last executing test programs: 7m52.634630889s ago: executing program 4 (id=515): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="255161fc12e31d068d10d1c2bd39", 0x0, 0x1f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x142, 0xfe) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 7m51.370676714s ago: executing program 3 (id=519): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000600)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 7m50.807838363s ago: executing program 4 (id=521): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="3900000013000347", 0x8}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 7m50.686460957s ago: executing program 3 (id=522): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7m49.983843013s ago: executing program 0 (id=523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 7m49.907293315s ago: executing program 1 (id=524): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) syz_open_dev$sndpcmc(0x0, 0x57, 0x200002) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_setup(0x1, &(0x7f0000000500)={0x0, 0x0, 0x100, 0xb, 0x3d5}) io_uring_setup(0x2c49, &(0x7f0000000400)) 7m49.906610245s ago: executing program 3 (id=525): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000002, 0x1001}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x4}}, 0x14}}, 0x0) 7m48.302120738s ago: executing program 2 (id=526): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @local, 0x81}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r7, 0xc, "a5e49c655b78596116de78f9"}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) 7m48.273416855s ago: executing program 4 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000002c0)=[{0x1, 0x0, 0x8, 0x9d}, {0x1, 0x0, 0x3}, {0x6, 0x6e, 0x8}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 7m48.192297383s ago: executing program 0 (id=528): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0xc00}, {0x0, 0x8000}], 0xa) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0xa1]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x237, &(0x7f0000000740)={0x0, 0xd2d9, 0x0, 0x2, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x800) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb0000000000000000850000002f000000340000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fadvise64(r3, 0x18, 0x0, 0x4) io_setup(0x4, &(0x7f0000000400)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r6, 0x0, &(0x7f00000001c0)) connect$vsock_stream(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 7m48.190616417s ago: executing program 1 (id=529): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r3 = syz_io_uring_setup(0x17b3, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r5 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x20000180) inotify_rm_watch(r1, r5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x7, 0x9fd, 0x30100, r6, 0x811, '\x00', 0x0, r1, 0x4, 0x2, 0x0, 0xc}, 0x50) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x2) io_uring_enter(r3, 0x1, 0x2, 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) 7m48.135149849s ago: executing program 2 (id=530): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7m48.02270156s ago: executing program 4 (id=531): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x25, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x202, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x20}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) dup(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r7) 7m48.006258693s ago: executing program 3 (id=532): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x2a}, 0x10) r6 = syz_io_uring_setup(0x2315, &(0x7f0000000100)={0x0, 0x9135, 0x1, 0x3, 0x274}, &(0x7f00000001c0), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000881000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r6, 0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) ioctl$mixer_OSS_GETVERSION(r0, 0x40086602, &(0x7f0000000000)) 7m47.904611751s ago: executing program 2 (id=533): r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) fcntl$setsig(r5, 0xa, 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008000000", @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) connect$inet(0xffffffffffffffff, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 7m46.817092854s ago: executing program 1 (id=534): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4b564d02, 0x0, 0x9}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 7m46.815919057s ago: executing program 2 (id=535): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7m45.921633415s ago: executing program 2 (id=536): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 7m45.850662381s ago: executing program 1 (id=537): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="3900000013000347", 0x8}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 7m45.226193404s ago: executing program 0 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff}}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a"], 0x24}}, 0x0) 7m45.070882278s ago: executing program 0 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) 7m44.910393715s ago: executing program 3 (id=540): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_setup(0x1, &(0x7f0000000500)={0x0, 0x0, 0x100, 0xb, 0x3d5}) io_uring_setup(0x2c49, &(0x7f0000000400)) 7m42.526053145s ago: executing program 4 (id=541): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 7m42.330710076s ago: executing program 0 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r1, &(0x7f00000000c0)=""/81, 0x51) 7m41.520797125s ago: executing program 2 (id=543): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000)="d5db83aa1d3451ccd13675a34859f629b37e1cc1d1885d9213e4128b7bdde2aa1011891b81c2c5e608e9d48f0f4a61499b8d70", &(0x7f00000000c0)="f75c7baa39914f7177a5007e6e0781f2e62526fd09b87d715787bcd06fcbc754d5f559f50bb8b4774b82844a7c20161a9667e7308d4197f2d2b954431471539ceb66f4e0eb6d7c9dd3f91837f283ac7a369d3cc02d6c771cef9415f568d7e9cb3d4735116973924b3f1e8c"}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0xfffff800, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) chdir(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 7m41.216907297s ago: executing program 4 (id=544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0x7, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettaction={0x1b0, 0x32, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x88}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x40}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0x0, 0xb, "b7be5c", 0x6, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 7m41.212200591s ago: executing program 0 (id=545): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xa, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x37}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6a040000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup(0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @local, 0x81}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r7, 0xc, "a5e49c655b78596116de78f9"}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) 7m34.299752996s ago: executing program 1 (id=548): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 7m17.116123595s ago: executing program 32 (id=545): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xa, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x37}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6a040000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup(0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) chdir(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 7m16.546907687s ago: executing program 34 (id=544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0x7, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettaction={0x1b0, 0x32, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x88}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x40}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0x0, 0xb, "b7be5c", 0x6, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 7m16.310169599s ago: executing program 35 (id=548): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 7m16.17842836s ago: executing program 36 (id=547): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @local, 0x81}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r7, 0xc, "a5e49c655b78596116de78f9"}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) 4m36.653606519s ago: executing program 8 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) 4m36.596806053s ago: executing program 7 (id=551): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) 4m12.696769518s ago: executing program 8 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) 4m11.998809503s ago: executing program 5 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4m10.640137625s ago: executing program 7 (id=551): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) 4m3.896438086s ago: executing program 5 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4m3.886697202s ago: executing program 8 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) 3m59.836611639s ago: executing program 7 (id=551): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) 3m59.766497568s ago: executing program 9 (id=553): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 3m59.028505972s ago: executing program 6 (id=550): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a96716319816bc69817063a877505d05c2ef4ce002"], 0x0) 3m55.959972146s ago: executing program 8 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) 3m50.036485642s ago: executing program 6 (id=550): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a96716319816bc69817063a877505d05c2ef4ce002"], 0x0) 3m50.014585306s ago: executing program 9 (id=553): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 3m43.045452508s ago: executing program 5 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3m34.206585917s ago: executing program 7 (id=551): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) 3m20.705933612s ago: executing program 6 (id=550): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a96716319816bc69817063a877505d05c2ef4ce002"], 0x0) 3m20.648216394s ago: executing program 9 (id=553): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 2m50.318457266s ago: executing program 9 (id=553): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 2m49.291120542s ago: executing program 5 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m48.489970607s ago: executing program 6 (id=550): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a96716319816bc69817063a877505d05c2ef4ce002"], 0x0) 2m26.635996917s ago: executing program 8 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) 1m59.763234845s ago: executing program 9 (id=553): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 1m59.705687553s ago: executing program 6 (id=550): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a96716319816bc69817063a877505d05c2ef4ce002"], 0x0) 1m58.644856446s ago: executing program 5 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m57.512421605s ago: executing program 7 (id=551): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) 1m28.426492471s ago: executing program 8 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) 1.624823887s ago: executing program 6 (id=550): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a96716319816bc69817063a877505d05c2ef4ce002"], 0x0) 1.614590701s ago: executing program 5 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.525123877s ago: executing program 7 (id=551): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) 0s ago: executing program 9 (id=553): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) kernel console output (not intermixed with test programs): ontrolC3/../uevent} for writing: No such file or directory [ 94.445595][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 94.655710][ T6231] fido_id[6231]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.849673][ T6240] netlink: 'syz.1.89': attribute type 1 has an invalid length. [ 94.857373][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 95.884514][ T6238] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 95.936382][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 95.936392][ T30] audit: type=1400 audit(1750890858.211:208): avc: denied { create } for pid=6248 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.036517][ T6251] trusted_key: syz.1.92 sent an empty control message without MSG_MORE. [ 96.133555][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 96.143373][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/u9:8 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 96.143399][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.143411][ T5828] Workqueue: hci1 hci_rx_work [ 96.143444][ T5828] Call Trace: [ 96.143451][ T5828] [ 96.143459][ T5828] dump_stack_lvl+0x16c/0x1f0 [ 96.143488][ T5828] sysfs_warn_dup+0x7f/0xa0 [ 96.143515][ T5828] sysfs_create_dir_ns+0x24b/0x2b0 [ 96.143546][ T5828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.143570][ T5828] ? find_held_lock+0x2b/0x80 [ 96.143597][ T5828] ? do_raw_spin_unlock+0x172/0x230 [ 96.143619][ T5828] kobject_add_internal+0x2c4/0x9b0 [ 96.143653][ T5828] kobject_add+0x16e/0x240 [ 96.143670][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 96.143692][ T5828] ? kobject_put+0xab/0x5a0 [ 96.143728][ T5828] device_add+0x288/0x1a70 [ 96.143757][ T5828] ? __pfx_dev_set_name+0x10/0x10 [ 96.143776][ T5828] ? __pfx_device_add+0x10/0x10 [ 96.143818][ T5828] ? mgmt_send_event_skb+0x2fb/0x460 [ 96.143853][ T5828] hci_conn_add_sysfs+0x17e/0x230 [ 96.143885][ T5828] le_conn_complete_evt+0x1075/0x1d70 [ 96.143916][ T5828] ? rcu_is_watching+0x12/0xc0 [ 96.143940][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 96.143965][ T5828] ? hci_event_packet+0x459/0x11c0 [ 96.143997][ T5828] hci_le_conn_complete_evt+0x23c/0x370 [ 96.144029][ T5828] hci_le_meta_evt+0x357/0x5e0 [ 96.144055][ T5828] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 96.144085][ T5828] hci_event_packet+0x682/0x11c0 [ 96.144111][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 96.144140][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 96.144169][ T5828] ? kcov_remote_start+0x3c9/0x6d0 [ 96.144194][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.144226][ T5828] hci_rx_work+0x2c5/0x16b0 [ 96.144254][ T5828] ? rcu_is_watching+0x12/0xc0 [ 96.144280][ T5828] process_one_work+0x9cc/0x1b70 [ 96.144309][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 96.144335][ T5828] ? assign_work+0x1a0/0x250 [ 96.144371][ T5828] worker_thread+0x6c8/0xf10 [ 96.144397][ T5828] ? __kthread_parkme+0x19e/0x250 [ 96.144423][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 96.144442][ T5828] kthread+0x3c2/0x780 [ 96.144459][ T5828] ? __pfx_kthread+0x10/0x10 [ 96.144476][ T5828] ? rcu_is_watching+0x12/0xc0 [ 96.144498][ T5828] ? __pfx_kthread+0x10/0x10 [ 96.144515][ T5828] ret_from_fork+0x5d4/0x6f0 [ 96.144540][ T5828] ? __pfx_kthread+0x10/0x10 [ 96.144557][ T5828] ret_from_fork_asm+0x1a/0x30 [ 96.144589][ T5828] [ 96.144763][ T5828] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.435380][ T5828] Bluetooth: hci1: failed to register connection device [ 96.959136][ T30] audit: type=1400 audit(1750890858.311:209): avc: denied { write } for pid=6248 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.001067][ T30] audit: type=1400 audit(1750890858.331:210): avc: denied { read } for pid=6248 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.020757][ T30] audit: type=1400 audit(1750890858.391:211): avc: denied { connect } for pid=6248 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.024152][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 97.041110][ T30] audit: type=1400 audit(1750890858.691:212): avc: denied { accept } for pid=6218 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.248986][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 97.269088][ T30] audit: type=1400 audit(1750890859.541:213): avc: denied { create } for pid=6263 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.340798][ T30] audit: type=1400 audit(1750890859.601:214): avc: denied { write } for pid=6265 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.461762][ T5977] usb 5-1: USB disconnect, device number 2 [ 97.927228][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.953034][ T6270] batadv_slave_0: entered promiscuous mode [ 98.510887][ T5828] Bluetooth: hci1: command tx timeout [ 98.805656][ T6283] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 98.839483][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 99.293617][ T6292] Failed to initialize the IGMP autojoin socket (err -2) [ 99.420344][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.715269][ T6300] : entered promiscuous mode [ 100.152754][ T5883] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 100.167206][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.215572][ T5883] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 100.343090][ T5883] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 100.366183][ T5883] usb 4-1: Manufacturer: syz [ 100.391319][ T5883] usb 4-1: config 0 descriptor?? [ 100.480413][ T5883] rc_core: IR keymap rc-hauppauge not found [ 100.486354][ T5883] Registered IR keymap rc-empty [ 100.496994][ T5883] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 100.514744][ T5883] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 100.720710][ T6315] binder: 6307:6315 ioctl c0306201 200000001440 returned -11 [ 101.087361][ T30] audit: type=1400 audit(1750890863.361:215): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=2792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.263147][ T5883] usb 4-1: USB disconnect, device number 2 [ 101.392896][ T6321] 9pnet_virtio: no channels available for device syz [ 101.815179][ T30] audit: type=1400 audit(1750890863.361:216): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.904992][ T30] audit: type=1400 audit(1750890863.361:217): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2792 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.579282][ T30] audit: type=1400 audit(1750890863.691:218): avc: denied { mount } for pid=6313 comm="syz.2.112" name="/" dev="rpc_pipefs" ino=10284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 102.602314][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.746935][ T6327] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 102.760596][ T30] audit: type=1400 audit(1750890864.281:219): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 102.885756][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 103.391831][ T6342] "syz.2.119" (6342) uses obsolete ecb(arc4) skcipher [ 103.405096][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 104.530914][ T6337] Failed to initialize the IGMP autojoin socket (err -2) [ 104.835603][ T30] audit: type=1400 audit(1750890867.111:220): avc: denied { read write } for pid=6355 comm="syz.4.124" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 104.888854][ T6356] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 104.895546][ T6356] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.932407][ T6356] vhci_hcd vhci_hcd.0: Device attached [ 104.934510][ T30] audit: type=1400 audit(1750890867.111:221): avc: denied { open } for pid=6355 comm="syz.4.124" path="/dev/input/mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 105.879042][ T5927] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 106.300235][ T6352] Bluetooth: MGMT ver 1.23 [ 106.354613][ T30] audit: type=1400 audit(1750890868.611:222): avc: denied { read } for pid=6369 comm="syz.0.128" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.350927][ T30] audit: type=1400 audit(1750890868.611:223): avc: denied { open } for pid=6369 comm="syz.0.128" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.375419][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.614203][ T30] audit: type=1400 audit(1750890868.721:224): avc: denied { ioctl } for pid=6369 comm="syz.0.128" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.181637][ T6373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.236126][ T6357] vhci_hcd: connection reset by peer [ 108.718232][ T1162] vhci_hcd: stop threads [ 108.775040][ T1162] vhci_hcd: release socket [ 108.813531][ T6373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.816481][ T1162] vhci_hcd: disconnect device [ 109.464726][ T5863] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.860331][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 109.867986][ T5863] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 109.880051][ T5863] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 109.895817][ T5863] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 109.909218][ T6373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.944742][ T5863] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 110.013844][ T6387] "syz.2.131" (6387) uses obsolete ecb(arc4) skcipher [ 110.027315][ T6373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.038193][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 110.105803][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.125890][ T5863] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 110.138096][ T5863] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 110.166227][ T6373] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.185062][ T6373] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.202676][ T6373] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.223551][ T6373] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.281793][ T5863] usb 4-1: Product: syz [ 110.285996][ T5863] usb 4-1: Manufacturer: syz [ 110.290711][ T5863] usb 4-1: SerialNumber: syz [ 110.298744][ T5863] usb 4-1: config 0 descriptor?? [ 110.304768][ T30] audit: type=1400 audit(1750890872.591:225): avc: denied { create } for pid=6390 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.329307][ T5863] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 110.341755][ T6391] lo speed is unknown, defaulting to 1000 [ 110.347632][ T6391] lo speed is unknown, defaulting to 1000 [ 110.354323][ T30] audit: type=1400 audit(1750890872.621:226): avc: denied { write } for pid=6390 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.378941][ T5863] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.395110][ T30] audit: type=1400 audit(1750890872.671:227): avc: denied { create } for pid=6392 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.395265][ T6391] lo speed is unknown, defaulting to 1000 [ 110.434716][ T54] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.438588][ T5863] usb 4-1: USB disconnect, device number 3 [ 110.453143][ T5863] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 110.487380][ T6391] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.511201][ T6393] random: crng reseeded on system resumption [ 110.597986][ T30] audit: type=1400 audit(1750890872.781:228): avc: denied { create } for pid=6392 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.720888][ T6391] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 110.751872][ T6397] Failed to initialize the IGMP autojoin socket (err -2) [ 110.790838][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 110.814507][ T54] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 110.865334][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.922547][ T6391] lo speed is unknown, defaulting to 1000 [ 110.956806][ T54] usb 2-1: config 0 has no interface number 0 [ 111.013788][ T6391] lo speed is unknown, defaulting to 1000 [ 111.023476][ T54] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.062593][ T6391] lo speed is unknown, defaulting to 1000 [ 111.089115][ T30] audit: type=1400 audit(1750890872.781:229): avc: denied { bind } for pid=6392 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.122770][ T54] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 111.147906][ T30] audit: type=1400 audit(1750890872.781:230): avc: denied { write } for pid=6392 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.151616][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.179816][ T30] audit: type=1400 audit(1750890872.791:231): avc: denied { append } for pid=6392 comm="syz.0.135" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.255349][ T6391] lo speed is unknown, defaulting to 1000 [ 111.270675][ T54] usb 2-1: Product: syz [ 111.274884][ T54] usb 2-1: Manufacturer: syz [ 111.281793][ T6391] lo speed is unknown, defaulting to 1000 [ 111.293413][ T54] usb 2-1: SerialNumber: syz [ 111.310069][ T54] usb 2-1: config 0 descriptor?? [ 111.330490][ T5927] vhci_hcd: vhci_device speed not set [ 111.351623][ T54] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.420202][ T54] snd-usb-audio 2-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 111.654978][ T6413] binder: 6408:6413 ioctl c0306201 200000001440 returned -11 [ 112.076674][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.354712][ T5863] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 112.413603][ T5863] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.819000][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 112.829267][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:8 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 112.829284][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.829292][ T5828] Workqueue: hci3 hci_rx_work [ 112.829311][ T5828] Call Trace: [ 112.829315][ T5828] [ 112.829319][ T5828] dump_stack_lvl+0x16c/0x1f0 [ 112.829336][ T5828] sysfs_warn_dup+0x7f/0xa0 [ 112.829352][ T5828] sysfs_create_dir_ns+0x24b/0x2b0 [ 112.829366][ T5828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.829381][ T5828] ? find_held_lock+0x2b/0x80 [ 112.829397][ T5828] ? do_raw_spin_unlock+0x172/0x230 [ 112.829409][ T5828] kobject_add_internal+0x2c4/0x9b0 [ 112.829429][ T5828] kobject_add+0x16e/0x240 [ 112.829439][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 112.829449][ T5828] ? do_raw_spin_unlock+0x172/0x230 [ 112.829460][ T5828] ? kobject_put+0xab/0x5a0 [ 112.829479][ T5828] device_add+0x288/0x1a70 [ 112.829496][ T5828] ? __pfx_dev_set_name+0x10/0x10 [ 112.829506][ T5828] ? __pfx_device_add+0x10/0x10 [ 112.829523][ T5828] ? mgmt_send_event_skb+0x2fb/0x460 [ 112.829542][ T5828] hci_conn_add_sysfs+0x17e/0x230 [ 112.829559][ T5828] le_conn_complete_evt+0x1075/0x1d70 [ 112.829576][ T5828] ? rcu_is_watching+0x12/0xc0 [ 112.829589][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 112.829603][ T5828] ? hci_event_packet+0x459/0x11c0 [ 112.829621][ T5828] hci_le_conn_complete_evt+0x23c/0x370 [ 112.829647][ T5828] hci_le_meta_evt+0x357/0x5e0 [ 112.829670][ T5828] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 112.829697][ T5828] hci_event_packet+0x682/0x11c0 [ 112.829718][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 112.829735][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 112.829750][ T5828] ? kcov_remote_start+0x3c9/0x6d0 [ 112.829762][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.829780][ T5828] hci_rx_work+0x2c5/0x16b0 [ 112.829796][ T5828] ? rcu_is_watching+0x12/0xc0 [ 112.829810][ T5828] process_one_work+0x9cc/0x1b70 [ 112.829827][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 112.829841][ T5828] ? assign_work+0x1a0/0x250 [ 112.829859][ T5828] worker_thread+0x6c8/0xf10 [ 112.829878][ T5828] ? __kthread_parkme+0x19e/0x250 [ 112.829892][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 112.829903][ T5828] kthread+0x3c2/0x780 [ 112.829912][ T5828] ? __pfx_kthread+0x10/0x10 [ 112.829922][ T5828] ? rcu_is_watching+0x12/0xc0 [ 112.829935][ T5828] ? __pfx_kthread+0x10/0x10 [ 112.829944][ T5828] ret_from_fork+0x5d4/0x6f0 [ 112.829959][ T5828] ? __pfx_kthread+0x10/0x10 [ 112.829969][ T5828] ret_from_fork_asm+0x1a/0x30 [ 112.829987][ T5828] [ 112.830000][ T5828] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.132229][ T5828] Bluetooth: hci3: failed to register connection device [ 114.180207][ T976] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.210074][ T6438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.249393][ T5863] usb 2-1: USB disconnect, device number 2 [ 114.294718][ T976] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.315644][ T6438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.395881][ T6438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.661975][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 115.480595][ T5828] Bluetooth: hci3: command tx timeout [ 115.508032][ T6438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.841121][ T6442] fido_id[6442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.873863][ T6438] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.881909][ T6438] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.889269][ T6438] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.896935][ T6438] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.033149][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 116.033163][ T30] audit: type=1400 audit(1750890878.291:233): avc: denied { write } for pid=6452 comm="syz.1.149" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 116.062791][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.103783][ T6455] random: crng reseeded on system resumption [ 116.305857][ T30] audit: type=1400 audit(1750890878.291:234): avc: denied { open } for pid=6452 comm="syz.1.149" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 116.329844][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.620430][ T6465] ubi31: attaching mtd0 [ 116.636374][ T6465] ubi31: scanning is finished [ 116.643305][ T6465] ubi31: empty MTD device detected [ 116.854292][ T6470] "syz.1.153" (6470) uses obsolete ecb(arc4) skcipher [ 116.871776][ T6468] kvm: Disabled LAPIC found during irq injection [ 116.882341][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 116.937191][ T6468] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 117.204474][ T5883] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 117.214529][ T5883] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.552100][ T6465] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 118.571058][ T6465] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 118.579815][ T6465] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 118.698184][ T6465] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 119.182882][ T6465] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 119.309049][ T6465] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 119.335808][ T6465] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2080527729 [ 119.359618][ T30] audit: type=1400 audit(1750890881.631:235): avc: denied { create } for pid=6500 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.383475][ T30] audit: type=1400 audit(1750890881.631:236): avc: denied { connect } for pid=6500 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.512834][ T30] audit: type=1400 audit(1750890881.741:237): avc: denied { write } for pid=6500 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.540738][ T30] audit: type=1400 audit(1750890881.781:238): avc: denied { create } for pid=6500 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.562822][ T6465] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 119.598662][ T6505] random: crng reseeded on system resumption [ 119.664701][ T30] audit: type=1400 audit(1750890881.931:239): avc: denied { connect } for pid=6477 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.720766][ T6492] ubi31: background thread "ubi_bgt31d" started, PID 6492 [ 119.867613][ T30] audit: type=1400 audit(1750890881.981:240): avc: denied { write } for pid=6477 comm="syz.3.158" path="socket:[10068]" dev="sockfs" ino=10068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.513624][ T30] audit: type=1400 audit(1750890884.791:241): avc: denied { mount } for pid=6518 comm="syz.0.169" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 122.589340][ T30] audit: type=1400 audit(1750890884.821:242): avc: denied { search } for pid=6518 comm="syz.0.169" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.589384][ T30] audit: type=1400 audit(1750890884.821:243): avc: denied { search } for pid=6518 comm="syz.0.169" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.589422][ T30] audit: type=1400 audit(1750890884.821:244): avc: denied { read open } for pid=6518 comm="syz.0.169" path="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.589455][ T30] audit: type=1400 audit(1750890884.821:245): avc: denied { write } for pid=6518 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 122.589488][ T30] audit: type=1400 audit(1750890884.841:246): avc: denied { read } for pid=6518 comm="syz.0.169" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 122.589523][ T30] audit: type=1400 audit(1750890884.841:247): avc: denied { open } for pid=6518 comm="syz.0.169" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 122.589560][ T30] audit: type=1400 audit(1750890884.841:248): avc: denied { ioctl } for pid=6518 comm="syz.0.169" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 122.624411][ T6523] binder: BINDER_SET_CONTEXT_MGR already set [ 122.624446][ T6523] binder: 6520:6523 ioctl 4018620d 200000000040 returned -16 [ 122.841045][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.017806][ T6527] netlink: 'syz.0.173': attribute type 21 has an invalid length. [ 123.055133][ T6527] netlink: 'syz.0.173': attribute type 6 has an invalid length. [ 123.190334][ T6527] netlink: 132 bytes leftover after parsing attributes in process `syz.0.173'. [ 124.362104][ T6541] random: crng reseeded on system resumption [ 124.502663][ T30] audit: type=1400 audit(1750890886.741:249): avc: denied { connect } for pid=6533 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 124.871044][ T30] audit: type=1400 audit(1750890886.831:250): avc: denied { bind } for pid=6533 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 125.267916][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 125.957344][ T6523] syz.2.170 (6523): drop_caches: 2 [ 126.784731][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 126.796278][ T6566] 9p: Unknown Cache mode or invalid value fscach [ 127.047214][ T6571] netlink: 60 bytes leftover after parsing attributes in process `syz.3.186'. [ 128.099522][ T6588] batman_adv: batadv0: Adding interface: ip6gretap1 [ 128.106319][ T6588] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.138848][ T6588] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 128.951671][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 128.951684][ T30] audit: type=1400 audit(1750890891.231:253): avc: denied { remount } for pid=6577 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.265843][ T6594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.811747][ T6604] random: crng reseeded on system resumption [ 129.975341][ T30] audit: type=1400 audit(1750890892.251:254): avc: denied { sys_module } for pid=6598 comm="syz.3.194" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 130.656833][ T6614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.992301][ T6614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.231948][ T6614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.620307][ T30] audit: type=1400 audit(1750890893.881:255): avc: denied { read write } for pid=6616 comm="syz.0.198" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 131.930516][ T30] audit: type=1400 audit(1750890893.881:256): avc: denied { open } for pid=6616 comm="syz.0.198" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 131.978711][ T6614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.032824][ T30] audit: type=1800 audit(1750890893.881:257): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.198" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 132.072012][ T6614] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.084702][ T6614] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.097283][ T6614] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.109552][ T6614] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.361361][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.367686][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.687079][ T30] audit: type=1326 audit(1750890894.961:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.2.202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd7638e929 code=0x0 [ 133.794039][ T30] audit: type=1400 audit(1750890896.071:259): avc: denied { bind } for pid=6644 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.840292][ T30] audit: type=1400 audit(1750890896.071:260): avc: denied { setopt } for pid=6644 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.928768][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.979884][ T6650] random: crng reseeded on system resumption [ 134.030387][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.080381][ T976] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.242661][ T976] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.254571][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 134.272050][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.280427][ T976] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.314319][ T5863] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.357758][ T976] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.385239][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.417200][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.446163][ T5863] usb 1-1: config 0 descriptor?? [ 135.351772][ T6645] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 135.429155][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.441709][ T976] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.455629][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.483677][ T5863] usbhid 1-1:0.0: can't add hid device: -71 [ 135.505814][ T5863] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 136.275631][ T5863] usb 1-1: USB disconnect, device number 2 [ 136.308078][ T1029] tipc: Subscription rejected, illegal request [ 136.332623][ T54] usb 3-1: USB disconnect, device number 2 [ 137.272711][ T30] audit: type=1800 audit(1750890899.351:261): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.214" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 140.326442][ T6695] random: crng reseeded on system resumption [ 140.402186][ T6698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.840422][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.016275][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 141.076470][ T5862] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.093538][ T5862] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.105349][ T5862] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.114715][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.133248][ T6707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.157037][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.426954][ T5862] usb 5-1: USB disconnect, device number 3 [ 142.893792][ T30] audit: type=1400 audit(1750890905.171:262): avc: denied { ioctl } for pid=6734 comm="syz.0.232" path="socket:[12746]" dev="sockfs" ino=12746 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.102100][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.166323][ T30] audit: type=1400 audit(1750890905.441:263): avc: denied { search } for pid=6740 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.241095][ T30] audit: type=1400 audit(1750890905.471:264): avc: denied { search } for pid=6740 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.251666][ T6739] bond0: (slave rose0): Enslaving as an active interface with an up link [ 143.345885][ T6751] random: crng reseeded on system resumption [ 143.409258][ T30] audit: type=1400 audit(1750890905.471:265): avc: denied { search } for pid=6740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.588191][ T6753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.670444][ T30] audit: type=1400 audit(1750890905.471:266): avc: denied { search } for pid=6740 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.693563][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.762556][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 143.773104][ T30] audit: type=1400 audit(1750890905.511:267): avc: denied { read open } for pid=6747 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.798482][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.871620][ C0] llc_conn_state_process: llc_conn_service failed [ 143.924956][ T30] audit: type=1400 audit(1750890905.511:268): avc: denied { getattr } for pid=6747 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.126007][ T30] audit: type=1400 audit(1750890905.511:269): avc: denied { getattr } for pid=6747 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.252286][ T30] audit: type=1400 audit(1750890905.901:270): avc: denied { read } for pid=6750 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.338262][ T30] audit: type=1400 audit(1750890905.901:271): avc: denied { open } for pid=6750 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.930392][ T5977] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.290374][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 145.306572][ T5977] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 145.321810][ T6800] random: crng reseeded on system resumption [ 145.392410][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.445976][ T5977] usb 3-1: config 0 has no interface number 0 [ 145.502413][ T5977] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.575936][ T5977] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 145.635952][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.711494][ T5977] usb 3-1: Product: syz [ 145.751408][ T5977] usb 3-1: Manufacturer: syz [ 145.794097][ T5977] usb 3-1: SerialNumber: syz [ 145.840904][ T5977] usb 3-1: config 0 descriptor?? [ 145.850172][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.858825][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.915240][ T5977] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.043290][ T5977] snd-usb-audio 3-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 146.194106][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.221667][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.260609][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.577459][ T6807] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.612678][ T6807] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.653400][ T6807] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.715931][ T6807] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.756368][ T24] usb 3-1: USB disconnect, device number 3 [ 146.930379][ T6834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.080158][ T6810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.136839][ T6813] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 148.120286][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 148.120297][ T30] audit: type=1400 audit(1750890910.221:282): avc: denied { write } for pid=6859 comm="syz.1.259" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 148.161978][ T6842] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 148.291041][ T30] audit: type=1400 audit(1750890910.221:283): avc: denied { open } for pid=6859 comm="syz.1.259" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 148.899673][ T6876] random: crng reseeded on system resumption [ 149.335978][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 149.345022][ T6881] trusted_key: encrypted_key: insufficient parameters specified [ 149.357657][ T6881] trusted_key: encrypted_key: insufficient parameters specified [ 149.524838][ T6884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.887710][ T6915] tipc: Started in network mode [ 150.894772][ T6915] tipc: Node identity 7f000001, cluster identity 4711 [ 151.001684][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 151.036414][ T6896] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 151.214176][ T6915] tipc: Enabled bearer , priority 0 [ 152.035402][ T6933] binder: 6932:6933 ioctl c0046209 0 returned -22 [ 152.257624][ T5863] lo speed is unknown, defaulting to 1000 [ 152.332635][ T24] tipc: Node number set to 2130706433 [ 152.350475][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 152.461010][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 152.470847][ T24] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.945306][ T6947] Failed to initialize the IGMP autojoin socket (err -2) [ 153.011594][ T6952] trusted_key: encrypted_key: insufficient parameters specified [ 153.054192][ T6952] trusted_key: encrypted_key: insufficient parameters specified [ 153.318212][ T6951] fido_id[6951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.426593][ T6960] random: crng reseeded on system resumption [ 154.289612][ T30] audit: type=1400 audit(1750890916.531:284): avc: denied { mounton } for pid=6967 comm="syz.0.289" path="/58/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.491837][ T30] audit: type=1400 audit(1750890916.771:285): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.785387][ T30] audit: type=1400 audit(1750890917.061:286): avc: denied { ioctl } for pid=6976 comm="syz.0.292" path="socket:[12076]" dev="sockfs" ino=12076 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.861535][ T30] audit: type=1400 audit(1750890917.061:287): avc: denied { write } for pid=6976 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 154.867376][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.900321][ T30] audit: type=1400 audit(1750890917.061:288): avc: denied { read } for pid=6976 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 154.940040][ T30] audit: type=1400 audit(1750890917.121:289): avc: denied { ioctl } for pid=6976 comm="syz.0.292" path="socket:[12077]" dev="sockfs" ino=12077 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 155.051540][ T24] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.482593][ T6985] fido_id[6985]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.647089][ T6987] binder: 6986:6987 ioctl c0046209 0 returned -22 [ 156.048759][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 156.456184][ T6995] binder: BINDER_SET_CONTEXT_MGR already set [ 156.500383][ T6995] binder: 6993:6995 ioctl 4018620d 200000000040 returned -16 [ 156.883992][ T7009] binder: 6997:7009 ioctl c0306201 200000001440 returned -11 [ 162.415541][ T7021] trusted_key: encrypted_key: insufficient parameters specified [ 163.301796][ T7021] trusted_key: encrypted_key: insufficient parameters specified [ 163.366025][ T7030] Failed to initialize the IGMP autojoin socket (err -2) [ 163.890974][ T30] audit: type=1400 audit(1750890925.911:290): avc: denied { create } for pid=7033 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.974691][ T7050] random: crng reseeded on system resumption [ 164.838349][ T30] audit: type=1400 audit(1750890926.571:291): avc: denied { bind } for pid=7033 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.887640][ T7053] batman_adv: batadv0: Adding interface: ip6gretap1 [ 164.894418][ T7053] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.919984][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.926232][ T7053] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 165.497049][ T30] audit: type=1400 audit(1750890926.581:292): avc: denied { write } for pid=7033 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.560655][ T7057] binder: 7056:7057 ioctl c0046209 0 returned -22 [ 165.705003][ T7064] binder: BINDER_SET_CONTEXT_MGR already set [ 165.718024][ T7064] binder: 7063:7064 ioctl 4018620d 200000000040 returned -16 [ 165.996740][ T30] audit: type=1400 audit(1750890928.271:293): avc: denied { read } for pid=7071 comm="syz.0.315" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.336371][ T7076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.346299][ T30] audit: type=1400 audit(1750890928.271:294): avc: denied { ioctl } for pid=7071 comm="syz.0.315" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.373068][ T973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.601548][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 166.698332][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 166.764617][ T973] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.094877][ T973] usb 1-1: config 0 has no interface number 0 [ 167.122947][ T973] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.185153][ T973] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.227276][ T973] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.253964][ T973] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 167.286033][ T973] usb 1-1: Product: syz [ 167.300026][ T973] usb 1-1: SerialNumber: syz [ 167.312054][ T7096] trusted_key: encrypted_key: insufficient parameters specified [ 167.322976][ T7096] trusted_key: encrypted_key: insufficient parameters specified [ 167.430722][ T973] usb 1-1: config 0 descriptor?? [ 167.497829][ T973] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 167.553146][ T7102] Zero length message leads to an empty skb [ 167.559570][ T7092] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 167.567577][ T973] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 167.733441][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.741262][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.748346][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.755436][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.762509][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.769617][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.776730][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.783918][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.792614][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.800096][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.955416][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 168.201797][ T973] usb 1-1: USB disconnect, device number 3 [ 168.207699][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 168.309115][ T973] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 168.603309][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 168.775987][ T7120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.853624][ T30] audit: type=1400 audit(1750890931.131:295): avc: denied { create } for pid=7119 comm="syz.4.327" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.862340][ T7120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.230737][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 169.240592][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 169.264077][ T7125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.284501][ T30] audit: type=1400 audit(1750890931.131:296): avc: denied { link } for pid=7119 comm="syz.4.327" name="file1" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 169.317692][ T30] audit: type=1400 audit(1750890931.321:297): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 169.434623][ T7134] kAFS: No cell specified [ 170.278284][ T7142] fuse: Bad value for 'fd' [ 