audit(1743912515.889:197): avc: denied { nlmsg_read } for pid=7134 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.921223][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.925118][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 189.644269][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 189.676280][ T7154] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 190.106204][ T30] audit: type=1400 audit(1743912518.489:198): avc: denied { create } for pid=7172 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.225234][ T30] audit: type=1400 audit(1743912518.499:199): avc: denied { bind } for pid=7172 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.726342][ T30] audit: type=1400 audit(1743912518.499:200): avc: denied { setopt } for pid=7172 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 191.119277][ T7141] delete_channel: no stack [ 191.736276][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.774751][ T7188] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 191.958201][ T4488] Bluetooth: hci6: Frame reassembly failed (-84) [ 192.966114][ T7170] delete_channel: no stack [ 193.787014][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 194.230961][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240637][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.018511][ T7219] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 196.025061][ T7219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.118819][ T7220] vhci_hcd: connection closed [ 196.143739][ T7219] vhci_hcd vhci_hcd.0: Device attached [ 196.178869][ T7228] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 196.318567][ T1150] Bluetooth: hci5: Frame reassembly failed (-84) [ 196.337591][ T4488] vhci_hcd: stop threads [ 196.865852][ T5902] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 197.903561][ T4488] vhci_hcd: release socket [ 197.911425][ T4488] vhci_hcd: disconnect device [ 198.078162][ T7239] vhci_hcd vhci_hcd.0: port 0 already used [ 198.098387][ T7242] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 198.263479][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 198.263580][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 200.172502][ T7257] vhci_hcd vhci_hcd.0: port 0 already used [ 202.704782][ T7301] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 202.711354][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.720594][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 203.213365][ T5902] vhci_hcd: vhci_device speed not set [ 203.881093][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 203.937173][ T7278] delete_channel: no stack [ 206.303554][ T7326] vhci_hcd vhci_hcd.0: port 0 already used [ 207.349596][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 208.834270][ T7358] vhci_hcd vhci_hcd.0: port 0 already used [ 211.626699][ T7382] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 214.020731][ T7419] vhci_hcd vhci_hcd.0: port 0 already used [ 215.415972][ T7419] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 216.515285][ T7432] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 217.550942][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.345'. [ 217.693989][ T7452] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 217.700558][ T7452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.708372][ T7452] vhci_hcd vhci_hcd.0: Device attached [ 218.783654][ T7455] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 218.903401][ T972] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 220.257789][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.347'. [ 222.587165][ T7487] vhci_hcd vhci_hcd.0: port 0 already used [ 224.028207][ T7494] vhci_hcd vhci_hcd.0: port 0 already used [ 224.468307][ T7497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 224.519770][ T7487] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 226.684894][ T7530] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 226.700586][ T7530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.708808][ T7530] vhci_hcd vhci_hcd.0: Device attached [ 227.081724][ T5845] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 228.542274][ T7530] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 228.702384][ T7532] vhci_hcd: connection reset by peer [ 229.291025][ T7506] vhci_hcd: stop threads [ 229.302640][ T7506] vhci_hcd: release socket [ 229.497163][ T7506] vhci_hcd: disconnect