last executing test programs: 2m33.637298697s ago: executing program 2 (id=16): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') socket$unix(0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10800, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4a, &(0x7f00000003c0)={0x0, 0x47b8, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000380), &(0x7f0000000180)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000080000000000000000b1a67a30769646dd9b1a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r2, 0x40204706, 0x20000004) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) 2m26.29602465s ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) fadvise64(r5, 0x18, 0x0, 0x4) r8 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000740), 0x12) 2m24.013079222s ago: executing program 2 (id=28): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) recvmmsg(r3, 0x0, 0x0, 0x425826b85cacf01a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='virtiofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x16800, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000f80)=@ethtool_drvinfo={0x3, "ccf3d6ec5844f831e8b93519bae2865ad350d677d05c20de7e0ea4bf0f5cce50", "0ce2a5943b958788a90d10a10580426b5eea8a25875d66e0210b3680e8ff40fe", "2badb84fdd97cbddef7823d808753d3ebb9d187abd48ba8c74b8e9e8d014ea96", "ebb358f4ba9acb5d9ed4e9b160ed8a3071e7c98c2c1235e33f7917b446d9f63c", "7afdd320e5f1f1627b05ce225ce0f8ccd3d29d6c28fefa211e61c196913be29a", "faf6d9e8d937be995fdd8845"}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_usbip_server_init(0x4) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 2m19.489214104s ago: executing program 2 (id=36): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="006d0000000000000000000001000000000000000000330012449be77809b042a3cc1a17adbc7a0850ae7c3558000000006a6e1d67700dfc5a4dbaf1c2cd30928a64215b92535e0860947123a2e8436444ce553522935ae2c50400000023b1bdba9333848ab236dda254b3788dec595c6217ffe35ab8548a3bbb6310c7ce74416d050000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e00)={r1, &(0x7f0000000d00), 0x0}, 0x20) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000007f185d823e000000100000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000006a5bd8f4551c4a3cf75862000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) 2m9.837005235s ago: executing program 2 (id=50): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x498) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') socket$unix(0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10800, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4a, &(0x7f00000003c0)={0x0, 0x47b8, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000380), &(0x7f0000000180)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000080000000000000000b1a67a30769646dd9b1a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r2, 0x40204706, 0x20000004) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) 2m7.204719256s ago: executing program 1 (id=53): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) unshare(0x62040200) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20001300, 0x20001330], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x1e8) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, &(0x7f0000005480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) r8 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) msgget$private(0x0, 0xa0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000004c0)={0x80}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) 1m17.837698573s ago: executing program 2 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b31, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x3000000}, 0x0) listen(r5, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 1m16.191146073s ago: executing program 1 (id=58): r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff"], 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1000000000000000, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="160000000000000005000000140b000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2ff0ffff09000000fb2876fffffffffffffffff1ffffff0004000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1m10.872706652s ago: executing program 1 (id=68): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) unshare(0x62040200) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20001300, 0x20001330], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000b01d2891ee92a64abe08cb4c3ee1a309b03178a1871d5fea213b11fc5b10df4c8128efcdd5680fbdf96e0a3e29aa305b1277aada7139678569c0c70be5fde98adef0078bd116f1f391526550adfb33274c7d82811f6eb734c605cff2f26582b3ba0051c2ebdabe9cf604ca64db5c18fe7982b49b851b7cd2bc1456bc04c3016961fbf9ef5359a385dd8a523d4a05ac12ba3ebe9c573bcda9e15b5c8576c8ea458c027a7c63544a869d2b013907b124c7f95eec7bfbc3d7657d0f985322bd6b58d03134cb1e27abfb49fbb4ba2dafba5b2dea072e5d18c89047c817c4f8742c2dc293945ce8a37807ba68a6abcf64d47"]}, 0x1e8) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, &(0x7f0000005480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) r8 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) msgget$private(0x0, 0xa0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000004c0)={0x80}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) 1m1.749633258s ago: executing program 1 (id=74): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) unshare(0x62040200) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20001300, 0x20001330], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x1e8) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, &(0x7f0000005480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) r8 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) msgget$private(0x0, 0xa0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000004c0)={0x80}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) 14.430372633s ago: executing program 4 (id=120): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000400)="f7624a800e6dc300a7c8af1073f7f80565d85cb0e73f45f4f3d53666f000784332e6113ff3e3a0d49c7ea76f4a31561cf1828eae6bec281c2a70ddd7a233e68eba25eff429708fdad8cd4dc88934bf913ef2a79bd435292a074c9a8a298e27f22767d72c2d10aa827a7c6f0d6779605e2612dfc3dd", 0x75}]) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000002680)="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", 0x1a1) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04030b00b700fffffffffffe0003"], 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0xffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x92, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000080)) pipe(0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0xffffffff}, 0x2c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000c000300686173683a697000050005000a000000050004"], 0x50}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601080000000000000000000000000500010007"], 0x1c}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x80) io_uring_setup(0x0, 0x0) 13.489739755s ago: executing program 0 (id=121): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x103) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="157c9e00650600000000000000397a7a9317"], 0x15) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @private}}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}, {0x20, 'gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x10\xdfH(|\xf4:e\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f'}]}, 0x488) close(r3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=[&(0x7f0000002600)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?\xe8\xafLpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$\x0fV\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xdf\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\xa7\x9dN\xaeT\xe2\x96$\x940$+X\x90', &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', 0x0, 0x0], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000002b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00']) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@report={0xc4, 0x20, 0x200, 0x70bd28, 0x25dfdbfc, {0x6c, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x9, 0x4e23, 0x6, 0x2, 0x80, 0x0, 0x2f, r1}}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x200}}, @extra_flags={0x8, 0x18, 0x1}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @policy_type={0xa, 0x10, {0x1}}, @proto={0xffffff54, 0x19, 0x2b}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40841}, 0x925746183929ce75) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000"], 0x3c}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0) 13.081666066s ago: executing program 4 (id=122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40891) io_setup(0xb8f, 0x0) io_destroy(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$devlink(0x0, r0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000180)) 10.928025746s ago: executing program 3 (id=123): socket$packet(0x11, 0x3, 0x300) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80, 0x81, 0x101, 0x410, 0x1, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x3, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x2000) getsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) 10.780400633s ago: executing program 4 (id=124): syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x498) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') socket$unix(0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10800, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4a, &(0x7f00000003c0)={0x0, 0x47b8, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000380), &(0x7f0000000180)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000080000000000000000b1a67a30769646dd9b1a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r2, 0x40204706, 0x20000004) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) 8.765260115s ago: executing program 0 (id=125): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001576f0cdf2fe97000000002c6b33665f99465a4c2094340a98f2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000104000000000000000000480000", @ANYBLOB], 0x28}}, 0x0) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r2, &(0x7f0000000040), 0x0) (async) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f046}) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008b404010902240001e8000000090400000103000000092123f0610000000122070009058103000000000000000000"], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x24044ff8, &(0x7f00000001c0)={0x2, 0x4e27, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 8.157206236s ago: executing program 3 (id=126): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 8.047124533s ago: executing program 0 (id=127): r0 = socket$kcm(0x2, 0x200000000000004, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r8, 0x0, 0x0}) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, r9, 0x0, r6}) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='cachefiles_coherency\x00'}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) 7.754984997s ago: executing program 4 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0675c54a1659e8836db0ce142e483a7a41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @host}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000440), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000740)=""/135, 0x87}], 0x1}, 0x400003a6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8, 0x40, 0x9, 0x8d, {{0xd, 0x4, 0x3, 0x2a, 0x34, 0x68, 0x0, 0x2d, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x1e, 0x3, [{0x6, 0xb, "2aae9028a5b84f50de"}, {0x7, 0xd, "0e92e6f3c7987f3f28f73f"}]}]}}}}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x75, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f, @void, @value}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={0x0, 0x1b4}, 0x1, 0x0, 0x0, 0x8804}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f000001080001000000000014000380060001"], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @const={0x6}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000280)=""/75, 0x34, 0x4b, 0x0, 0xef3, 0x0, @void, @value}, 0x28) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r8, 0x80) 7.002848305s ago: executing program 3 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000001500)='syzkaller\x00', 0x6695, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x6) open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @local}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00004fb000/0x3000)=nil, 0x3000, 0xa) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000700), 0x0, &(0x7f0000121000), 0x10000000000003ca, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1, 0x8, 0x0) 6.33236975s ago: executing program 4 (id=130): pipe(&(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000001f80)=""/226, 0x0, 0xe2, 0x2, 0x0, 0x0, @void, @value}, 0xfffffffffffffd24) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000040)={0x8, r7}) io_setup(0x2, &(0x7f0000000180)=0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xc0, 0x0, 0x0, r9}]) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x205289, &(0x7f0000000080)={0x0, 0x1f9f, 0x8, 0x1}, &(0x7f0000000000), &(0x7f00000001c0)) 6.148823121s ago: executing program 0 (id=131): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$unix(0x1, 0x5, 0x0) 6.148224757s ago: executing program 3 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b31, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x3000000}, 0x0) listen(r6, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 2.497632541s ago: executing program 3 (id=133): r0 = openat$selinux_load(0xffffff9c, &(0x7f00000011c0), 0x2, 0x0) fgetxattr(r0, &(0x7f0000001200)=@known='security.selinux\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffffffd}) syz_fuse_handle_req(r2, &(0x7f0000000800)="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", 0x2000, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000100)={0x4, 0x6a05, 0x5, 0xb5, 0x4, 0x2}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000001c0004000200"/254], 0x154}}, 0x0) 2.493133647s ago: executing program 4 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000001500)='syzkaller\x00', 0x6695, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x6) open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @local}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00004fb000/0x3000)=nil, 0x3000, 0xa) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000700), 0x0, &(0x7f0000121000), 0x10000000000003ca, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1, 0x8, 0x0) 2.24946021s ago: executing program 0 (id=135): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xa8dfd8d6986b50cc, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0xc4, {0x9, 0x21, 0x0, 0x81, 0x1, {0x22, 0x9a3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x81, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x7f, 0xd5}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0xd2, 0x80, 0x10, 0x75}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "2dc1509aa170c736eaa197f2ac70e9d8"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x10, 0x3d, {0x3d, 0x5, "3d59fcbf0114fb1e120ebbb56cb278f9dca8acf4f5378b6dc3afd82c221353a01c432363d85d5553829cb31ff8d05ffe8cd9909150306bc304bcbd"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, &(0x7f00000002c0)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x27, 0x6, 0x1}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x80, 0xa0, "87e88704", "df1e4b06"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0xf, 0xc3, 0x1, 0x7, 0x4cc1}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0xe, 0x8f, "96dbaedec1601f2aacef659a2bc593996f0283bac51f79f7a5538c5d2d2cf65c30588b85e76e99468e6ec368ca440e14f674e775888119515b40c477030153e882e3f7de3bd0d1a4341876645fdcb976dba179c97e33381b30aa7db9e253894188ebaf71e90330982d53182078b5ac55d8d2e4c659dac07cca3d5a60f5ec8cca99a4f0cfaeada47f963d9321e7be5f"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x5, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1c00, 0x40}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0xb, 0x2, "b878"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xb69}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="6217c6d31ccc"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "8e57"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x19}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'veth0_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r4, 0x5, 0x2, @multicast}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000ac0)={0x14, &(0x7f0000000900)={0x0, 0x31, 0xab, {0xab, 