170.320718][ T7145] trusted_key: encrypted_key: insufficient parameters specified [ 170.369108][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 170.486417][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.336'. [ 170.879370][ T7151] openvswitch: : Dropping previously announced user features [ 171.317394][ T7153] trusted_key: encrypted_key: insufficient parameters specified [ 171.564306][ T30] audit: type=1400 audit(1750890933.831:298): avc: denied { append } for pid=7155 comm="syz.3.340" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 171.622483][ T30] audit: type=1400 audit(1750890933.871:299): avc: denied { write } for pid=7155 comm="syz.3.340" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 172.791145][ T7176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.812294][ T7162] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 173.338989][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 173.466590][ T7197] "syz.0.349" (7197) uses obsolete ecb(arc4) skcipher [ 173.481125][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 173.874368][ T7202] trusted_key: encrypted_key: insufficient parameters specified [ 173.994947][ T7196] trusted_key: encrypted_key: insufficient parameters specified [ 174.530762][ T7206] : entered promiscuous mode [ 174.590627][ T5823] Bluetooth: hci0: command 0x0401 tx timeout [ 175.180313][ T5977] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.320341][ T5977] usb 4-1: device descriptor read/64, error -71 [ 175.469409][ T7188] openvswitch: : Dropping previously announced user features [ 175.570440][ T5977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.721300][ T5977] usb 4-1: device descriptor read/64, error -71 [ 175.838757][ T5977] usb usb4-port1: attempt power cycle [ 176.152076][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 176.511519][ T5977] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.531536][ T5977] usb 4-1: device descriptor read/8, error -71 [ 176.550367][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 176.618644][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 176.810340][ T5977] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 176.849912][ T30] audit: type=1400 audit(1750890939.121:300): avc: denied { setopt } for pid=7246 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.870783][ T5977] usb 4-1: device descriptor read/8, error -71 [ 176.920339][ T30] audit: type=1400 audit(1750890939.161:301): avc: denied { connect } for pid=7246 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.001988][ T5977] usb usb4-port1: unable to enumerate USB device [ 177.456894][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 177.982945][ T7257] trusted_key: encrypted_key: insufficient parameters specified [ 177.997164][ T7257] trusted_key: encrypted_key: insufficient parameters specified [ 178.463118][ T7263] openvswitch: : Dropping previously announced user features [ 178.910308][ T5828] Bluetooth: hci4: command tx timeout [ 179.221609][ T7275] binder: 7274:7275 ioctl c0046209 0 returned -22 [ 179.476192][ T7281] tipc: Enabling of bearer rejected, already enabled [ 179.492412][ T30] audit: type=1400 audit(1750890941.741:302): avc: denied { read } for pid=7279 comm="syz.4.380" path="socket:[13692]" dev="sockfs" ino=13692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.874882][ T7281] tipc: Enabling of bearer rejected, already enabled [ 180.490635][ T30] audit: type=1400 audit(1750890942.541:303): avc: denied { execute } for pid=7282 comm="syz.1.382" path="/73/cpu.stat" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.402444][ T7295] syz.0.386 uses obsolete (PF_INET,SOCK_PACKET) [ 181.615236][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 182.597593][ T7308] openvswitch: : Dropping previously announced user features [ 182.739175][ T30] audit: type=1400 audit(1750890944.961:304): avc: denied { read } for pid=7300 comm="syz.1.389" path="socket:[13727]" dev="sockfs" ino=13727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.220092][ T7320] tipc: Started in network mode [ 184.299575][ T7320] tipc: Node identity 7f000001, cluster identity 4711 [ 184.338186][ T7320] tipc: Enabling of bearer rejected, failed to enable media [ 184.540121][ T7332] tipc: Enabled bearer , priority 0 [ 185.650384][ T54] tipc: Node number set to 2130706433 [ 185.715233][ T7347] 9p: Unknown Cache mode or invalid value fscach [ 185.781366][ T7346] Failed to initialize the IGMP autojoin socket (err -2) [ 186.033622][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 186.042444][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 186.048530][ T5138] Bluetooth: hci3: command 0x0406 tx timeout [ 186.055095][ T5823] Bluetooth: hci0: command 0x0401 tx timeout [ 186.096169][ T7359] "syz.0.402" (7359) uses obsolete ecb(arc4) skcipher [ 186.111327][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 186.776349][ T30] audit: type=1400 audit(1750890949.041:305): avc: denied { getopt } for pid=7360 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.116945][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 188.140545][ T7378] fuse: Bad value for 'fd' [ 188.654370][ T30] audit: type=1400 audit(1750890950.771:306): avc: denied { read } for pid=7384 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.423676][ T54] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 193.701047][ T54] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.782449][ T7451] fido_id[7451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.796112][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.220704][ T7462] "syz.2.433" (7462) uses obsolete ecb(arc4) skcipher [ 194.227192][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 195.592983][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 195.603841][ T7484] trusted_key: encrypted_key: insufficient parameters specified [ 195.627211][ T7484] trusted_key: encrypted_key: insufficient parameters specified [ 196.298063][ T7503] openvswitch: : Dropping previously announced user features [ 197.056543][ T30] audit: type=1326 audit(1750890959.331:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.0.448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f435738e929 code=0x0 [ 197.230518][ T30] audit: type=1400 audit(1750890959.501:308): avc: denied { write } for pid=7517 comm="syz.3.454" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 197.330931][ T7526] input: syz0 as /devices/virtual/input/input8 [ 197.562475][ T30] audit: type=1400 audit(1750890959.501:309): avc: denied { open } for pid=7517 comm="syz.3.454" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 197.586751][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.867618][ T30] audit: type=1400 audit(1750890959.591:310): avc: denied { read write } for pid=7517 comm="syz.3.454" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.184586][ T30] audit: type=1400 audit(1750890959.591:311): avc: denied { open } for pid=7517 comm="syz.3.454" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.211251][ T30] audit: type=1400 audit(1750890959.601:312): avc: denied { ioctl } for pid=7517 comm="syz.3.454" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.285585][ T7532] binder: 7531:7532 ioctl 4018620d 0 returned -22 [ 198.481538][ T7542] trusted_key: encrypted_key: insufficient parameters specified [ 198.498668][ T7542] trusted_key: encrypted_key: insufficient parameters specified [ 199.382826][ T7544] tipc: Enabling of bearer rejected, failed to enable media [ 199.538242][ T7548] tipc: Enabling of bearer rejected, already enabled [ 200.030436][ T5977] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 200.226586][ T5977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.273339][ T5977] usb 4-1: config 0 has no interfaces? [ 200.330055][ T5977] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.968710][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.989904][ T5977] usb 4-1: config 0 descriptor?? [ 201.220372][ T5977] usb 4-1: USB disconnect, device number 8 [ 201.328620][ T7573] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 201.352988][ T30] audit: type=1400 audit(1750890963.601:313): avc: denied { bind } for pid=7572 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 201.400307][ T30] audit: type=1400 audit(1750890963.601:314): avc: denied { connect } for pid=7572 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 201.503748][ T30] audit: type=1326 audit(1750890963.781:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f435738e929 code=0x0 [ 201.541947][ T7582] binder: 7580:7582 ioctl 4018620d 0 returned -22 [ 203.474147][ T30] audit: type=1400 audit(1750890965.721:316): avc: denied { mount } for pid=7596 comm="syz.2.476" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.520363][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 205.034281][ T30] audit: type=1400 audit(1750890967.301:317): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 205.338838][ T7633] binder: BINDER_SET_CONTEXT_MGR already set [ 205.347194][ T7633] binder: 7630:7633 ioctl 4018620d 200000000040 returned -16 [ 205.444411][ T7636] tipc: Enabling of bearer rejected, failed to enable media [ 206.334391][ T7642] tipc: Enabling of bearer rejected, already enabled [ 206.513267][ T30] audit: type=1400 audit(1750890968.771:318): avc: denied { read } for pid=7646 comm="syz.2.489" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.606052][ T30] audit: type=1400 audit(1750890968.771:319): avc: denied { open } for pid=7646 comm="syz.2.489" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.734552][ T30] audit: type=1400 audit(1750890968.781:320): avc: denied { ioctl } for pid=7646 comm="syz.2.489" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.767208][ T30] audit: type=1400 audit(1750890968.871:321): avc: denied { create } for pid=7646 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.787018][ T30] audit: type=1400 audit(1750890968.871:322): avc: denied { connect } for pid=7646 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.086171][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.490'. [ 207.813858][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 208.376727][ T7670] Failed to initialize the IGMP autojoin socket (err -2) [ 