device [ 229.731655][ T30] audit: type=1400 audit(1743912558.129:201): avc: denied { audit_read } for pid=7557 comm="syz.4.366" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.979667][ T7564] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 229.991875][ T7564] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 230.357926][ T30] audit: type=1400 audit(1743912558.389:202): avc: denied { firmware_load } for pid=7557 comm="syz.4.366" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 231.624583][ T7578] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 231.683339][ T7578] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 232.672272][ T7581] vhci_hcd vhci_hcd.0: port 0 already used [ 232.893367][ T5845] vhci_hcd: vhci_device speed not set [ 234.729116][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 235.908982][ T7620] vhci_hcd vhci_hcd.0: port 0 already used [ 237.971993][ T7653] vhci_hcd vhci_hcd.0: port 0 already used [ 241.686178][ T7685] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 241.695457][ T7685] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 241.735529][ T7688] mmap: syz.1.393 (7688) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.052672][ T7695] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 242.059236][ T7695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.068578][ T7695] vhci_hcd vhci_hcd.0: Device attached [ 243.309321][ T5845] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 243.422411][ T7709] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 243.431764][ T7709] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 244.268863][ T30] audit: type=1400 audit(1743912572.669:203): avc: denied { connect } for pid=7721 comm="syz.0.401" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.506131][ T7725] netlink: 'syz.0.401': attribute type 12 has an invalid length. [ 244.848165][ T30] audit: type=1400 audit(1743912572.669:204): avc: denied { create } for pid=7721 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.932507][ T30] audit: type=1400 audit(1743912572.669:205): avc: denied { bind } for pid=7721 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.321395][ T30] audit: type=1400 audit(1743912572.669:206): avc: denied { write } for pid=7721 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.821882][ T7740] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 246.831101][ T7740] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 250.248172][ T7774] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 250.257755][ T7774] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 251.802441][ T7784] vhci_hcd vhci_hcd.0: port 0 already used [ 254.471456][ T7824] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 254.480693][ T7824] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 255.629699][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.637662][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.051755][ T7860] netlink: 'syz.4.435': attribute type 12 has an invalid length. [ 258.456524][ T7863] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 258.465546][ T7863] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 261.647706][ T7887] netlink: 'syz.2.441': attribute type 12 has an invalid length. [ 262.926794][ T7895] vhci_hcd vhci_hcd.0: port 0 already used [ 264.655407][ T7910] vhci_hcd vhci_hcd.0: port 0 already used [ 267.000317][ T7936] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 267.009589][ T7936] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 268.616633][ T7941] vhci_hcd vhci_hcd.0: port 0 already used [ 270.611469][ T7974] vhci_hcd vhci_hcd.0: port 0 already used [ 271.976556][ T7993] vhci_hcd vhci_hcd.0: port 0 already used [ 273.577714][ T8021] netlink: 'syz.4.469': attribute type 12 has an invalid length. [ 273.664895][ T8020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.949279][ T30] audit: type=1400 audit(1743912602.349:207): avc: denied { write } for pid=8019 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.968926][ T30] audit: type=1400 audit(1743912602.349:208): avc: denied { append } for pid=8019 comm="syz.1.470" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.369069][ T8025] sp0: Synchronizing with TNC [ 274.643957][ T30] audit: type=1400 audit(1743912603.029:209): avc: denied { create } for pid=7995 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 274.853071][ T30] audit: type=1400 