0xf, "11baab4085e7d8979ef715664a660c6c17013c3ead3e2036d67d2f83ea95bae3373cf188af66b6fea9f140f509d2236dbe807d4eb8b9d61f0004479cdaae31f1e9c7f588e7aea04dedca7f54b032c03e06f48c0076e82806cb9ddd1212ce1cdb619f912a3933fcb92d4299c867deab031a910538ea1b9689c541e4b64a199b361ac83ee120816ec210e88584959e74c3a9fb2145bcee159707a96805c8172cf88a330a3f41b0fc7159"}}, &(0x7f00000009c0)={0x0, 0x3, 0xec, @string={0xec, 0x3, "0119229eb5d4450b5e521678269835830df57da96d97942b0d0c901787de2a130f754914b1ebb48f9799a6424e5f87198f56340e6c2e2152608675384c493b8a2a5026964b1690f734206323a51d24ec586a889d9c9408c8ca25cae9e29c6856901119ad854730a85fc08215d57384c3fd6441379f3f610bbcb711845bf1e309c067d39dd61c4e430026002cab061583cac9c14addab7bae1607778c892e0b73f4c060ac2fc0cdf6c396c2d44007d6c9831c7fcb6c9001c9d0abe9c27c19e2e37351f3d703f007f2a9d85aa60c17fba0fadbae974be78b745d1e7574b2ceb97ab2c88a32e9b697ccd647"}}}, &(0x7f0000000d80)={0x34, &(0x7f0000000b00)={0x40, 0xe, 0x9e, "48b9ae3cf77916b26d97c2351d55f2fea0e07f080ded8d32abcddeb2a810d78e2624ab429536d270bcc5a9114b764ee9131893bab758d2d05109eb9ebe71a2757305afb17b9fa186c3e7eeba5b8993bce4ed029381cde839aa40cdd609389235e7afac06f2f1c5361ee811d5359df3d30ec1d288e1b0b5b9345a33f8333cdd86aa454b412c463bf4e1f923e17ed20918e38a28857ca09a159a29f2293b36"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c00)={0x0, 0x8, 0x1}, &(0x7f0000000c40)={0x20, 0x0, 0x87, {0x85, "56e74e1d13eb474dd9c78594e0a6057a0becb5a7a58e618ed73a8a6ee3369a1ebc0919cf21ffa628194666ae9dc7ab8de560b357bef152c99a9c15ea1f0eb85c2be504a062935d22bd118c7ceb6b9b8f7fbbd065371ac41114495f11209422338c03d1fe594f844b19098be5cf48f862c7488e25fb590ec2a1d5556bddaee770b7e0fbf324"}}, &(0x7f0000000d00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x0, 0x1, 0x5}}) 810.722806ms ago: executing program 1 (id=82): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f0000001801000064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaa0086dd60cb653e02643a00fe800000000000000000000000000000fe80000000000000000000000000000086009078000000000000000000000000000d7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d9800081598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8b0034130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd90f4eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b63c1b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 61.012108ms ago: executing program 3 (id=136): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (fail_nth: 3) 31.569341ms ago: executing program 1 (id=137): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000085bec140ca0804018f3200000001090212002400000000090452"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="200e02000000072e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=138): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r3, 0x34, 0x1, 0x163, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000700)={0x8, 0x3, @value=0x831}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x2000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty}}}}) kernel console output (not intermixed with test programs): t 2(bridge_slave_1) entered blocking state [ 114.789281][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.858280][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.127461][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.140754][ T29] audit: type=1400 audit(1726602480.858:113): avc: denied { sys_module } for pid=5229 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.235536][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.242809][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.278231][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.285707][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.426219][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.567198][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.608513][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.645751][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.706377][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.714270][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.738283][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.745728][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.818377][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.882832][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.890140][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.922868][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.930117][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.062858][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.165477][ T5243] Bluetooth: hci1: command tx timeout [ 116.178401][ T5231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.192653][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.230331][ T5243] Bluetooth: hci4: command tx timeout [ 116.236020][ T5243] Bluetooth: hci3: command tx timeout [ 116.242305][ T54] Bluetooth: hci2: command tx timeout [ 116.309593][ T5243] Bluetooth: hci0: command tx timeout [ 116.354352][ T5229] veth0_vlan: entered promiscuous mode [ 116.387372][ T5229] veth1_vlan: entered promiscuous mode [ 116.641903][ T5226] veth0_vlan: entered promiscuous mode [ 116.752742][ T5229] veth0_macvtap: entered promiscuous mode [ 116.785337][ T5226] veth1_vlan: entered promiscuous mode [ 116.816863][ T5229] veth1_macvtap: entered promiscuous mode [ 116.856012][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.007402][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.080907][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.133567][ T5229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.148642][ T5229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.165368][ T5229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.175014][ T5229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.232374][ T5226] veth0_macvtap: entered promiscuous mode [ 117.264688][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.286179][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.296309][ T5226] veth1_macvtap: entered promiscuous mode [ 117.317368][ T5223] veth0_vlan: entered promiscuous mode [ 117.496293][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.527111][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.543324][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.553783][ T5223] veth1_vlan: entered promiscuous mode [ 117.718963][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.735492][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.755427][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.773121][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.795783][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.896978][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.917751][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.928792][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.941209][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.026927][ T5231] veth0_vlan: entered promiscuous mode [ 118.058583][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.073892][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.115022][ T5231] veth1_vlan: entered promiscuous mode [ 118.119544][ T29] audit: type=1400 audit(1726602483.818:114): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/root/syzkaller.IyXQRA/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 118.131785][ T5223] veth0_macvtap: entered promiscuous mode [ 118.167548][ T29] audit: type=1400 audit(1726602483.828:115): avc: denied { mount } for pid=5229 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.197701][ T29] audit: type=1400 audit(1726602483.828:116): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/root/syzkaller.IyXQRA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.224726][ T29] audit: type=1400 audit(1726602483.868:117): avc: denied { mount } for pid=5229 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.248143][ T29] audit: type=1400 audit(1726602483.878:118): avc: denied { unmount } for pid=5229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.279333][ T29] audit: type=1400 audit(1726602483.908:119): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 118.315308][ T5223] veth1_macvtap: entered promiscuous mode [ 118.331389][ T29] audit: type=1400 audit(1726602483.918:120): avc: denied { mount } for pid=5229 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 118.497173][ T29] audit: type=1400 audit(1726602484.208:121): avc: denied { read write } for pid=5229 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.585570][ T29] audit: type=1400 audit(1726602484.238:122): avc: denied { open } for pid=5229 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.586664][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.676032][ T5309] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.676434][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.723803][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.749909][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.764377][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.777554][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.792590][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.804458][ T5231] veth0_macvtap: entered promiscuous mode [ 118.873146][ T5224] veth0_vlan: entered promiscuous mode [ 118.907924][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.931170][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.945501][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.957190][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.972419][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.019611][ T5231] veth1_macvtap: entered promiscuous mode [ 119.057520][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.066414][ T5224] veth1_vlan: entered promiscuous mode [ 119.077078][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.098289][ T5223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.118483][ T5223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.135898][ T5223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.146366][ T5223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.282727][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.311921][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.328429][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.341635][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.354089][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.367592][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.401016][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.503854][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.539262][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.552378][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.564732][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.593652][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.608923][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.632491][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.712504][ T5243] Bluetooth: hci4: unexpected event 0x03 length: 10 < 11 [ 119.757859][ T5231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.768433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.784010][ T5231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.796940][ T5231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.808181][ T5231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.852217][ T5224] veth0_macvtap: entered promiscuous mode [ 119.908204][ T5224] veth1_macvtap: entered promiscuous mode [ 120.109189][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.136887][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.260118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.300952][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.346251][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.366022][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.377244][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.387897][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.412212][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.423806][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.437112][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.449985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.460245][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.488587][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.500246][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.511009][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.524132][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.536266][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.547530][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.561080][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.572651][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.602142][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.722577][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 120.862463][ T5224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.887969][ T5224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.897947][ T5224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.944965][ T5224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.003579][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.015220][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.112357][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 121.112385][ T29] audit: type=1400 audit(1726602486.828:137): avc: denied { read } for pid=5325 comm="syz.3.9" name="ubi_ctrl" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.146819][ T5326] ubi0: attaching mtd0 [ 121.160538][ T5326] ubi0: scanning is finished [ 121.170140][ T29] audit: type=1400 audit(1726602486.828:138): avc: denied { open } for pid=5325 comm="syz.3.9" path="/dev/ubi_ctrl" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.177932][ T5326] ubi0: empty MTD device detected [ 121.195629][ T29] audit: type=1400 audit(1726602486.858:139): avc: denied { ioctl } for pid=5325 comm="syz.3.9" path="/dev/ubi_ctrl" dev="devtmpfs" ino=692 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.252005][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.309068][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.387116][ T29] audit: type=1400 audit(1726602486.948:140): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/root/syzkaller.qv1rHA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 121.466672][ T29] audit: type=1400 audit(1726602486.998:141): avc: denied { prog_load } for pid=5325 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.501727][ T29] audit: type=1400 audit(1726602486.998:142): avc: denied { bpf } for pid=5325 comm="syz.3.9" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.556153][ T29] audit: type=1400 audit(1726602486.998:143): avc: denied { perfmon } for pid=5325 comm="syz.3.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.608183][ T29] audit: type=1400 audit(1726602487.068:144): avc: denied { map_create } for pid=5325 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.701196][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.726324][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.766672][ T29] audit: type=1400 audit(1726602487.098:145): avc: denied { create } for pid=5325 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.795300][ T5326] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 121.867384][ T29] audit: type=1400 audit(1726602487.098:146): avc: denied { bind } for pid=5325 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.877606][ T5326] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 122.003373][ T5326] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 122.012948][ T5326] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 122.024557][ T5326] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 122.050264][ T5326] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 122.113264][ T5326] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 430802642 [ 122.159192][ T5326] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 122.450476][ T5328] ubi0: background thread "ubi_bgt0d" started, PID 5328 [ 122.470887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 122.481557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.492269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.503441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.589350][ T5332] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 122.599583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.620313][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.737231][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.293945][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.399685][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.773098][ T5340] xt_TCPMSS: Only works on TCP SYN packets [ 124.074115][ T5344] xt_TCPMSS: Only works on TCP SYN packets [ 124.089816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.605446][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 125.560445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.324862][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 126.325483][ T29] audit: type=1400 audit(1726602492.038:165): avc: denied { create } for pid=5359 comm="syz.4.14" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.532153][ T29] audit: type=1400 audit(1726602492.068:166): avc: denied { map } for pid=5359 comm="syz.4.