208.879650][ T7658] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 209.904884][ T7696] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 209.994595][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 210.480814][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.500'. [ 210.770315][ T5819] Bluetooth: hci0: command 0x0401 tx timeout [ 211.800713][ T7711] binder: BINDER_SET_CONTEXT_MGR already set [ 211.809294][ T7711] binder: 7710:7711 ioctl 4018620d 200000000040 returned -16 [ 211.851351][ T7713] 9p: Unknown Cache mode or invalid value fscach [ 213.722029][ T7734] binder: 7726:7734 ioctl 4018620d 0 returned -22 [ 214.822856][ T7739] netlink: 'syz.3.516': attribute type 1 has an invalid length. [ 214.830659][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 217.943327][ T30] audit: type=1400 audit(1750890980.221:323): avc: denied { attach_queue } for pid=7757 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 218.070083][ T7771] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 218.242537][ T7777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.530'. [ 218.324093][ T30] audit: type=1400 audit(1750890980.581:324): avc: denied { bind } for pid=7774 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.420583][ T30] audit: type=1400 audit(1750890980.581:325): avc: denied { listen } for pid=7774 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.526130][ T7787] trusted_key: encrypted_key: insufficient parameters specified [ 218.654824][ T7791] trusted_key: encrypted_key: insufficient parameters specified [ 220.967063][ T7804] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 221.116284][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 221.347381][ T7803] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 226.559908][ T7827] tipc: Enabling of bearer rejected, already enabled [ 229.929515][ T5830] sched: DL replenish lagged too much [ 252.970512][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.980569][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.988127][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.012598][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.020869][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.062528][ T30] audit: type=1400 audit(1750891015.311:326): avc: denied { mounton } for pid=7855 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 253.264189][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.283163][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.290808][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.299673][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.309023][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.352802][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.373625][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.381430][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.396010][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.403656][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.453402][ T5819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.485782][ T7855] Failed to initialize the IGMP autojoin socket (err -2) [ 253.520645][ T5819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.533251][ T5819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.544342][ T5819] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.554260][ T5819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.597972][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.635972][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.643803][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.661746][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.682655][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.976395][ T7861] Failed to initialize the IGMP autojoin socket (err -2) [ 253.986812][ T7859] Failed to initialize the IGMP autojoin socket (err -2) [ 253.996943][ T7857] Failed to initialize the IGMP autojoin socket (err -2) [ 254.009285][ T7864] Failed to initialize the IGMP autojoin socket (err -2) [ 255.070324][ T49] Bluetooth: hci0: command tx timeout [ 255.238235][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.390330][ T49] Bluetooth: hci1: command tx timeout [ 255.470408][ T49] Bluetooth: hci5: command tx timeout [ 255.630308][ T49] Bluetooth: hci6: command tx timeout [ 255.710519][ T49] Bluetooth: hci4: command tx timeout [ 257.150409][ T49] Bluetooth: hci0: command tx timeout [ 257.470480][ T49] Bluetooth: hci1: command tx timeout [ 257.550435][ T49] Bluetooth: hci5: command tx timeout [ 257.717385][ T49] Bluetooth: hci6: command tx timeout [ 257.790383][ T49] Bluetooth: hci4: command tx timeout [ 259.230524][ T49] Bluetooth: hci0: command tx timeout [ 259.550379][ T49] Bluetooth: hci1: command tx timeout [ 259.630460][ T49] Bluetooth: hci5: command tx timeout [ 259.792621][ T49] Bluetooth: hci6: command tx timeout [ 259.870330][ T49] Bluetooth: hci4: command tx timeout [ 261.313625][ T49] Bluetooth: hci0: command tx timeout [ 261.630285][ T49] Bluetooth: hci1: command tx timeout [ 261.710363][ T49] Bluetooth: hci5: command tx timeout [ 261.870328][ T49] Bluetooth: hci6: command tx timeout [ 261.952271][ T49] Bluetooth: hci4: command tx timeout [ 280.640355][ T30] audit: type=1400 audit(1750891042.911:327): avc: denied { relabelfrom } for pid=7859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.749686][ T30] audit: type=1400 audit(1750891042.911:328): avc: denied { relabelto } for pid=7859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 287.773062][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.784790][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.940393][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.948195][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.955852][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.073228][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.082280][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.095231][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.108025][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.120414][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.138799][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.155147][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.163028][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.171871][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.185816][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.248220][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.256465][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.277098][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.331080][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.338374][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.192882][ T49] Bluetooth: hci1: command tx timeout [ 293.198863][ T49] Bluetooth: hci2: command tx timeout [ 293.220680][ T49] Bluetooth: hci3: command tx timeout [ 293.226428][ T49] Bluetooth: hci4: command tx timeout [ 293.543925][ T7876] Failed to initialize the IGMP autojoin socket (err -2) [ 293.563074][ T7874] Failed to initialize the IGMP autojoin socket (err -2) [ 293.583980][ T7878] Failed to initialize the IGMP autojoin socket (err -2) [ 293.666656][ T7881] Failed to initialize the IGMP autojoin socket (err -2) [ 293.967278][ T7855] chnl_net:caif_netlink_parms(): no params data found [ 294.446270][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.470337][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.477525][ T7855] bridge_slave_0: entered allmulticast mode [ 294.503283][ T7855] bridge_slave_0: entered promiscuous mode [ 294.544338][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.560065][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.580411][ T7855] bridge_slave_1: entered allmulticast mode [ 294.587739][ T7855] bridge_slave_1: entered promiscuous mode [ 295.048975][ T7855] team0: Port device team_slave_0 added [ 295.110124][ T7855] team0: Port device team_slave_1 added [ 295.310563][ T49] Bluetooth: hci4: command tx timeout [ 295.315987][ T49] Bluetooth: hci3: command tx timeout [ 295.321689][ T5823] Bluetooth: hci2: command tx timeout [ 295.327074][ T5823] Bluetooth: hci1: command tx timeout [ 295.343467][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.353464][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.389055][ T7855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.409258][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.430230][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.496200][ T7855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.208660][ T7855] hsr_slave_0: entered promiscuous mode [ 296.228963][ T7855] hsr_slave_1: entered promiscuous mode [ 296.236252][ T7855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.247014][ T7855] Cannot create hsr debugfs directory [ 296.947744][ T7855] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 297.014068][ T7855] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 297.081882][ T7855] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 297.139178][ T7855] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 297.391685][ T5138] Bluetooth: hci1: command tx timeout [ 297.397107][ T5138] Bluetooth: hci2: command tx timeout [ 297.402584][ T5823] Bluetooth: hci4: command tx timeout [ 297.408102][ T49] Bluetooth: hci3: command tx timeout [ 297.705687][ T7855] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.771301][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.778437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.849247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.856395][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.408427][ T7855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.470428][ T49] Bluetooth: hci3: command tx timeout [ 299.475850][ T49] Bluetooth: hci2: command tx timeout [ 299.481721][ T5138] Bluetooth: hci4: command tx timeout [ 299.487155][ T5138] Bluetooth: hci1: command tx timeout [ 299.948066][ T7855] veth0_vlan: entered promiscuous mode [ 299.964374][ T7855] veth1_vlan: entered promiscuous mode [ 300.144430][ T7855] veth0_macvtap: entered promiscuous mode [ 300.211880][ T7855] veth1_macvtap: entered promiscuous mode [ 