audit(1743912603.229:210): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.886633][ T30] audit: type=1400 audit(1743912603.229:211): avc: denied { read } for pid=5490 comm="dhcpcd" name="n100" dev="tmpfs" ino=3438 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.966446][ T30] audit: type=1400 audit(1743912603.229:212): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3438 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 275.039277][ T30] audit: type=1400 audit(1743912603.229:213): avc: denied { getattr } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3438 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.956057][ T8051] vhci_hcd vhci_hcd.0: port 0 already used [ 279.304393][ T8059] sp0: Synchronizing with TNC [ 279.453309][ T8074] vhci_hcd vhci_hcd.0: port 0 already used [ 280.484124][ T30] audit: type=1400 audit(1743912608.889:214): avc: denied { create } for pid=8091 comm="syz.1.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 280.510269][ T30] audit: type=1400 audit(1743912608.909:215): avc: denied { write } for pid=8091 comm="syz.1.486" path="socket:[12758]" dev="sockfs" ino=12758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.449893][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 281.513961][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 283.948984][ T8131] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 283.959889][ T8131] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 287.460688][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 287.523454][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 295.440133][ T8255] sp0: Synchronizing with TNC [ 296.402846][ T8269] sp0: Synchronizing with TNC [ 296.499801][ T8269] ubi31: attaching mtd0 [ 296.537011][ T8269] ubi31: scanning is finished [ 296.873626][ T8269] ubi31: empty MTD device detected [ 297.907723][ T8272] vhci_hcd vhci_hcd.0: port 0 already used [ 298.015860][ T8269] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 298.120032][ T8269] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 298.334696][ T8269] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 298.415289][ T30] audit: type=1400 audit(1743912626.819:216): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.450294][ T8269] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 298.483122][ T8269] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 298.505647][ T8269] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 298.530267][ T8269] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3755880582 [ 298.671198][ T30] audit: type=1400 audit(1743912626.819:217): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.695431][ T8269] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 298.732815][ T30] audit: type=1400 audit(1743912626.819:218): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.192712][ T8288] ubi31: background thread "ubi_bgt31d" started, PID 8288 [ 299.535441][ T8296] vhci_hcd vhci_hcd.0: port 0 already used [ 299.587763][ T8306] vhci_hcd vhci_hcd.0: port 0 already used [ 300.090841][ T8324] sp0: Synchronizing with TNC [ 300.196155][ T8330] ubi: mtd0 is already attached to ubi31 [ 300.283316][ T8331] vhci_hcd vhci_hcd.0: port 0 already used [ 300.843887][ T8343] netlink: 'syz.1.544': attribute type 12 has an invalid length. [ 302.885894][ T8361] sp0: Synchronizing with TNC [ 303.253311][ T8363] netlink: 'syz.3.553': attribute type 12 has an invalid length. [ 303.940570][ T8368] ubi: mtd0 is already attached to ubi31 [ 306.864117][ T8386] sp0: Synchronizing with TNC [ 306.920398][ T8386] ubi: mtd0 is already attached to ubi31 [ 306.931238][ T8389] sp1: Synchronizing with TNC [ 307.074474][ T8394] ubi: mtd0 is already attached to ubi31 [ 308.904611][ T8416] sp0: Synchronizing with TNC [ 308.967454][ T8417] ubi: mtd0 is already attached to ubi31 [ 311.782509][ T8440] vhci_hcd vhci_hcd.0: port 0 already used [ 314.078547][ T8464] sp0: Synchronizing with TNC [ 314.156138][ T8464] ubi: mtd0 is already attached to ubi31 [ 315.755994][ T8486] sp0: Synchronizing with TNC [ 316.495343][ T8492] ubi: mtd0 is already attached to ubi31 [ 316.592525][ T8494] sp1: Synchronizing with TNC [ 316.668065][ T8499] vhci_hcd vhci_hcd.0: port 0 already used [ 316.671383][ T8498] ubi: mtd0 is already attached to ubi31 [ 317.068940][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.079525][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.270299][ T8515] ubi: mtd0 is already attached to ubi31 [ 319.449033][ T8534] vhci_hcd vhci_hcd.0: port 0 already used [ 320.941303][ T8548] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 320.955629][ T7506] Bluetooth: hci5: Frame reassembly failed (-84) [ 321.465196][ T8556] vhci_hcd vhci_hcd.0: port 0 already used [ 322.021049][ T8573] ubi: mtd0 is already attached to ubi31 [ 323.003591][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 325.181121][ T8601] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 325.190130][ T8601] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 328.353669][ T8632] vhci_hcd vhci_hcd.0: port 0 already used [ 332.352058][ T8681] pimreg: entered allmulticast mode [ 334.588980][ T8702] ubi: mtd0 is already attached to ubi31 [ 335.986576][ T8716] sp0: Synchronizing with TNC [ 336.083128][ T8718] ubi: mtd0 is already attached to ubi31 [ 337.374526][ T8727] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 337.383551][ T8727] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 337.855666][ T8740] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 337.964391][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 339.943419][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.711011][ T8786] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 342.722840][ T7506] Bluetooth: hci5: Frame reassembly failed (-84) [ 343.148979][ T8791] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 343.190080][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 344.747878][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 345.223789][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 345.223969][ T55] Bluetooth: hci6: command 0x1003 tx timeout [ 345.972307][ T8822] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 345.981550][ T8822] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 347.516398][ T8842] netlink: 'syz.0.665': attribute type 12 has an invalid length. [ 348.087096][ T386] Bluetooth: hci5: Frame reassembly failed (-84) [ 350.114205][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 351.304138][ T8868] tty tty1: ldisc open failed (-12), clearing slot 0 [ 354.490705][ T8918] sp0: Synchronizing with TNC [ 354.661627][ T8922] ubi: mtd0 is already attached to ubi31 [ 354.757356][ T8923] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 354.766672][ T8923] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 355.373243][ T8928] netlink: 'syz.0.685': attribute type 12 has an invalid length. [ 356.098417][ T8933] vhci_hcd vhci_hcd.0: port 0 already used [ 356.235247][ T8940] sp0: Synchronizing with TNC [ 356.274702][ T8941] vhci_hcd vhci_hcd.0: port 0 already used [ 356.347780][ T8945] ubi: mtd0 is already attached to ubi31 [ 356.765171][ T8956] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 356.774204][ T8956] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 363.019148][ T9030] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 363.028207][ T9030] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 363.647814][ T9024] vhci_hcd vhci_hcd.0: port 0 already used [ 368.005987][ T9076] sp0: Synchronizing with TNC [ 368.239056][ T9080] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 368.248091][ T9080] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 368.617886][ T9082] ubi: mtd0 is already attached to ubi31 [ 369.278665][ T9090] sp0: Synchronizing with TNC [ 369.341762][ T9091] ubi: mtd0 is already attached to ubi31 [ 369.583334][ T5875] IPVS: starting estimator thread 0... [ 369.673567][ T9094] IPVS: using max 79 ests per chain, 189600 per kthread [ 371.486719][ T9114] vhci_hcd vhci_hcd.0: port 0 already used [ 372.159409][ T9135] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 374.223861][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 374.223948][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 374.374490][ T9161] vhci_hcd vhci_hcd.0: port 0 already used [ 375.234324][ T9176] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 375.243254][ T9176] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 378.368124][ T9210] sp0: Synchronizing with TNC [ 378.508264][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514579][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.605366][ T9212] ubi: mtd0 is already attached to ubi31 [ 382.257629][ T9253] sp0: Synchronizing with TNC [ 382.814413][ T9258] ubi: mtd0 is already