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.960889][ T29] audit: type=1400 audit(1726602492.068:167): avc: denied { read write } for pid=5359 comm="syz.4.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.272216][ T29] audit: type=1326 audit(1726602492.988:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582b37def9 code=0x7ffc0000 [ 127.502419][ T29] audit: type=1326 audit(1726602493.058:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582b37def9 code=0x7ffc0000 [ 127.610273][ T5370] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.800909][ T29] audit: type=1326 audit(1726602493.098:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f582b37def9 code=0x7ffc0000 [ 128.039065][ T29] audit: type=1326 audit(1726602493.098:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582b37def9 code=0x7ffc0000 [ 128.598135][ T5373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.697858][ T29] audit: type=1326 audit(1726602493.098:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582b37def9 code=0x7ffc0000 [ 128.864091][ T29] audit: type=1326 audit(1726602493.138:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f582b37def9 code=0x7ffc0000 [ 129.069169][ T29] audit: type=1326 audit(1726602493.148:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582b37def9 code=0x7ffc0000 [ 131.652624][ T5396] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 131.711908][ T5396] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 133.612388][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 133.612410][ T29] audit: type=1400 audit(1726602498.638:189): avc: denied { read write } for pid=5401 comm="syz.3.22" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.839315][ T29] audit: type=1400 audit(1726602498.648:190): avc: denied { open } for pid=5401 comm="syz.3.22" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.866375][ T29] audit: type=1400 audit(1726602498.658:191): avc: denied { map } for pid=5401 comm="syz.3.22" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.181477][ T29] audit: type=1400 audit(1726602498.658:192): avc: denied { execute } for pid=5401 comm="syz.3.22" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.463808][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.879705][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 135.014608][ T29] audit: type=1400 audit(1726602498.698:193): avc: denied { setopt } for pid=5401 comm="syz.3.22" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.076319][ T29] audit: type=1400 audit(1726602499.738:194): avc: denied { read write } for pid=5403 comm="syz.1.23" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 135.175494][ T29] audit: type=1400 audit(1726602499.738:195): avc: denied { open } for pid=5403 comm="syz.1.23" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 136.159204][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.168850][ T29] audit: type=1400 audit(1726602500.538:196): avc: denied { read write } for pid=5410 comm="syz.4.25" name="vbi6" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.282605][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.315928][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.328887][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.342639][ T29] audit: type=1400 audit(1726602500.538:197): avc: denied { open } for pid=5410 comm="syz.4.25" path="/dev/vbi6" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.371457][ T9] usb 1-1: config 0 descriptor?? [ 136.441829][ T29] audit: type=1400 audit(1726602500.548:198): avc: denied { ioctl } for pid=5410 comm="syz.4.25" path="/dev/vbi6" dev="devtmpfs" ino=910 ioctlcmd=0x5663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 137.082239][ T5430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.451951][ T5435] virtio-fs: tag <(null)> not found [ 137.927147][ T5435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 137.934287][ T5435] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 138.062020][ T5441] vhci_hcd: connection closed [ 138.187126][ T5277] vhci_hcd: vhci_device speed not set [ 138.297026][ T5435] vhci_hcd vhci_hcd.0: Device attached [ 138.429865][ T5277] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 138.442889][ T35] vhci_hcd: stop threads [ 138.628267][ T35] vhci_hcd: release socket [ 138.693291][ T35] vhci_hcd: disconnect device [ 139.024256][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 139.050683][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 139.217582][ T9] usb 1-1: USB disconnect, device number 2 [ 140.812860][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 140.812881][ T29] audit: type=1400 audit(1726602506.528:209): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 143.381475][ T5467] syz.0.35 (5467): drop_caches: 2 [ 143.686443][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.708953][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.859374][ T5277] vhci_hcd: vhci_device speed not set [ 144.486271][ T5476] FAULT_INJECTION: forcing a failure. [ 144.486271][ T5476] name failslab, interval 1, probability 0, space 0, times 0 [ 144.589252][ T5476] CPU: 1 UID: 0 PID: 5476 Comm: syz.3.37 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 144.601517][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 144.611632][ T5476] Call Trace: [ 144.614944][ T5476] [ 144.617905][ T5476] dump_stack_lvl+0x16c/0x1f0 [ 144.622633][ T5476] should_fail_ex+0x497/0x5b0 [ 144.627360][ T5476] ? fs_reclaim_acquire+0xae/0x160 [ 144.632527][ T5476] should_failslab+0xc2/0x120 [ 144.637248][ T5476] kmem_cache_alloc_node_noprof+0x71/0x310 [ 144.643120][ T5476] ? __alloc_skb+0x2b1/0x380 [ 144.647799][ T5476] __alloc_skb+0x2b1/0x380 [ 144.652268][ T5476] ? __pfx___alloc_skb+0x10/0x10 [ 144.657269][ T5476] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 144.663371][ T5476] netlink_alloc_large_skb+0x69/0x130 [ 144.668776][ T5476] netlink_sendmsg+0x689/0xd70 [ 144.673583][ T5476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.679440][ T5476] ? __import_iovec+0x1fd/0x6e0 [ 144.684391][ T5476] ____sys_sendmsg+0xaaf/0xc90 [ 144.689217][ T5476] ? copy_msghdr_from_user+0x10b/0x160 [ 144.694732][ T5476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.700168][ T5476] ? __pfx___lock_acquire+0x10/0x10 [ 144.705426][ T5476] ___sys_sendmsg+0x135/0x1e0 [ 144.710157][ T5476] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.715407][ T5476] ? find_held_lock+0x2d/0x110 [ 144.720239][ T5476] ? __pfx_lock_release+0x10/0x10 [ 144.725324][ T5476] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 144.731838][ T5476] ? __fget_light+0x173/0x210 [ 144.739680][ T5476] __sys_sendmmsg+0x1a1/0x450 [ 144.745715][ T5476] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.752041][ T5476] ? vfs_write+0x14d/0x1140 [ 144.757062][ T5476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.763659][ T5476] ? fput+0x30/0x390 [ 144.768318][ T5476] ? ksys_write+0x1ab/0x260 [ 144.772890][ T5476] ? __pfx_ksys_write+0x10/0x10 [ 144.777794][ T5476] __x64_sys_sendmmsg+0x9c/0x100 [ 144.782895][ T5476] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.788176][ T5476] do_syscall_64+0xcd/0x250 [ 144.792733][ T5476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.798716][ T5476] RIP: 0033:0x7fa20f57def9 [ 144.803288][ T5476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.823032][ T5476] RSP: 002b:00007fa210322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.831867][ T5476] RAX: ffffffffffffffda RBX: 00007fa20f735f80 RCX: 00007fa20f57def9 [ 144.840087][ T5476] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000003 [ 144.848821][ T5476] RBP: 00007fa210322090 R08: 0000000000000000 R09: 0000000000000000 [ 144.858333][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.868000][ T5476] R13: 0000000000000000 R14: 00007fa20f735f80 R15: 00007ffee8a2bc88 [ 144.876404][ T5476] [ 148.365472][ T29] audit: type=1400 audit(1726602514.078:210): avc: denied { create } for pid=5504 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.411100][ T29] audit: type=1400 audit(1726602514.108:211): avc: denied { getopt } for pid=5504 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.018566][ T5514] warning: `syz.0.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.575983][ T5521] capability: warning: `syz.4.46' uses 32-bit capabilities (legacy support in use) [ 149.691573][ T29] audit: type=1400 audit(1726602515.158:212): avc: denied { accept } for pid=5513 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.174544][ T29] audit: type=1400 audit(1726602515.168:213): avc: denied { write } for pid=5513 comm="syz.4.46" path="socket:[7105]" dev="sockfs" ino=7105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.259300][ T29] audit: type=1400 audit(1726602515.228:214): avc: denied { write } for pid=5513 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 150.319229][ T5524] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 150.385069][ T5524] netlink: 244 bytes leftover after parsing attributes in process `syz.1.47'. [ 150.399175][ T29] audit: type=1400 audit(1726602515.968:215): avc: denied { ioctl } for pid=5516 comm="syz.1.47" path="socket:[7888]" dev="sockfs" ino=7888 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.537077][ T29] audit: type=1400 audit(1726602516.008:216): avc: denied { ioctl } for pid=5516 comm="syz.1.47" path="socket:[7893]" dev="sockfs" ino=7893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.604071][ T5526] vlan2: entered promiscuous mode [ 150.619897][ T5526] vlan2: entered allmulticast mode [ 150.729527][ T29] audit: type=1400 audit(1726602516.018:217): avc: denied { getopt } for pid=5510 comm="syz.0.45" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.804601][ T29] audit: type=1400 audit(1726602516.048:218): avc: denied { read } for pid=5510 comm="syz.0.45" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.078151][ T29] audit: type=1400 audit(1726602516.048:219): avc: denied { open } for pid=5510 comm="syz.0.45" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 161.499964][ T5549] can: request_module (can-proto-4) failed. [ 164.555326][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.565964][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.574781][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.586173][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.602663][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.611442][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.689267][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 164.689292][ T29] audit: type=1400 audit(1726602530.398:228): avc: denied { mounton } for pid=5565 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 165.282700][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.329379][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.350411][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.370892][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.379141][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.409500][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.531767][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.549790][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.568278][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.578938][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.591539][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 165.600464][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.900793][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 165.958824][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.020495][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.031654][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.046633][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 166.055923][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 166.440967][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.480002][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.489570][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.510304][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.518422][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.530896][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.709425][ T5239] Bluetooth: hci5: command tx timeout [ 167.091836][ T1121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.314743][ T1121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.509371][ T5239] Bluetooth: hci1: command tx timeout [ 167.726230][ T1121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.759728][ T5239] Bluetooth: hci6: command tx timeout [ 167.974138][ T1121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.150317][ T5239] Bluetooth: hci7: command tx timeout [ 168.527077][ T5565] chnl_net:caif_netlink_parms(): no params data found [ 168.641607][ T5239] Bluetooth: hci0: command tx timeout [ 168.790240][ T5239] Bluetooth: hci5: command tx timeout [ 169.100008][ T1121] bridge_slave_1: left allmulticast mode [ 169.106371][ T1121] bridge_slave_1: left promiscuous mode [ 169.117012][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.138525][ T1121] bridge_slave_0: left allmulticast mode [ 169.144450][ T1121] bridge_slave_0: left promiscuous mode [ 169.151610][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.590695][ T5239] Bluetooth: hci1: command tx timeout [ 169.751678][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.766185][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.782059][ T1121] bond0 (unregistering): Released all slaves [ 169.829243][ T5239] Bluetooth: hci6: command tx timeout [ 169.942557][ T5574] chnl_net:caif_netlink_parms(): no params data found [ 169.966335][ T5565] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.975334][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.984380][ T5565] bridge_slave_0: entered allmulticast mode [ 169.993353][ T5565] bridge_slave_0: entered promiscuous mode [ 170.004158][ T5572] chnl_net:caif_netlink_parms(): no params data found [ 170.042321][ T5568] chnl_net:caif_netlink_parms(): no params data found [ 170.069928][ T5565] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.078708][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.087551][ T5565] bridge_slave_1: entered allmulticast mode [ 170.097094][ T5565] bridge_slave_1: entered promiscuous mode [ 170.229217][ T5239] Bluetooth: hci7: command tx timeout [ 170.338516][ T5565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.518555][ T5565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.711166][ T5239] Bluetooth: hci0: command tx timeout [ 170.867270][ T1121] hsr_slave_0: left promiscuous mode [ 170.874160][ T5239] Bluetooth: hci5: command tx timeout [ 170.883567][ T1121] hsr_slave_1: left promiscuous mode [ 170.893560][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.903110][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.913531][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.921478][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.958488][ T1121] veth1_macvtap: left promiscuous mode [ 170.965968][ T1121] veth0_macvtap: left promiscuous mode [ 170.973698][ T1121] veth1_vlan: left promiscuous mode [ 170.980860][ T1121] veth0_vlan: left promiscuous mode [ 171.680607][ T5239] Bluetooth: hci1: command tx timeout [ 171.826363][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 171.894397][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 171.924780][ T5239] Bluetooth: hci6: command tx timeout [ 172.311015][ T5239] Bluetooth: hci7: command tx timeout [ 172.533474][ T5570] chnl_net:caif_netlink_parms(): no params data found [ 172.649952][ T5565] team0: Port device team_slave_0 added [ 172.702600][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.710441][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.717756][ T5568] bridge_slave_0: entered allmulticast mode [ 172.726949][ T5568] bridge_slave_0: entered promiscuous mode [ 172.737348][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.748191][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.755904][ T5574] bridge_slave_0: entered allmulticast mode [ 172.765118][ T5574] bridge_slave_0: entered promiscuous mode [ 