attached to ubi31 [ 383.304982][ T9262] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 383.313950][ T9262] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 385.714029][ T9284] pimreg: entered allmulticast mode [ 386.158750][ T9290] vhci_hcd vhci_hcd.0: port 0 already used [ 386.183783][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 386.326318][ T9294] netlink: 'syz.1.768': attribute type 12 has an invalid length. [ 386.697992][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 386.705406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.714121][ T31] task:kworker/0:0 state:D stack:26264 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 386.726228][ T31] Workqueue: usb_hub_wq hub_event [ 386.731266][ T31] Call Trace: [ 386.735313][ T31] [ 386.738266][ T31] __schedule+0x116f/0x5de0 [ 386.742815][ T31] ? __lock_acquire+0x9c1/0x1ba0 [ 386.762753][ T31] ? __pfx___schedule+0x10/0x10 [ 386.769299][ T31] ? find_held_lock+0x2b/0x80 [ 386.774256][ T31] ? schedule+0x2d7/0x3a0 [ 386.778680][ T31] schedule+0xe7/0x3a0 [ 386.782840][ T31] usb_kill_urb+0x253/0x320 [ 386.789035][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 386.795030][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 386.802963][ T31] usb_start_wait_urb+0x250/0x4b0 [ 386.803001][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 386.803027][ T31] ? __asan_memset+0x23/0x50 [ 386.803057][ T31] usb_control_msg+0x326/0x4a0 [ 386.803079][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 386.803108][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 386.803133][ T31] hub_port_init+0x690/0x3a70 [ 386.805085][ T31] hub_event+0x2c67/0x4fa0 [ 386.805121][ T31] ? __pfx_hub_event+0x10/0x10 [ 386.805137][ T31] ? mce_timed_out+0x70/0xb0 [ 386.805330][ T31] ? mce_timed_out+0x70/0xb0 [ 386.806050][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 386.806074][ T31] process_one_work+0x9cc/0x1b70 [ 386.806099][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 386.806119][ T31] ? __pfx_process_one_work+0x10/0x10 [ 386.806170][ T31] ? assign_work+0x1a0/0x250 [ 387.052897][ T31] worker_thread+0x6c8/0xf10 [ 387.071258][ T31] ? __pfx_worker_thread+0x10/0x10 [ 387.079777][ T31] kthread+0x3c2/0x780 [ 387.241904][ T31] ? __pfx_kthread+0x10/0x10 [ 387.268502][ T31] ? __pfx_kthread+0x10/0x10 [ 387.275756][ T31] ? __pfx_kthread+0x10/0x10 [ 387.280389][ T31] ? __pfx_kthread+0x10/0x10 [ 387.286086][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.291766][ T31] ? __pfx_kthread+0x10/0x10 [ 387.306137][ T31] ret_from_fork+0x45/0x80 [ 387.310825][ T31] ? __pfx_kthread+0x10/0x10 [ 387.316087][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.321349][ T31] [ 387.325001][ T31] INFO: task kworker/0:1:10 blocked for more than 144 seconds. [ 387.332942][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 387.341420][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.350437][ T31] task:kworker/0:1 state:D stack:25368 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 387.363460][ T31] Workqueue: usb_hub_wq hub_event [ 387.370898][ T31] Call Trace: [ 387.374319][ T31] [ 387.377257][ T31] __schedule+0x116f/0x5de0 [ 387.381770][ T31] ? __lock_acquire+0x9c1/0x1ba0 [ 387.386791][ T31] ? __pfx___schedule+0x10/0x10 [ 387.391649][ T31] ? find_held_lock+0x2b/0x80 [ 387.396361][ T31] ? schedule+0x2d7/0x3a0 [ 387.400695][ T31] schedule+0xe7/0x3a0 [ 387.404798][ T31] usb_kill_urb+0x253/0x320 [ 387.409314][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 387.414379][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 387.420456][ T31] usb_start_wait_urb+0x250/0x4b0 [ 387.425514][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 387.431074][ T31] ? __asan_memset+0x23/0x50 [ 387.435756][ T31] usb_control_msg+0x326/0x4a0 [ 387.440533][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 387.445856][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.451089][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 387.457234][ T31] hub_port_init+0x690/0x3a70 [ 387.461934][ T31] hub_event+0x2c67/0x4fa0 [ 387.466402][ T31] ? __pfx_hub_event+0x10/0x10 [ 387.471879][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 387.477676][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.482459][ T31] process_one_work+0x9cc/0x1b70 [ 387.487455][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 387.492759][ T31] ? __pfx_process_one_work+0x10/0x10 [ 