172.778483][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.786282][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.795618][ T5574] bridge_slave_1: entered allmulticast mode [ 172.799191][ T5239] Bluetooth: hci0: command tx timeout [ 172.805500][ T5574] bridge_slave_1: entered promiscuous mode [ 172.824979][ T5565] team0: Port device team_slave_1 added [ 172.902502][ T29] audit: type=1400 audit(1726602538.618:229): avc: denied { search } for pid=4887 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.917829][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.933489][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.941383][ T5568] bridge_slave_1: entered allmulticast mode [ 172.950226][ T5568] bridge_slave_1: entered promiscuous mode [ 172.961467][ T5239] Bluetooth: hci5: command tx timeout [ 172.969202][ T29] audit: type=1400 audit(1726602538.618:230): avc: denied { read } for pid=4887 comm="dhcpcd" name="n68" dev="tmpfs" ino=1972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 172.994250][ T29] audit: type=1400 audit(1726602538.618:231): avc: denied { open } for pid=4887 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.017595][ T29] audit: type=1400 audit(1726602538.618:232): avc: denied { getattr } for pid=4887 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.097670][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.110840][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.119840][ T5572] bridge_slave_0: entered allmulticast mode [ 173.128782][ T5572] bridge_slave_0: entered promiscuous mode [ 173.280872][ T5565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.292544][ T5565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.320202][ T5565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.335319][ T5565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.343050][ T5565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.370093][ T5565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.384276][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.396438][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.406071][ T5572] bridge_slave_1: entered allmulticast mode [ 173.417140][ T5572] bridge_slave_1: entered promiscuous mode [ 173.484840][ T5568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.508459][ T5568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.528517][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.771678][ T5239] Bluetooth: hci1: command tx timeout [ 173.894962][ T29] audit: type=1400 audit(1726602539.608:233): avc: denied { read } for pid=5608 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.965615][ T29] audit: type=1400 audit(1726602539.608:234): avc: denied { open } for pid=5608 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.007291][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.019867][ T5239] Bluetooth: hci6: command tx timeout [ 174.027069][ T29] audit: type=1400 audit(1726602539.608:235): avc: denied { getattr } for pid=5608 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.197683][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.244847][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.266907][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.287149][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.311740][ T5570] bridge_slave_0: entered allmulticast mode [ 174.334266][ T5570] bridge_slave_0: entered promiscuous mode [ 174.376255][ T5568] team0: Port device team_slave_0 added [ 174.391365][ T5239] Bluetooth: hci7: command tx timeout [ 174.396078][ T5568] team0: Port device team_slave_1 added [ 174.437836][ T29] audit: type=1400 audit(1726602540.148:236): avc: denied { write } for pid=5607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.472294][ T29] audit: type=1400 audit(1726602540.178:237): avc: denied { add_name } for pid=5607 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.521668][ T5574] team0: Port device team_slave_0 added [ 174.551672][ T29] audit: type=1400 audit(1726602540.178:238): avc: denied { create } for pid=5607 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.697850][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.719485][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.733333][ T5570] bridge_slave_1: entered allmulticast mode [ 174.752200][ T5570] bridge_slave_1: entered promiscuous mode [ 174.798060][ T5574] team0: Port device team_slave_1 added [ 174.826890][ T5565] hsr_slave_0: entered promiscuous mode [ 174.834662][ T5565] hsr_slave_1: entered promiscuous mode [ 174.844483][ T5565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.852806][ T5565] Cannot create hsr debugfs directory [ 174.879058][ T5239] Bluetooth: hci0: command tx timeout [ 174.897872][ T5572] team0: Port device team_slave_0 added [ 175.051931][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.059206][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.091415][ T5568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.153667][ T5572] team0: Port device team_slave_1 added [ 175.176444][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.193773][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.204137][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.212663][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.242536][ T5568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.294760][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.302389][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.336174][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.503905][ T5570] team0: Port device team_slave_0 added [ 175.514187][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.525684][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.563451][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.672450][ T5570] team0: Port device team_slave_1 added [ 175.818159][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.834393][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.876383][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.892849][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.911975][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.951647][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.016434][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.036726][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.082740][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.245858][ T1121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.303583][ T5568] hsr_slave_0: entered promiscuous mode [ 176.331033][ T5568] hsr_slave_1: entered promiscuous mode [ 176.359260][ T5568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.366994][ T5568] Cannot create hsr debugfs directory [ 176.408861][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.428309][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.457297][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.516925][ T5574] hsr_slave_0: entered promiscuous mode [ 176.528059][ T5574] hsr_slave_1: entered promiscuous mode [ 176.551868][ T5574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.577203][ T5574] Cannot create hsr debugfs directory [ 176.646297][ T1121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.852887][ T5572] hsr_slave_0: entered promiscuous mode [ 176.860622][ T5572] hsr_slave_1: entered promiscuous mode [ 176.867530][ T5572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.876526][ T5572] Cannot create hsr debugfs directory [ 176.934712][ T1121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.043867][ T5565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.197040][ T1121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.305289][ T5565] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.341760][ T5570] hsr_slave_0: entered promiscuous mode [ 177.348801][ T5570] hsr_slave_1: entered promiscuous mode [ 177.357250][ T5570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.364949][ T5570] Cannot create hsr debugfs directory [ 177.492065][ T5565] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.699895][ T5565] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.466701][ T1121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.663332][ T1121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.818374][ T1121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.963143][ T1121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.027988][ T5565] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.106930][ T5570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.154658][ T5565] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.195614][ T5565] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.214851][ T5565] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.264924][ T5570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.398224][ T5570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.576390][ T5570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.658853][ T1121] bridge_slave_1: left allmulticast mode [ 179.668300][ T1121] bridge_slave_1: left promiscuous mode [ 179.704106][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.722310][ T1121] bridge_slave_0: left allmulticast mode [ 179.728242][ T1121] bridge_slave_0: left promiscuous mode [ 179.745783][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.781154][ T1121] bridge_slave_1: left allmulticast mode [ 179.787749][ T1121] bridge_slave_1: left promiscuous mode [ 179.812078][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.836883][ T1121] bridge_slave_0: left allmulticast mode [ 179.847395][ T1121] bridge_slave_0: left promiscuous mode [ 179.854173][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.875513][ T1121] bridge_slave_1: left allmulticast mode [ 179.889153][ T1121] bridge_slave_1: left promiscuous mode [ 179.895316][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.930735][ T1121] bridge_slave_0: left allmulticast mode [ 179.939374][ T1121] bridge_slave_0: left promiscuous mode [ 179.956042][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.534050][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.551325][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.567427][ T1121] bond0 (unregistering): Released all slaves [ 181.729986][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.749761][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.772270][ T1121] bond0 (unregistering): Released all slaves [ 181.907132][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.928141][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.942192][ T1121] bond0 (unregistering): Released all slaves [ 182.238224][ T5565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.434158][ T5565] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.528736][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.536774][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.589598][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.597771][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.737733][ T5570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.779532][ T5570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.811929][ T5570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.916208][ T5570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.262397][ T5565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.519876][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 183.519898][ T29] audit: type=1400 audit(1726602549.238:243): avc: denied { sys_module } for pid=5565 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 183.769456][ T1121] hsr_slave_0: left promiscuous mode [ 183.779805][ T1121] hsr_slave_1: left promiscuous mode [ 183.815976][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.832316][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.851971][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.867183][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.896755][ T1121] hsr_slave_0: left promiscuous mode [ 183.906803][ T1121] hsr_slave_1: left promiscuous mode [ 183.935457][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.943642][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.961535][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.978573][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.993381][ T1121] hsr_slave_0: left promiscuous mode [ 184.015500][ T1121] hsr_slave_1: left promiscuous mode [ 184.028792][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.041680][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.052786][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.061704][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.221727][ T1121] veth1_macvtap: left promiscuous mode [ 184.227626][ T1121] veth0_macvtap: left promiscuous mode [ 184.253143][ T1121] veth1_vlan: left promiscuous mode [ 184.258774][ T1121] veth0_vlan: left promiscuous mode [ 184.272108][ T1121] veth1_macvtap: left promiscuous mode [ 184.277769][ T1121] veth0_macvtap: left promiscuous mode [ 184.294618][ T1121] veth1_vlan: left promiscuous mode [ 184.300383][ T1121] veth0_vlan: left promiscuous mode [ 184.322267][ T1121] veth1_macvtap: left promiscuous mode [ 184.327948][ T1121] veth0_macvtap: left promiscuous mode [ 184.347089][ T1121] veth1_vlan: left promiscuous mode [ 184.359265][ T1121] veth0_vlan: left promiscuous mode [ 185.618565][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 185.682819][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 186.960400][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 187.020430][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 188.173413][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 188.237254][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 189.376554][ T5565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.685347][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.754587][ T5568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.817922][ T5568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.890933][ T5568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.970392][ T5568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.029279][ T5565] veth0_vlan: entered promiscuous mode [ 190.084310][ T5570] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.198009][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.205381][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.228367][ T5565] veth1_vlan: entered promiscuous mode [ 190.305710][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.315029][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.563062][ T5565] veth0_macvtap: entered promiscuous mode [ 190.742753][ T5565] veth1_macvtap: entered promiscuous mode [ 190.752859][ T5572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.810503][ T5572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.835055][ T5572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.852338][ T5572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.101815][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.121670][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.136173][ T5565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.203619][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.216351][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.233853][ T5565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.284768][ T5568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.309588][ T5574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.362004][ T5565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.374733][ T5565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.386560][ T5565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.399746][ T5565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.421038][ T5574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.437754][ T5574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.472275][ T5574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.506026][ T5568] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.596738][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.604167][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.675733][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.713578][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.722351][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.985621][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.178674][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.202880][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.430018][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.456413][ T5570] veth0_vlan: entered promiscuous mode [ 192.530227][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.543912][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.604929][ T5570] veth1_vlan: entered promiscuous mode [ 192.632993][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.642206][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.697421][ T29] audit: type=1400 audit(1726602558.408:244): avc: denied { mount } for pid=5565 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.763422][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.780319][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.787602][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.067964][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.210757][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.219114][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.312123][ T5570] veth0_macvtap: entered promiscuous mode [ 193.398459][ T5570] veth1_macvtap: entered promiscuous mode [ 193.469599][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.476928][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.725384][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.748109][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.781342][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.793419][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.811106][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.025126][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.077501][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.108664][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.165894][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.182683][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.307805][ T5570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.348277][ T5570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.360906][ T5570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.369838][ T5570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.845437][ T5574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.893134][ T5568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.114024][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.319776][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.328796][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.691551][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.729323][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.833204][ T5568] veth0_vlan: entered promiscuous mode [ 195.986954][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.204493][ T5568] veth1_vlan: entered promiscuous mode [ 196.846516][ T29] audit: type=1400 audit(1726602562.208:245): avc: denied { name_bind } for pid=5748 comm="syz.0.59" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 197.446985][ T29] audit: type=1400 audit(1726602562.968:246): avc: denied { mount } for pid=5748 comm="syz.0.59" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 197.479945][ T29] audit: type=1400 audit(1726602563.078:247): avc: denied { read } for pid=5755 comm="syz.3.56" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.609079][ T29] audit: type=1400 audit(1726602563.078:248): avc: denied { open } for pid=5755 comm="syz.3.56" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.682388][ T5574] veth0_vlan: entered promiscuous mode [ 197.723849][ T5568] veth0_macvtap: entered promiscuous mode [ 197.751486][ T29] audit: type=1400 audit(1726602563.188:249): avc: denied { ioctl } for pid=5755 comm="syz.3.56" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.837360][ T29] audit: type=1400 audit(1726602563.188:250): avc: denied { set_context_mgr } for pid=5755 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 197.889626][ T5568] veth1_macvtap: entered promiscuous mode [ 197.898549][ T5574] veth1_vlan: entered promiscuous mode [ 197.941573][ T29] audit: type=1400 audit(1726602563.308:251): avc: denied { map } for pid=5755 comm="syz.3.56" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.965785][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.992395][ T29] audit: type=1400 audit(1726602563.548:252): avc: denied { create } for pid=5755 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 198.014148][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.108850][ T29] audit: type=1400 audit(1726602563.618:253): avc: denied { connect } for pid=5755 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 198.129002][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.187948][ T29] audit: type=1400 audit(1726602563.618:254): avc: denied { name_connect } for pid=5755 comm="syz.3.56" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 198.298667][ T29] audit: type=1400 audit(1726602563.698:255): avc: denied { shutdown } for pid=5755 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.383026][ T29] audit: type=1400 audit(1726602563.708:256): avc: denied { getopt } for pid=5755 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.491976][ T29] audit: type=1400 audit(1726602563.708:257): avc: denied { name_connect } for pid=5755 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 198.512688][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.534048][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.561138][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.604267][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.624731][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.635686][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.649314][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.665842][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.775391][ T5574] veth0_macvtap: entered promiscuous mode [ 198.858441][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.885917][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.928756][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.973692][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.027351][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.069034][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.096771][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.138877][ T5574] veth1_macvtap: entered promiscuous mode [ 199.206109][ T5778] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure [ 199.206454][ T5572] veth0_vlan: entered promiscuous mode [ 199.315569][ T5568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.315679][ T5568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.315726][ T5568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.315768][ T5568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.334723][ T29] audit: type=1400 audit(1726602565.048:258): avc: denied { bind } for pid=5777 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.638230][ T5572] veth1_vlan: entered promiscuous mode [ 199.684827][ T5239] Bluetooth: hci6: command tx timeout [ 199.731467][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.731742][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.731770][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.731796][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.731817][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.731836][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.731852][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.731870][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.751641][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.880435][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.880464][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.880479][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.880505][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.880519][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.880537][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.880553][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.880572][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.882725][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.887784][ T5574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.887834][ T5574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.887875][ T5574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.887915][ T5574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.363579][ T5572] veth0_macvtap: entered promiscuous mode [ 200.701041][ T5572] veth1_macvtap: entered promiscuous mode [ 200.721538][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.721575][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.213610][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.213636][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.213650][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.213667][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.213678][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.213695][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.213706][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.213722][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.213735][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.213751][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.215787][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.866975][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.867008][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.994604][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.994634][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.994651][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.994671][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.994686][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.994706][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.994721][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.994741][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.994757][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.994777][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.997187][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.027812][ T5572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.027880][ T5572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.027936][ T5572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.027993][ T5572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.113994][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.114024][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.422834][ T5783] netlink: 204 bytes leftover after parsing attributes in process `syz.3.62'. [ 202.612421][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.612455][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.659424][ T5801] FAULT_INJECTION: forcing a failure. [ 202.659424][ T5801] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 202.659594][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: syz.0.64 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 202.659628][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 202.659650][ T5801] Call Trace: [ 202.659661][ T5801] [ 202.659673][ T5801] dump_stack_lvl+0x16c/0x1f0 [ 202.659712][ T5801] should_fail_ex+0x497/0x5b0 [ 202.659757][ T5801] _copy_to_user+0x30/0xc0 [ 202.659805][ T5801] simple_read_from_buffer+0xd0/0x160 [ 202.659853][ T5801] proc_fail_nth_read+0x198/0x270 [ 202.659894][ T5801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.659939][ T5801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.659978][ T5801] vfs_read+0x1ce/0xbd0 [ 202.660015][ T5801] ? __fdget_pos+0xe8/0x170 [ 202.660050][ T5801] ? __pfx_vfs_read+0x10/0x10 [ 202.660081][ T5801] ? __pfx___mutex_lock+0x10/0x10 [ 202.660119][ T5801] ? __fget_files+0x244/0x3f0 [ 202.660166][ T5801] ksys_read+0x12f/0x260 [ 202.660198][ T5801] ? __pfx_ksys_read+0x10/0x10 [ 202.660242][ T5801] do_syscall_64+0xcd/0x250 [ 202.660275][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.660321][ T5801] RIP: 0033:0x7fb160f7c93c [ 202.660345][ T5801] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 202.660389][ T5801] RSP: 002b:00007fb161e55030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.660418][ T5801] RAX: ffffffffffffffda RBX: 00007fb161135f80 RCX: 00007fb160f7c93c [ 202.660439][ T5801] RDX: 000000000000000f RSI: 00007fb161e550a0 RDI: 0000000000000005 [ 202.660458][ T5801] RBP: 00007fb161e55090 R08: 0000000000000000 R09: 0000000000000000 [ 202.660478][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.660497][ T5801] R13: 0000000000000000 R14: 00007fb161135f80 R15: 00007ffdfb58d9f8 [ 202.660536][ T5801] [ 204.186950][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.186986][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.124966][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.125140][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.968035][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 208.968063][ T29] audit: type=1400 audit(1726602574.678:260): avc: denied { read write } for pid=5826 comm="syz.0.66" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.969076][ T29] audit: type=1400 audit(1726602574.678:261): avc: denied { open } for pid=5826 comm="syz.0.66" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.981629][ T29] audit: type=1400 audit(1726602574.698:262): avc: denied { ioctl } for pid=5826 comm="syz.0.66" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 209.059157][ T5553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.059189][ T5553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.129749][ T5827] input: syz1 as /devices/virtual/input/input5 [ 209.135544][ T29] audit: type=1400 audit(1726602574.848:263): avc: denied { read } for pid=4658 comm="acpid" name="event4" dev="devtmpfs" ino=2775 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.138238][ T29] audit: type=1400 audit(1726602574.848:264): avc: denied { open } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2775 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.138350][ T29] audit: type=1400 audit(1726602574.848:265): avc: denied { ioctl } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2775 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.530946][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 214.574046][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.578142][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.580932][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.607285][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.622111][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.625290][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.650325][ T29] audit: type=1400 audit(1726602580.358:266): avc: denied { rename } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.650432][ T29] audit: type=1400 audit(1726602580.358:267): avc: denied { unlink } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.650524][ T29] audit: type=1400 audit(1726602580.358:268): avc: denied { create } for pid=4655 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.090958][ T5778] tty tty2: ldisc open failed (-12), clearing slot 1 [ 215.121210][ T5804] tty tty1: ldisc open failed (-12), clearing slot 0 [ 216.709409][ T5243] Bluetooth: hci2: command tx timeout [ 216.774133][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.791478][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.825826][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.849499][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.861436][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.873960][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.085462][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.499935][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.825537][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.305506][ T29] audit: type=1400 audit(1726602584.018:269): avc: denied { setopt } for pid=5876 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 218.373989][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.794840][ T5243] Bluetooth: hci2: command tx timeout [ 219.080191][ T5243] Bluetooth: hci1: command tx timeout [ 219.229129][ T5891] netlink: 'syz.4.73': attribute type 4 has an invalid length. [ 219.736857][ T5895] netlink: 'syz.4.73': attribute type 4 has an invalid length. [ 220.870853][ T5243] Bluetooth: hci2: command tx timeout [ 221.113652][ T5243] Bluetooth: hci1: command tx timeout [ 222.540049][ T62] bridge_slave_1: left allmulticast mode [ 222.553965][ T62] bridge_slave_1: left promiscuous mode [ 222.609986][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.688539][ T62] bridge_slave_0: left allmulticast mode [ 222.710923][ T62] bridge_slave_0: left promiscuous mode [ 222.716931][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.759191][ T5243] Bluetooth: hci2: command tx timeout [ 223.764696][ T5243] Bluetooth: hci1: command tx timeout [ 225.389630][ T5695] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 225.631070][ T5695] usb 1-1: not running at top speed; connect to a high speed hub [ 225.689074][ T5695] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 225.697254][ T5695] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 225.717878][ T5695] usb 1-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 225.730504][ T5695] usb 1-1: config 0 has no interface number 0 [ 225.736742][ T5695] usb 1-1: config 0 interface 56 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 225.769158][ T5695] usb 1-1: config 0 interface 56 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 225.823944][ T5695] usb 1-1: config 0 interface 56 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 225.841599][ T5239] Bluetooth: hci1: command tx timeout [ 225.863958][ T5695] usb 1-1: config 0 interface 56 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 225.879080][ T5695] usb 1-1: config 0 interface 56 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 225.893274][ T5695] usb 1-1: config 0 interface 56 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 225.905298][ T5695] usb 1-1: config 0 interface 56 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 225.917268][ T5695] usb 1-1: config 0 interface 56 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 225.931559][ T5695] usb 1-1: config 0 interface 56 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 225.942817][ T5695] usb 1-1: config 0 interface 56 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 225.955864][ T5695] usb 1-1: config 0 interface 56 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 225.967952][ T5695] usb 1-1: config 0 interface 56 has no altsetting 0 [ 225.979204][ T5695] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=17.26 [ 225.988821][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.999848][ T5695] usb 1-1: Product: syz [ 226.004177][ T5695] usb 1-1: Manufacturer: ࠚ [ 226.013032][ T5695] usb 1-1: SerialNumber: syz [ 226.043619][ T5695] usb 1-1: config 0 descriptor?? [ 226.055117][ T5941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.068571][ T5941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.347929][ T5695] qmi_wwan 1-1:0.56: bogus CDC Union: master=0, slave=1 [ 226.361980][ T5695] qmi_wwan 1-1:0.56: probe with driver qmi_wwan failed with error -22 [ 226.406651][ T5695] usb 1-1: USB disconnect, device number 3 [ 226.549909][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.564188][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.580044][ T62] bond0 (unregistering): Released all slaves [ 226.696270][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 227.641624][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 228.135819][ T62] hsr_slave_0: left promiscuous mode [ 228.160978][ T62] hsr_slave_1: left promiscuous mode [ 228.174789][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.182639][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.197565][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.228177][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.293138][ T5971] netlink: 'syz.0.81': attribute type 2 has an invalid length. [ 228.315588][ T62] veth1_macvtap: left promiscuous mode [ 228.322722][ T62] veth0_macvtap: left promiscuous mode [ 228.331699][ T62] veth1_vlan: left promiscuous mode [ 228.340187][ T62] veth0_vlan: left promiscuous mode [ 229.342802][ T62] team0 (unregistering): Port device team_slave_1 removed [ 229.454792][ T62] team0 (unregistering): Port device team_slave_0 removed [ 229.597206][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.616290][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.637641][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.649562][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.658076][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.667772][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.266571][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.285261][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.293612][ T5856] bridge_slave_0: entered allmulticast mode [ 230.307704][ T5856] bridge_slave_0: entered promiscuous mode [ 230.447585][ T5971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.81'. [ 230.542005][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.599260][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.606649][ T5856] bridge_slave_1: entered allmulticast mode [ 230.653415][ T5856] bridge_slave_1: entered promiscuous mode [ 231.031976][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.064902][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.079119][ T944] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 231.093658][ T5867] bridge_slave_0: entered allmulticast mode [ 231.139614][ T5867] bridge_slave_0: entered promiscuous mode [ 231.173315][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.247934][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.282261][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.309390][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.340038][ T944] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 231.359515][ T5867] bridge_slave_1: entered allmulticast mode [ 231.385895][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.404262][ T5867] bridge_slave_1: entered promiscuous mode [ 231.445119][ T944] usb 1-1: config 0 descriptor?? [ 231.759051][ T5239] Bluetooth: hci3: command tx timeout [ 232.211320][ T5996] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.83'. [ 232.233723][ T29] audit: type=1400 audit(1726602597.938:270): avc: denied { map } for pid=5994 comm="syz.4.84" path="/dev/radio7" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 232.316415][ T29] audit: type=1400 audit(1726602598.008:271): avc: denied { create } for pid=5994 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.318349][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.406746][ T944] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 232.434456][ T944] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 232.496943][ T944] [drm:udl_init] *ERROR* Selecting channel failed [ 232.511271][ T5856] team0: Port device team_slave_0 added [ 232.557129][ T5856] team0: Port device team_slave_1 added [ 232.594957][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.623940][ T944] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 232.664282][ T944] [drm] Initialized udl on minor 2 [ 232.683069][ T944] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.706737][ T29] audit: type=1400 audit(1726602598.418:272): avc: denied { bind } for pid=6000 comm="syz.4.85" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.740075][ T944] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 232.765017][ T5181] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.797923][ T944] usb 1-1: USB disconnect, device number 4 [ 232.805763][ T5181] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 233.367825][ T29] audit: type=1400 audit(1726602598.448:273): avc: denied { name_bind } for pid=6000 comm="syz.4.85" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 233.436941][ T29] audit: type=1400 audit(1726602598.448:274): avc: denied { node_bind } for pid=6000 comm="syz.4.85" saddr=fc02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 233.939781][ T5239] Bluetooth: hci3: command tx timeout [ 233.954450][ T29] audit: type=1400 audit(1726602598.838:275): avc: denied { connect } for pid=6000 comm="syz.4.85" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.024369][ T29] audit: type=1400 audit(1726602598.838:276): avc: denied { write } for pid=6000 comm="syz.4.85" laddr=172.20.20.170 lport=255 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.259797][ T29] audit: type=1400 audit(1726602599.968:277): avc: denied { getopt } for pid=6007 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.411028][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.440702][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.495631][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.531128][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.542671][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.575465][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.628119][ T5867] team0: Port device team_slave_0 added [ 235.828524][ T5867] team0: Port device team_slave_1 added [ 235.981134][ T5856] hsr_slave_0: entered promiscuous mode [ 235.989301][ T5239] Bluetooth: hci3: command tx timeout [ 236.007386][ T5856] hsr_slave_1: entered promiscuous mode [ 236.100805][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.114598][ T5856] Cannot create hsr debugfs directory [ 236.286954][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.295593][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.367045][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.609998][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.843245][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.962213][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.000798][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.059542][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.528927][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.950777][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.074736][ T5239] Bluetooth: hci3: command tx timeout [ 238.217159][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 238.382718][ T5867] hsr_slave_0: entered promiscuous mode [ 238.408621][ T5867] hsr_slave_1: entered promiscuous mode [ 238.446976][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.460465][ T5867] Cannot create hsr debugfs directory [ 239.961670][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.974475][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.989804][ T5974] bridge_slave_0: entered allmulticast mode [ 240.002253][ T5974] bridge_slave_0: entered promiscuous mode [ 240.030051][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.037474][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.075319][ T5974] bridge_slave_1: entered allmulticast mode [ 240.086858][ T5974] bridge_slave_1: entered promiscuous mode [ 240.226850][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.653120][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.715097][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.762837][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.911538][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.545913][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.629120][ T5974] team0: Port device team_slave_0 added [ 241.706750][ T5974] team0: Port device team_slave_1 added [ 243.170186][ T29] audit: type=1400 audit(1726602608.868:278): avc: denied { accept } for pid=6074 comm="syz.0.95" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.192124][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.211800][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.339396][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.416751][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.439774][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.468434][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.139637][ T11] bridge_slave_1: left allmulticast mode [ 245.145319][ T11] bridge_slave_1: left promiscuous mode [ 245.156609][ T29] audit: type=1400 audit(1726602610.868:279): avc: denied { mounton } for pid=6083 comm="syz.4.97" path="/16/file0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.179634][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.193187][ T6085] 9pnet_fd: Insufficient options for proto=fd [ 245.212286][ T11] bridge_slave_0: left allmulticast mode [ 245.218008][ T11] bridge_slave_0: left promiscuous mode [ 245.238261][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.262056][ T11] bridge_slave_1: left allmulticast mode [ 245.268368][ T11] bridge_slave_1: left promiscuous mode [ 245.284845][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.301410][ T11] bridge_slave_0: left allmulticast mode [ 245.307386][ T11] bridge_slave_0: left promiscuous mode [ 245.318392][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.025399][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.046344][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.059369][ T11] bond0 (unregistering): Released all slaves [ 247.383386][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.432882][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.457341][ T11] bond0 (unregistering): Released all slaves [ 248.071603][ T5974] hsr_slave_0: entered promiscuous mode [ 248.087017][ T5974] hsr_slave_1: entered promiscuous mode [ 248.100635][ T5974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.108342][ T5974] Cannot create hsr debugfs directory [ 248.237743][ T6099] syz.0.100 uses obsolete (PF_INET,SOCK_PACKET) [ 249.380614][ T6099] syzkaller1: entered promiscuous mode [ 249.391858][ T6099] syzkaller1: entered allmulticast mode [ 249.723188][ T6111] Zero length message leads to an empty skb [ 250.798883][ T29] audit: type=1400 audit(1726602616.508:280): avc: denied { create } for pid=6112 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.214089][ T11] hsr_slave_0: left promiscuous mode [ 251.230747][ T11] hsr_slave_1: left promiscuous mode [ 251.250535][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.258063][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.297485][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.315013][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.327406][ T6129] PKCS7: Unknown OID: [4] 2.19.1658752.0.0.0.0 [ 251.342580][ T6129] PKCS7: Only support pkcs7_signedData type [ 251.377850][ T11] hsr_slave_0: left promiscuous mode [ 251.414169][ T11] hsr_slave_1: left promiscuous mode [ 251.459199][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.479208][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.501299][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.520537][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.650354][ T11] veth1_macvtap: left promiscuous mode [ 251.656013][ T11] veth0_macvtap: left promiscuous mode [ 251.678751][ T11] veth1_vlan: left promiscuous mode [ 251.696028][ T11] veth0_vlan: left promiscuous mode [ 251.719857][ T11] veth1_macvtap: left promiscuous mode [ 251.736523][ T11] veth0_macvtap: left promiscuous mode [ 251.747776][ T11] veth1_vlan: left promiscuous mode [ 251.759955][ T11] veth0_vlan: left promiscuous mode [ 253.754785][ T11] team0 (unregistering): Port device team_slave_1 removed [ 253.848708][ T11] team0 (unregistering): Port device team_slave_0 removed [ 253.903515][ T6144] netlink: 1 bytes leftover after parsing attributes in process `syz.4.107'. [ 253.914448][ T6144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.107'. [ 255.071740][ T11] team0 (unregistering): Port device team_slave_1 removed [ 255.141160][ T11] team0 (unregistering): Port device team_slave_0 removed [ 255.923012][ T6144] netlink: 1 bytes leftover after parsing attributes in process `syz.4.107'. [ 255.954432][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.999131][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.347282][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.381151][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.421423][ T6152] xt_TCPMSS: Only works on TCP SYN packets [ 256.616447][ T6151] netlink: 'syz.4.108': attribute type 4 has an invalid length. [ 256.791622][ T6147] netlink: 'syz.4.108': attribute type 4 has an invalid length. [ 258.674630][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.725807][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.886814][ T5556] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.895743][ T5556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.071139][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.078363][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.284331][ T5239] Bluetooth: to_multiplier 0 < 10 [ 261.639114][ T5181] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 261.671562][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.712441][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.773265][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.844133][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.884273][ T5181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.949038][ T5181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.984289][ T5181] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 262.018701][ T5181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.083202][ T5181] usb 5-1: config 0 descriptor?? [ 263.315245][ T5974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.351611][ T5239] Bluetooth: hci7: command tx timeout [ 263.390774][ T5181] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 263.405692][ T5181] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 263.417011][ T5181] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 263.425656][ T5181] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 263.433650][ T5181] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 263.444808][ T5974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.456068][ T5181] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 263.468708][ T5181] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 263.555996][ T5974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.623524][ T5974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.729598][ T46] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 263.807274][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.896223][ C0] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71 [ 263.940455][ T5181] usb 5-1: USB disconnect, device number 2 [ 263.964665][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.969328][ T46] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 263.990970][ T46] usb 1-1: config 0 has no interface number 0 [ 263.997355][ T46] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid maxpacket 2047, setting to 64 [ 264.060752][ T46] usb 1-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 264.080859][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.099378][ T46] usb 1-1: Product: syz [ 264.105087][ T46] usb 1-1: Manufacturer: syz [ 264.124953][ T46] usb 1-1: SerialNumber: syz [ 264.147151][ T46] usb 1-1: config 0 descriptor?? [ 264.170990][ T6196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 264.176392][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.272749][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.281618][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.392094][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.399752][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.439750][ T5856] veth0_vlan: entered promiscuous mode [ 264.563055][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.610854][ T5856] veth1_vlan: entered promiscuous mode [ 264.636679][ T46] usb 1-1: USB disconnect, device number 5 [ 264.780770][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.841396][ T29] audit: type=1400 audit(1726602630.558:281): avc: denied { create } for pid=6197 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 264.898465][ T29] audit: type=1400 audit(1726602630.578:282): avc: denied { connect } for pid=6197 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 264.909992][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.006466][ T29] audit: type=1400 audit(1726602630.648:283): avc: denied { listen } for pid=6197 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 265.115501][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.122818][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.192845][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.200153][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.274948][ T5856] veth0_macvtap: entered promiscuous mode [ 265.348548][ T5856] veth1_macvtap: entered promiscuous mode [ 265.430625][ T29] audit: type=1400 audit(1726602631.148:284): avc: denied { connect } for pid=6207 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.503055][ T29] audit: type=1400 audit(1726602631.188:285): avc: denied { shutdown } for pid=6207 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.596515][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.629564][ T29] audit: type=1400 audit(1726602631.188:286): avc: denied { write } for pid=6207 comm="syz.0.117" path="socket:[14771]" dev="sockfs" ino=14771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.660538][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.671289][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.697672][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.732521][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.776872][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.788480][ T6215] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.118'. [ 265.802792][ T6215] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 265.833159][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.982482][ T5974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.028589][ T5974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.101706][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.115169][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.134807][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.169426][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.208263][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.220291][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.255480][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.294996][ T6217] netlink: 'syz.0.119': attribute type 4 has an invalid length. [ 266.392859][ T6214] netlink: 'syz.0.119': attribute type 4 has an invalid length. [ 266.409220][ T5278] IPVS: starting estimator thread 0... [ 266.485422][ T6227] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 266.496230][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.525399][ T6228] IPVS: using max 16 ests per chain, 38400 per kthread [ 266.529012][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.557775][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.566873][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.589907][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.624081][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.733713][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.300073][ T5556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.326911][ T5556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.368191][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.419112][ T5278] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 267.477357][ T5867] veth0_vlan: entered promiscuous mode [ 267.558724][ T5552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.578392][ T5552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.659234][ T5278] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 267.691648][ T5867] veth1_vlan: entered promiscuous mode [ 267.700211][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.745969][ T5278] usb 1-1: config 0 descriptor?? [ 268.216581][ T5974] veth0_vlan: entered promiscuous mode [ 269.385210][ T5867] veth0_macvtap: entered promiscuous mode [ 269.484245][ T6256] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.121'. [ 269.496814][ T5867] veth1_macvtap: entered promiscuous mode [ 269.552969][ T5974] veth1_vlan: entered promiscuous mode [ 269.693745][ C1] hrtimer: interrupt took 283603 ns [ 269.801021][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.831977][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.871107][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.898722][ T5278] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 269.912563][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.944573][ T5278] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 269.973625][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.987517][ T5278] [drm:udl_init] *ERROR* Selecting channel failed [ 270.018672][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.070776][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.103194][ T5181] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 270.122840][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.162339][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.170679][ T5278] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 270.184102][ T5278] [drm] Initialized udl on minor 2 [ 270.212709][ T5278] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 270.254401][ T5278] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 270.270796][ T5280] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 270.320038][ T5181] usb 4-1: Using ep0 maxpacket: 32 [ 270.355072][ T5278] usb 1-1: USB disconnect, device number 6 [ 270.363233][ T5280] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 270.377973][ T5181] usb 4-1: config 0 has no interfaces? [ 270.427889][ T5181] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 270.439063][ T5280] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 270.439858][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.508375][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.518081][ T5181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.565806][ T5181] usb 4-1: Product: syz [ 270.582007][ T5181] usb 4-1: Manufacturer: syz [ 270.593940][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.623203][ T5181] usb 4-1: SerialNumber: syz [ 270.692982][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.759586][ T5181] usb 4-1: config 0 descriptor?? [ 270.777244][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.854003][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.887235][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.920089][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.947195][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.049757][ T29] audit: type=1400 audit(1726602636.758:287): avc: denied { read } for pid=6258 comm="syz.3.123" name="mouse0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 271.125486][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.180001][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.242341][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.245797][ T29] audit: type=1400 audit(1726602636.758:288): avc: denied { open } for pid=6258 comm="syz.3.123" path="/dev/input/mouse0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 271.339833][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.361717][ T5313] usb 4-1: USB disconnect, device number 2 [ 271.394822][ T5974] veth0_macvtap: entered promiscuous mode [ 271.664788][ T5974] veth1_macvtap: entered promiscuous mode [ 272.087022][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.175749][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.249290][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.329224][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.358772][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.417564][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.468543][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.566158][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.621347][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.670474][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.744029][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.932122][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.009153][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.031248][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.049200][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.060669][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.068141][ T29] audit: type=1400 audit(1726602638.758:289): avc: denied { bind } for pid=6294 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.071286][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.071316][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.149731][ T6287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.156587][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.167911][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.207243][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.236742][ T29] audit: type=1400 audit(1726602638.848:290): avc: denied { listen } for pid=6294 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.281154][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.288233][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 273.318695][ T29] audit: type=1400 audit(1726602638.898:291): avc: denied { accept } for pid=6294 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.482823][ T5974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.514919][ T5974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.555824][ T5974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.598154][ T5974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.687470][ T6302] xt_TCPMSS: Only works on TCP SYN packets [ 273.754604][ T6297] sctp: failed to load transform for md5: -2 [ 273.854825][ T2539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.904180][ T2539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.740481][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.748630][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.682547][ T6320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.135727][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.207353][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.465785][ T6340] xt_TCPMSS: Only works on TCP SYN packets [ 278.594935][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.643243][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.819776][ T5280] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 278.820469][ T29] audit: type=1400 audit(1726602644.518:292): avc: denied { write } for pid=6331 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.820695][ T29] audit: type=1400 audit(1726602644.528:293): avc: denied { nlmsg_write } for pid=6331 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.821734][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 279.032954][ T5280] usb 1-1: not running at top speed; connect to a high speed hub [ 279.051258][ T5280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 279.051303][ T5280] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.054958][ T5280] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40 [ 279.054993][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.055019][ T5280] usb 1-1: Product: syz [ 279.055037][ T5280] usb 1-1: Manufacturer: syz [ 279.055056][ T5280] usb 1-1: SerialNumber: syz [ 279.116604][ T6338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.639775][ T6338] xt_l2tp: unknown flags: 19 [ 279.790314][ T5280] usbhid 1-1:1.0: can't add hid device: -71 [ 279.790516][ T5280] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 279.891786][ T5280] usb 1-1: USB disconnect, device number 7 [ 280.434196][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.448623][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.485970][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.496349][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.506160][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.513832][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.733584][ T6362] FAULT_INJECTION: forcing a failure. [ 280.733584][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.733703][ T6362] [ 280.733709][ T6362] ====================================================== [ 280.733716][ T6362] WARNING: possible circular locking dependency detected [ 280.733735][ T6362] 6.11.0-syzkaller-02574-ga430d95c5efa #0 Not tainted [ 280.733748][ T6362] ------------------------------------------------------ [ 280.733755][ T6362] syz.3.136/6362 is trying to acquire lock: [ 280.733766][ T6362] ffffffff8dda86f8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x12/0x70 [ 280.733826][ T6362] [ 280.733826][ T6362] but task is already holding lock: [ 280.733832][ T6362] ffff8880b883eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 280.733895][ T6362] [ 280.733895][ T6362] which lock already depends on the new lock. [ 280.733895][ T6362] [ 280.733901][ T6362] [ 280.733901][ T6362] the existing dependency chain (in reverse order) is: [ 280.733908][ T6362] [ 280.733908][ T6362] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 280.733935][ T6362] _raw_spin_lock_nested+0x31/0x40 [ 280.733967][ T6362] raw_spin_rq_lock_nested+0x29/0x130 [ 280.734003][ T6362] task_fork_fair+0x73/0x250 [ 280.734033][ T6362] sched_cgroup_fork+0x3cf/0x510 [ 280.734058][ T6362] copy_process+0x439b/0x8dd0 [ 280.734085][ T6362] kernel_clone+0xfd/0x960 [ 280.734112][ T6362] user_mode_thread+0xb4/0xf0 [ 280.734140][ T6362] rest_init+0x23/0x2b0 [ 280.734164][ T6362] start_kernel+0x3e4/0x4d0 [ 280.734200][ T6362] x86_64_start_reservations+0x18/0x30 [ 280.734236][ T6362] x86_64_start_kernel+0xb2/0xc0 [ 280.734271][ T6362] common_startup_64+0x13e/0x148 [ 280.734295][ T6362] [ 280.734295][ T6362] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 280.734321][ T6362] _raw_spin_lock_irqsave+0x3a/0x60 [ 280.734353][ T6362] try_to_wake_up+0x9a/0x13e0 [ 280.734386][ T6362] up+0x79/0xb0 [ 280.734406][ T6362] console_unlock+0x23e/0x290 [ 280.734429][ T6362] con_install+0x161/0x600 [ 280.734457][ T6362] tty_init_dev.part.0+0x99/0x660 [ 280.734489][ T6362] tty_open+0xac1/0xf80 [ 280.734518][ T6362] chrdev_open+0x237/0x6a0 [ 280.734545][ T6362] do_dentry_open+0x6ca/0x1530 [ 280.734572][ T6362] vfs_open+0x82/0x3f0 [ 280.734601][ T6362] path_openat+0x1e6a/0x2d60 [ 280.734627][ T6362] do_filp_open+0x1dc/0x430 [ 280.734652][ T6362] do_sys_openat2+0x17a/0x1e0 [ 280.734683][ T6362] __x64_sys_openat+0x175/0x210 [ 280.734717][ T6362] do_syscall_64+0xcd/0x250 [ 280.734737][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.734783][ T6362] [ 280.734783][ T6362] -> #0 ((console_sem).lock){-...