387.498216][ T31] ? assign_work+0x1a0/0x250 [ 387.502819][ T31] worker_thread+0x6c8/0xf10 [ 387.507573][ T31] ? __pfx_worker_thread+0x10/0x10 [ 387.512710][ T31] kthread+0x3c2/0x780 [ 387.516821][ T31] ? __pfx_kthread+0x10/0x10 [ 387.521423][ T31] ? __pfx_kthread+0x10/0x10 [ 387.526043][ T31] ? __pfx_kthread+0x10/0x10 [ 387.530637][ T31] ? __pfx_kthread+0x10/0x10 [ 387.535276][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.540044][ T31] ? __pfx_kthread+0x10/0x10 [ 387.544802][ T31] ret_from_fork+0x45/0x80 [ 387.549343][ T31] ? __pfx_kthread+0x10/0x10 [ 387.553971][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.558755][ T31] [ 387.561846][ T31] INFO: task kworker/1:0:24 blocked for more than 144 seconds. [ 387.577171][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 387.588809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.597821][ T31] task:kworker/1:0 state:D stack:26488 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 387.610438][ T31] Workqueue: usb_hub_wq hub_event [ 387.615802][ T31] Call Trace: [ 387.619084][ T31] [ 387.622075][ T31] __schedule+0x116f/0x5de0 [ 387.627068][ T31] ? find_held_lock+0x2b/0x80 [ 387.631768][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 387.637969][ T31] ? __pfx___schedule+0x10/0x10 [ 387.642845][ T31] ? find_held_lock+0x2b/0x80 [ 387.647889][ T31] ? schedule+0x2d7/0x3a0 [ 387.652288][ T31] schedule+0xe7/0x3a0 [ 387.656751][ T31] usb_kill_urb+0x253/0x320 [ 387.661275][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 387.666623][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 387.672725][ T31] usb_start_wait_urb+0x250/0x4b0 [ 387.679100][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 387.684770][ T31] ? __asan_memset+0x23/0x50 [ 387.689416][ T31] usb_control_msg+0x326/0x4a0 [ 387.694308][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 387.699621][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 387.707223][ T31] hub_port_init+0x690/0x3a70 [ 387.712088][ T31] hub_event+0x2c67/0x4fa0 [ 387.716609][ T31] ? __pfx_hub_event+0x10/0x10 [ 387.721358][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 387.727081][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.731851][ T31] process_one_work+0x9cc/0x1b70 [ 387.736836][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 387.743375][ T31] ? __pfx_process_one_work+0x10/0x10 [ 387.748764][ T31] ? assign_work+0x1a0/0x250 [ 387.753391][ T31] worker_thread+0x6c8/0xf10 [ 387.758000][ T31] ? __pfx_worker_thread+0x10/0x10 [ 387.763111][ T31] kthread+0x3c2/0x780 [ 387.767227][ T31] ? __pfx_kthread+0x10/0x10 [ 387.771813][ T31] ? __pfx_kthread+0x10/0x10 [ 387.776445][ T31] ? __pfx_kthread+0x10/0x10 [ 387.781624][ T31] ? __pfx_kthread+0x10/0x10 [ 387.786658][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.791448][ T31] ? __pfx_kthread+0x10/0x10 [ 387.796076][ T31] ret_from_fork+0x45/0x80 [ 387.800494][ T31] ? __pfx_kthread+0x10/0x10 [ 387.805143][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.809931][ T31] [ 387.813060][ T31] INFO: task kworker/0:2:972 blocked for more than 144 seconds. [ 387.823034][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 387.832873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.841845][ T31] task:kworker/0:2 state:D stack:25096 pid:972 tgid:972 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 387.854072][ T31] Workqueue: usb_hub_wq hub_event [ 387.862302][ T31] Call Trace: [ 387.866412][ T31] [ 387.869408][ T31] __schedule+0x116f/0x5de0 [ 387.874081][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 387.880594][ T31] ? __pfx___schedule+0x10/0x10 [ 387.885675][ T31] ? find_held_lock+0x2b/0x80 [ 387.890425][ T31] ? schedule+0x2d7/0x3a0 [ 387.894919][ T31] schedule+0xe7/0x3a0 [ 387.899049][ T31] usb_kill_urb+0x253/0x320 [ 387.903676][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 387.908754][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 387.915119][ T31] usb_start_wait_urb+0x250/0x4b0 [ 387.920243][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 387.925970][ T31] ? __asan_memset+0x23/0x50 [ 387.930654][ T31] usb_control_msg+0x326/0x4a0 [ 387.935619][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 387.941005][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 387.947186][ T31] hub_port_init+0x690/0x3a70 [ 387.951944][ T31] hub_event+0x2c67/0x4fa0 [ 387.956560][ T31] ? __pfx_hub_event+0x10/0x10 [ 387.961376][ T31] ? mce_timed_out+0x70/0xb0 [ 387.966058][ T31] ? mce_timed_out+0x70/0xb0 [ 387.970697][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 387.976254][ T31] process_one_work+0x9cc/0x1b70 [ 387.981246][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 387.987756][ T31] ? __pfx_process_one_work+0x10/0x10 [ 387.993332][ T31] ? assign_work+0x1a0/0x250 [ 387.998006][ T31] worker_thread+0x6c8/0xf10 [ 388.002709][ T31] ? __kthread_parkme+0x19e/0x250 [ 388.007842][ T31] ? __pfx_worker_thread+0x10/0x10 [ 388.013012][ T31] kthread+0x3c2/0x780 [ 388.017294][ T31] ? __pfx_kthread+0x10/0x10 [ 388.021923][ T31] ? __pfx_kthread+0x10/0x10 [ 388.026766][ T31] ? __pfx_kthread+0x10/0x10 [ 388.031411][ T31] ? __pfx_kthread+0x10/0x10 [ 388.036213][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.041038][ T31] ? __pfx_kthread+0x10/0x10 [ 388.045776][ T31] ret_from_fork+0x45/0x80 [ 388.050258][ T31] ? __pfx_kthread+0x10/0x10 [ 388.054992][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.059818][ T31] [ 388.062980][ T31] [ 388.062980][ T31] Showing all locks held in the system: [ 388.070857][ T31] 5 locks held by kworker/0:0/9: [ 388.075905][ T31] #0: ffff8881446df548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.087861][ T31] #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.099355][ T31] #2: ffff88814739d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 388.108554][ T31] #3: ffff88802a2b0510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 388.118688][ T31] #4: ffff888146fa9968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 388.128595][ T31] 5 locks held by kworker/0:1/10: [ 388.133872][ T31] #0: ffff8881446df548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.144981][ T31] #1: ffffc900000f7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.156383][ T31] #2: ffff888147716198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 388.165380][ T31] #3: ffff88802a3c1510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 388.175483][ T31] #4: ffff888028d1d168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 388.185273][ T31] 5 locks held by kworker/1:0/24: [ 388.191232][ T31] #0: ffff8881446df548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.202443][ T31] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.213953][ T31] #2: ffff88802a288198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 388.222913][ T31] #3: ffff88802a28b510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 388.233011][ T31] #4: ffff888028f05568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 388.242816][ T31] 1 lock held by khungtaskd/31: [ 388.247889][ T31] #0: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 388.258034][ T31] 5 locks held by kworker/u8:3/53: [ 388.263268][ T31] 5 locks held by kworker/0:2/972: [ 388.268470][ T31] #0: ffff8881446df548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.279438][ T31] #1: ffffc90003d3fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.291693][ T31] #2: ffff88802a1c0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 388.300854][ T31] #3: ffff88802a1c4510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 388.310900][ T31] #4: ffff8880290d7768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 388.320825][ T31] 2 locks held by getty/5580: [ 388.325610][ T31] #0: ffff8880316ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 388.335561][ T31] #1: ffffc900033462f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 388.345862][ T31] 5 locks held by kworker/0:3/5845: [ 388.351086][ T31] #0: ffff8881446df548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.362190][ T31] #1: ffffc90002eefd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.373618][ T31] #2: ffff8881473da198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 388.382575][ T31] #3: ffff8881473dd510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 388.393911][ T31] #4: ffff888146fcbb68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 388.403843][ T31] [ 388.406198][ T31] ============================================= [ 388.406198][ T31] [ 388.414779][ T31] NMI backtrace for cpu 1 [ 388.414791][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 388.414810][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.414819][ T31] Call Trace: [ 388.414824][ T31] [ 388.414830][ T31] dump_stack_lvl+0x116/0x1f0 [ 388.414862][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 