}-{2:2}: [ 280.734811][ T6362] __lock_acquire+0x24ed/0x3cb0 [ 280.734841][ T6362] lock_acquire+0x1b1/0x560 [ 280.734870][ T6362] _raw_spin_lock_irqsave+0x3a/0x60 [ 280.734900][ T6362] down_trylock+0x12/0x70 [ 280.734919][ T6362] __down_trylock_console_sem+0x40/0x140 [ 280.734951][ T6362] vprintk_emit+0x3d3/0x600 [ 280.734972][ T6362] vprintk+0x7f/0xa0 [ 280.734993][ T6362] _printk+0xc8/0x100 [ 280.735022][ T6362] should_fail_ex+0x46c/0x5b0 [ 280.735048][ T6362] strncpy_from_user+0x38/0x320 [ 280.735072][ T6362] strncpy_from_user_nofault+0x7f/0x180 [ 280.735095][ T6362] bpf_probe_read_compat_str+0xf1/0x170 [ 280.735123][ T6362] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 280.735140][ T6362] bpf_trace_run4+0x245/0x5a0 [ 280.735167][ T6362] __bpf_trace_sched_switch+0x13e/0x190 [ 280.735187][ T6362] __schedule+0x17cf/0x5490 [ 280.735216][ T6362] schedule+0xe7/0x350 [ 280.735244][ T6362] schedule_hrtimeout_range_clock+0x3c7/0x430 [ 280.735274][ T6362] poll_schedule_timeout.constprop.0+0xba/0x190 [ 280.735297][ T6362] do_select+0x12ec/0x17b0 [ 280.735316][ T6362] core_sys_select+0x459/0xb80 [ 280.735343][ T6362] do_pselect.constprop.0+0x1a0/0x1f0 [ 280.735367][ T6362] __x64_sys_pselect6+0x183/0x240 [ 280.735388][ T6362] do_syscall_64+0xcd/0x250 [ 280.735406][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.735453][ T6362] [ 280.735453][ T6362] other info that might help us debug this: [ 280.735453][ T6362] [ 280.735459][ T6362] Chain exists of: [ 280.735459][ T6362] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 280.735459][ T6362] [ 280.735486][ T6362] Possible unsafe locking scenario: [ 280.735486][ T6362] [ 280.735491][ T6362] CPU0 CPU1 [ 280.735496][ T6362] ---- ---- [ 280.735501][ T6362] lock(&rq->__lock); [ 280.735512][ T6362] lock(&p->pi_lock); [ 280.735525][ T6362] lock(&rq->__lock); [ 280.735537][ T6362] lock((console_sem).lock); [ 280.735548][ T6362] [ 280.735548][ T6362] *** DEADLOCK *** [ 280.735548][ T6362] [ 280.735552][ T6362] 2 locks held by syz.3.136/6362: [ 280.735565][ T6362] #0: ffff8880b883eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 280.735624][ T6362] #1: ffffffff8ddba6a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 280.735679][ T6362] [ 280.735679][ T6362] stack backtrace: [ 280.735685][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.3.136 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 280.735711][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 280.735724][ T6362] Call Trace: [ 280.735731][ T6362] [ 280.735739][ T6362] dump_stack_lvl+0x116/0x1f0 [ 280.735765][ T6362] check_noncircular+0x31a/0x400 [ 280.735802][ T6362] ? __pfx_check_noncircular+0x10/0x10 [ 280.735835][ T6362] ? __pfx__prb_read_valid+0x10/0x10 [ 280.735864][ T6362] ? __pfx_format_decode+0x10/0x10 [ 280.735898][ T6362] ? lockdep_lock+0xc6/0x200 [ 280.735924][ T6362] ? __pfx_lockdep_lock+0x10/0x10 [ 280.735954][ T6362] __lock_acquire+0x24ed/0x3cb0 [ 280.735993][ T6362] ? __pfx___lock_acquire+0x10/0x10 [ 280.736028][ T6362] ? vprintk_store+0x22a/0xb70 [ 280.736052][ T6362] lock_acquire+0x1b1/0x560 [ 280.736085][ T6362] ? down_trylock+0x12/0x70 [ 280.736109][ T6362] ? __pfx_lock_acquire+0x10/0x10 [ 280.736141][ T6362] ? __pfx_mark_lock+0x10/0x10 [ 280.736175][ T6362] ? hlock_class+0x4e/0x130 [ 280.736202][ T6362] ? vprintk+0x7f/0xa0 [ 280.736227][ T6362] _raw_spin_lock_irqsave+0x3a/0x60 [ 280.736259][ T6362] ? down_trylock+0x12/0x70 [ 280.736281][ T6362] down_trylock+0x12/0x70 [ 280.736304][ T6362] __down_trylock_console_sem+0x40/0x140 [ 280.736341][ T6362] vprintk_emit+0x3d3/0x600 [ 280.736368][ T6362] vprintk+0x7f/0xa0 [ 280.736393][ T6362] _printk+0xc8/0x100 [ 280.736425][ T6362] ? __pfx__printk+0x10/0x10 [ 280.736458][ T6362] ? ___ratelimit+0x24c/0x580 [ 280.736479][ T6362] ? hlock_class+0x4e/0x130 [ 280.736514][ T6362] ? __pfx____ratelimit+0x10/0x10 [ 280.736537][ T6362] should_fail_ex+0x46c/0x5b0 [ 280.736565][ T6362] strncpy_from_user+0x38/0x320 [ 280.736592][ T6362] strncpy_from_user_nofault+0x7f/0x180 [ 280.736616][ T6362] bpf_probe_read_compat_str+0xf1/0x170 [ 280.736645][ T6362] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 280.736661][ T6362] bpf_trace_run4+0x245/0x5a0 [ 280.736689][ T6362] ? __pfx_bpf_trace_run4+0x10/0x10 [ 280.736724][ T6362] __bpf_trace_sched_switch+0x13e/0x190 [ 280.736745][ T6362] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 280.736770][ T6362] ? psi_task_switch+0x2d9/0x900 [ 280.736803][ T6362] __schedule+0x17cf/0x5490 [ 280.736832][ T6362] ? __pfx___lock_acquire+0x10/0x10 [ 280.736869][ T6362] ? __pfx___schedule+0x10/0x10 [ 280.736899][ T6362] ? schedule+0x298/0x350 [ 280.736928][ T6362] ? __pfx_lock_release+0x10/0x10 [ 280.736963][ T6362] schedule+0xe7/0x350 [ 280.736993][ T6362] schedule_hrtimeout_range_clock+0x3c7/0x430 [ 280.737023][ T6362] ? __pfx_lock_release+0x10/0x10 [ 280.737052][ T6362] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 280.737091][ T6362] poll_schedule_timeout.constprop.0+0xba/0x190 [ 280.737116][ T6362] do_select+0x12ec/0x17b0 [ 280.737149][ T6362] ? __pfx_do_select+0x10/0x10 [ 280.737169][ T6362] ? mark_lock+0xb5/0xc60 [ 280.737196][ T6362] ? hlock_class+0x4e/0x130 [ 280.737219][ T6362] ? mark_lock+0xb5/0xc60 [ 280.737250][ T6362] ? __pfx_pollwake+0x10/0x10 [ 280.737272][ T6362] ? __pfx_pollwake+0x10/0x10 [ 280.737294][ T6362] ? __pfx_pollwake+0x10/0x10 [ 280.737316][ T6362] ? __pfx_pollwake+0x10/0x10 [ 280.737338][ T6362] ? __pfx_pollwake+0x10/0x10 [ 280.737360][ T6362] ? __pfx_pollwake+0x10/0x10 [ 280.737390][ T6362] ? __pfx___might_resched+0x10/0x10 [ 280.737411][ T6362] ? __pfx_lock_release+0x10/0x10 [ 280.737441][ T6362] ? __might_fault+0xe3/0x190 [ 280.737472][ T6362] ? core_sys_select+0x459/0xb80 [ 280.737494][ T6362] core_sys_select+0x459/0xb80 [ 280.737520][ T6362] ? __pfx_core_sys_select+0x10/0x10 [ 280.737542][ T6362] ? get_pid_task+0xfc/0x250 [ 280.737584][ T6362] ? set_user_sigmask+0x217/0x2a0 [ 280.737604][ T6362] ? __pfx_set_user_sigmask+0x10/0x10 [ 280.737627][ T6362] do_pselect.constprop.0+0x1a0/0x1f0 [ 280.737652][ T6362] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 280.737676][ T6362] ? __fget_files+0x244/0x3f0 [ 280.737702][ T6362] __x64_sys_pselect6+0x183/0x240 [ 280.737727][ T6362] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 280.737773][ T6362] do_syscall_64+0xcd/0x250 [ 280.737796][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.737833][ T6362] RIP: 0033:0x7f7feb77def9 [ 280.737849][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.737870][ T6362] RSP: 002b:00007f7fec636038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 280.737889][ T6362] RAX: ffffffffffffffda RBX: 00007f7feb936058 RCX: 00007f7feb77def9 [ 280.737904][ T6362] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 280.737918][ T6362] RBP: 00007f7fec636090 R08: 0000000000000000 R09: 0000000000000000 [ 280.737931][ T6362] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 280.737945][ T6362] R13: 0000000000000001 R14: 00007f7feb936058 R15: 00007ffd31cf9be8 [ 280.737966][ T6362] [ 281.738771][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.3.136 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 281.749151][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 281.759218][ T6362] Call Trace: [ 281.762501][ T6362] [ 281.765429][ T6362] dump_stack_lvl+0x116/0x1f0 [ 281.770139][ T6362] should_fail_ex+0x497/0x5b0 [ 281.774831][ T6362] strncpy_from_user+0x38/0x320 [ 281.779712][ T6362] strncpy_from_user_nofault+0x7f/0x180 [ 281.785268][ T6362] bpf_probe_read_compat_str+0xf1/0x170 [ 281.790828][ T6362] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 281.796285][ T6362] bpf_trace_run4+0x245/0x5a0 [ 281.802489][ T6362] ? __pfx_bpf_trace_run4+0x10/0x10 [ 281.810281][ T6362] __bpf_trace_sched_switch+0x13e/0x190 [ 281.816285][ T6362] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 281.822972][ T6362] ? psi_task_switch+0x2d9/0x900 [ 281.828439][ T6362] __schedule+0x17cf/0x5490 [ 281.833728][ T6362] ? __pfx___lock_acquire+0x10/0x10 [ 281.839011][ T6362] ? __pfx___schedule+0x10/0x10 [ 281.843904][ T6362] ? schedule+0x298/0x350 [ 281.848240][ T6362] ? __pfx_lock_release+0x10/0x10 [ 281.853279][ T6362] schedule+0xe7/0x350 [ 281.857358][ T6362] schedule_hrtimeout_range_clock+0x3c7/0x430 [ 281.863433][ T6362] ? __pfx_lock_release+0x10/0x10 [ 281.868478][ T6362] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 281.875085][ T6362] poll_schedule_timeout.constprop.0+0xba/0x190 [ 281.881334][ T6362] do_select+0x12ec/0x17b0 [ 281.885878][ T6362] ? __pfx_do_select+0x10/0x10 [ 281.890672][ T6362] ? mark_lock+0xb5/0xc60 [ 281.895007][ T6362] ? hlock_class+0x4e/0x130 [ 281.899530][ T6362] ? mark_lock+0xb5/0xc60 [ 281.903915][ T6362] ? __pfx_pollwake+0x10/0x10 [ 281.908599][ T6362] ? __pfx_pollwake+0x10/0x10 [ 281.913291][ T6362] ? __pfx_pollwake+0x10/0x10 [ 281.917967][ T6362] ? __pfx_pollwake+0x10/0x10 [ 281.922738][ T6362] ? __pfx_pollwake+0x10/0x10 [ 281.927416][ T6362] ? __pfx_pollwake+0x10/0x10 [ 281.932109][ T6362] ? __pfx___might_resched+0x10/0x10 [ 281.937418][ T6362] ? __pfx_lock_release+0x10/0x10 [ 281.942486][ T6362] ? __might_fault+0xe3/0x190 [ 281.947172][ T6362] ? core_sys_select+0x459/0xb80 [ 281.952132][ T6362] core_sys_select+0x459/0xb80 [ 281.956926][ T6362] ? __pfx_core_sys_select+0x10/0x10 [ 281.962217][ T6362] ? get_pid_task+0xfc/0x250 [ 281.966834][ T6362] ? set_user_sigmask+0x217/0x2a0 [ 281.971855][ T6362] ? __pfx_set_user_sigmask+0x10/0x10 [ 281.977237][ T6362] do_pselect.constprop.0+0x1a0/0x1f0 [ 281.982696][ T6362] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 281.988588][ T6362] ? __fget_files+0x244/0x3f0 [ 281.993265][ T6362] __x64_sys_pselect6+0x183/0x240 [ 281.998288][ T6362] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 282.003858][ T6362] do_syscall_64+0xcd/0x250 [ 282.008362][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.014267][ T6362] RIP: 0033:0x7f7feb77def9 [ 282.018678][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.038288][ T6362] RSP: 002b:00007f7fec636038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 282.046728][ T6362] RAX: ffffffffffffffda RBX: 00007f7feb936058 RCX: 00007f7feb77def9 [ 282.054702][ T6362] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 282.062670][ T6362] RBP: 00007f7fec636090 R08: 0000000000000000 R09: 0000000000000000 [ 282.070633][ T6362] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 282.078688][ T6362] R13: 0000000000000001 R14: 00007f7feb936058 R15: 00007ffd31cf9be8 [ 282.087573][ T6362] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 282.629239][ T5243] Bluetooth: hci0: command tx timeout [ 282.664005][ T5553] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.194142][ T5181] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 283.351603][ T5553] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.956166][ T5553] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.254375][ T5553] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.537473][ T5553] bridge_slave_1: left allmulticast mode [ 284.543569][ T5553] bridge_slave_1: left promiscuous mode [ 284.551879][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.563931][ T5553] bridge_slave_0: left allmulticast mode [ 284.570209][ T5553] bridge_slave_0: left promiscuous mode [ 284.576085][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.918370][ T5553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.950202][ T5553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.966705][ T5553] bond0 (unregistering): Released all slaves [ 285.277349][ T5553] hsr_slave_0: left promiscuous mode [ 285.284172][ T5553] hsr_slave_1: left promiscuous mode [ 285.295501][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.306742][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.331080][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.338558][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.351107][ T5553] veth1_macvtap: left promiscuous mode [ 285.357448][ T5553] veth0_macvtap: left promiscuous mode [ 285.364970][ T5553] veth1_vlan: left promiscuous mode [ 285.374166][ T5553] veth0_vlan: left promiscuous mode [ 285.875548][ T5553] team0 (unregistering): Port device team_slave_1 removed [ 285.896160][ T5553] team0 (unregistering): Port device team_slave_0 removed [ 286.467003][ T5553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.530555][ T5553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.592623][ T5553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.657949][ T5553] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.848587][ T5553] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.932623][ T5553] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.034475][ T5553] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.102502][ T5553] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.293506][ T5553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.365302][ T5553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.432756][ T5553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.505222][ T5553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.723325][ T5553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.811986][ T5553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.885390][ T5553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.964599][ T5553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.179262][ T5553] bridge_slave_1: left allmulticast mode [ 288.188751][ T5553] bridge_slave_1: left promiscuous mode [ 288.196537][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.210127][ T5553] bridge_slave_0: left allmulticast mode [ 288.215811][ T5553] bridge_slave_0: left promiscuous mode [ 288.231622][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.244675][ T5553] bridge_slave_1: left allmulticast mode [ 288.252887][ T5553] bridge_slave_1: left promiscuous mode [ 288.259433][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.271835][ T5553] bridge_slave_0: left allmulticast mode [ 288.277644][ T5553] bridge_slave_0: left promiscuous mode [ 288.287189][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.306994][ T5553] bridge_slave_1: left allmulticast mode [ 288.318562][ T5553] bridge_slave_1: left promiscuous mode [ 288.330677][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.343851][ T5553] bridge_slave_0: left allmulticast mode [ 288.349839][ T5553] bridge_slave_0: left promiscuous mode [ 288.355801][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.369810][ T5553] bridge_slave_1: left allmulticast mode [ 288.375515][ T5553] bridge_slave_1: left promiscuous mode [ 288.387659][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.401459][ T5553] bridge_slave_0: left allmulticast mode [ 288.407193][ T5553] bridge_slave_0: left promiscuous mode [ 288.413709][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.332684][ T5553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.345444][ T5553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.357373][ T5553] bond0 (unregistering): Released all slaves [ 289.377821][ T5553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.391610][ T5553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.412584][ T5553] bond0 (unregistering): Released all slaves [ 289.442076][ T5553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.454782][ T5553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.466256][ T5553] bond0 (unregistering): Released all slaves [ 289.493832][ T5553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.504999][ T5553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.522669][ T5553] bond0 (unregistering): Released all slaves [ 290.645749][ T5553] hsr_slave_0: left promiscuous mode [ 290.654197][ T5553] hsr_slave_1: left promiscuous mode [ 290.667456][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.678071][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.696688][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.704693][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.718699][ T5553] hsr_slave_0: left promiscuous mode [ 290.726356][ T5553] hsr_slave_1: left promiscuous mode [ 290.738483][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0