388.414880][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.414899][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 388.414918][ T31] watchdog+0xf70/0x12c0 [ 388.414940][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.414956][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.414977][ T31] ? __kthread_parkme+0x19e/0x250 [ 388.415003][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.415019][ T31] kthread+0x3c2/0x780 [ 388.415036][ T31] ? __pfx_kthread+0x10/0x10 [ 388.415051][ T31] ? __pfx_kthread+0x10/0x10 [ 388.415066][ T31] ? __pfx_kthread+0x10/0x10 [ 388.415082][ T31] ? __pfx_kthread+0x10/0x10 [ 388.415097][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.415118][ T31] ? __pfx_kthread+0x10/0x10 [ 388.415135][ T31] ret_from_fork+0x45/0x80 [ 388.415155][ T31] ? __pfx_kthread+0x10/0x10 [ 388.415171][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.415207][ T31] [ 388.415237][ T31] Sending NMI from CPU 1 to CPUs 0: [ 388.549058][ C0] NMI backtrace for cpu 0 [ 388.549072][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 388.549088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.549095][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 388.549117][ C0] Code: 95 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bc 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 388.549129][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 388.549140][ C0] RAX: 0000000002c344b3 RBX: 0000000000000000 RCX: ffffffff8b723439 [ 388.549148][ C0] RDX: 0000000000000000 RSI: ffffffff8dbeeb53 RDI: ffffffff8bf46580 [ 388.549157][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 388.549166][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 388.549173][ C0] R13: ffffffff8e097740 R14: ffffffff90865310 R15: 0000000000000000 [ 388.549181][ C0] FS: 0000000000000000(0000) GS:ffff8881249b3000(0000) knlGS:0000000000000000 [ 388.549194][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.549202][ C0] CR2: 00007fca7e179178 CR3: 000000007c6d4000 CR4: 00000000003526f0 [ 388.549209][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.549219][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.549226][ C0] Call Trace: [ 388.549231][ C0] [ 388.549235][ C0] default_idle+0x13/0x20 [ 388.549252][ C0] default_idle_call+0x6d/0xb0 [ 388.549268][ C0] do_idle+0x391/0x510 [ 388.549286][ C0] ? __pfx_do_idle+0x10/0x10 [ 388.549302][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 388.549320][ C0] cpu_startup_entry+0x4f/0x60 [ 388.549336][ C0] rest_init+0x16b/0x2b0 [ 388.549346][ C0] ? acpi_subsystem_init+0x133/0x180 [ 388.549361][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 388.549379][ C0] start_kernel+0x3e9/0x4d0 [ 388.549397][ C0] x86_64_start_reservations+0x18/0x30 [ 388.549413][ C0] x86_64_start_kernel+0xb0/0xc0 [ 388.549429][ C0] common_startup_64+0x13e/0x148 [ 388.549449][ C0] [ 388.550108][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 388.764039][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 388.775487][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.785522][ T31] Call Trace: [ 388.788786][ T31] [ 388.791700][ T31] dump_stack_lvl+0x3d/0x1f0 [ 388.796282][ T31] panic+0x71c/0x800 [ 388.800177][ T31] ? __pfx_panic+0x10/0x10 [ 388.804573][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 388.809932][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.815894][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 388.821250][ T31] ? watchdog+0xdda/0x12c0 [ 388.825663][ T31] ? watchdog+0xdcd/0x12c0 [ 388.830061][ T31] watchdog+0xdeb/0x12c0 [ 388.834288][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.838945][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.844128][ T31] ? __kthread_parkme+0x19e/0x250 [ 388.849142][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.853799][ T31] kthread+0x3c2/0x780 [ 388.857853][ T31] ? __pfx_kthread+0x10/0x10 [ 388.862422][ T31] ? __pfx_kthread+0x10/0x10 [ 388.866991][ T31] ? __pfx_kthread+0x10/0x10 [ 388.871562][ T31] ? __pfx_kthread+0x10/0x10 [ 388.876131][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.880878][ T31] ? __pfx_kthread+0x10/0x10 [ 388.885447][ T31] ret_from_fork+0x45/0x80 [ 388.889846][ T31] ? __pfx_kthread+0x10/0x10 [ 388.894418][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.899177][ T31] [ 388.902285][ T31] Kernel Offset: disabled [ 388.906586][ T31] Rebooting in 86400 seconds..