300.419010][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.495575][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.546086][ T7855] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 300.613935][ T7855] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 300.657420][ T7855] wireguard: wg0: Could not create IPv4 socket [ 300.685820][ T7855] wireguard: wg1: Could not create IPv4 socket [ 300.711390][ T7855] wireguard: wg2: Could not create IPv4 socket [ 310.694424][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.703794][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.713741][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.725730][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.733605][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.802877][ T8223] Failed to initialize the IGMP autojoin socket (err -2) [ 312.834359][ T49] Bluetooth: hci0: command tx timeout [ 314.913285][ T49] Bluetooth: hci0: command tx timeout [ 316.688752][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.990348][ T49] Bluetooth: hci0: command tx timeout [ 319.070435][ T49] Bluetooth: hci0: command tx timeout [ 324.181116][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.189844][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.205009][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.212808][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.221074][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.221731][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.230922][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.243468][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.302983][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.312207][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.319771][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.336984][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.347454][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.358624][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.366403][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.404398][ T8493] Failed to initialize the IGMP autojoin socket (err -2) [ 324.412900][ T8494] Failed to initialize the IGMP autojoin socket (err -2) [ 324.429394][ T8495] Failed to initialize the IGMP autojoin socket (err -2) [ 325.042669][ T7874] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 325.094802][ T7874] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 325.135413][ T7874] wireguard: wg0: Could not create IPv4 socket [ 325.155261][ T7874] wireguard: wg1: Could not create IPv4 socket [ 325.182224][ T7874] wireguard: wg2: Could not create IPv4 socket [ 326.270955][ T49] Bluetooth: hci3: command tx timeout [ 326.430541][ T5823] Bluetooth: hci4: command tx timeout [ 326.436487][ T5823] Bluetooth: hci2: command tx timeout [ 328.350450][ T5823] Bluetooth: hci3: command tx timeout [ 328.510564][ T5823] Bluetooth: hci2: command tx timeout [ 328.515994][ T5823] Bluetooth: hci4: command tx timeout [ 330.434410][ T5823] Bluetooth: hci3: command tx timeout [ 330.590767][ T49] Bluetooth: hci2: command tx timeout [ 330.596240][ T5823] Bluetooth: hci4: command tx timeout [ 332.522438][ T5823] Bluetooth: hci3: command tx timeout [ 332.670505][ T5823] Bluetooth: hci4: command tx timeout [ 332.675937][ T5823] Bluetooth: hci2: command tx timeout [ 343.269932][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.279441][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.292073][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.299847][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.309595][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.355162][ T8942] Failed to initialize the IGMP autojoin socket (err -2) [ 345.390853][ T5823] Bluetooth: hci1: command tx timeout [ 347.470342][ T5823] Bluetooth: hci1: command tx timeout [ 349.551650][ T5823] Bluetooth: hci1: command tx timeout [ 351.630310][ T5823] Bluetooth: hci1: command tx timeout [ 369.218174][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.227414][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.239583][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.247442][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.255331][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.318572][ T9531] Failed to initialize the IGMP autojoin socket (err -2) [ 369.427667][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.440580][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.449130][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.460655][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.468500][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.484715][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.493119][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.501048][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.508769][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.517505][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.589474][ T9537] Failed to initialize the IGMP autojoin socket (err -2) [ 369.619356][ T9536] Failed to initialize the IGMP autojoin socket (err -2) [ 370.889745][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.898461][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.909781][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.917913][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.926015][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.983395][ T9568] Failed to initialize the IGMP autojoin socket (err -2) [ 371.313621][ T5138] Bluetooth: hci2: command tx timeout [ 371.550719][ T5138] Bluetooth: hci4: command tx timeout [ 371.630573][ T5138] Bluetooth: hci3: command tx timeout [ 372.990843][ T5138] Bluetooth: hci5: command tx timeout [ 373.416592][ T5138] Bluetooth: hci2: command tx timeout [ 373.634166][ T5138] Bluetooth: hci4: command tx timeout [ 373.710593][ T5138] Bluetooth: hci3: command tx timeout [ 375.070814][ T5138] Bluetooth: hci5: command tx timeout [ 375.480142][ T5138] Bluetooth: hci2: command tx timeout [ 375.710226][ T5138] Bluetooth: hci4: command tx timeout [ 375.790615][ T5138] Bluetooth: hci3: command tx timeout [ 377.164596][ T5138] Bluetooth: hci5: command tx timeout [ 377.550789][ T5138] Bluetooth: hci2: command tx timeout [ 377.790275][ T5138] Bluetooth: hci4: command tx timeout [ 377.870540][ T5138] Bluetooth: hci3: command tx timeout [ 378.124046][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.230374][ T5138] Bluetooth: hci5: command tx timeout [ 397.304416][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.313933][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.324758][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.332686][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.348088][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.405990][T10194] Failed to initialize the IGMP autojoin socket (err -2) [ 399.390448][ T5823] Bluetooth: hci1: command tx timeout [ 401.473820][ T5823] Bluetooth: hci1: command tx timeout [ 403.550386][ T5823] Bluetooth: hci1: command tx timeout [ 405.630452][ T5823] Bluetooth: hci1: command tx timeout [ 409.540387][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.623902][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.632702][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.643824][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.651617][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.661016][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.709074][T10276] Failed to initialize the IGMP autojoin socket (err -2) [ 411.768793][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.777463][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.785310][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.793110][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.800921][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.829125][T10279] Failed to initialize the IGMP autojoin socket (err -2) [ 412.302126][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.324367][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.332065][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.339807][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.350802][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.386769][T10287] Failed to initialize the IGMP autojoin socket (err -2) [ 412.594067][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.602349][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.613364][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.630534][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.638018][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.686824][T10294] Failed to initialize the IGMP autojoin socket (err -2) [ 413.716423][ T5138] Bluetooth: hci2: command tx timeout [ 413.870402][ T5138] Bluetooth: hci3: command tx timeout [ 414.430300][ T5138] Bluetooth: hci4: command tx timeout [ 414.670244][ T5138] Bluetooth: hci5: command tx timeout [ 415.790586][ T5138] Bluetooth: hci2: command tx timeout [ 415.950934][ T5138] Bluetooth: hci3: command tx timeout [ 416.510504][ T5138] Bluetooth: hci4: command tx timeout [ 416.750263][ T5138] Bluetooth: hci5: command tx timeout [ 417.870221][ T5138] Bluetooth: hci2: command tx timeout [ 418.030497][ T5138] Bluetooth: hci3: command tx timeout [ 418.590216][ T5138] Bluetooth: hci4: command tx timeout [ 418.830221][ T5138] Bluetooth: hci5: command tx timeout [ 419.953160][ T5138] Bluetooth: hci2: command tx timeout [ 420.110744][ T5138] Bluetooth: hci3: command tx timeout [ 420.670370][ T5138] Bluetooth: hci4: command tx timeout [ 420.911420][ T5138] Bluetooth: hci5: command tx timeout [ 423.049580][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.057846][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.068427][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.077049][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.087546][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.147937][T10368] Failed to initialize the IGMP autojoin socket (err -2) [ 425.153296][ T5138] Bluetooth: hci1: command tx timeout [ 427.230698][ T5138] Bluetooth: hci1: command tx timeout [ 429.310499][ T5138] Bluetooth: hci1: command tx timeout [ 431.390822][ T5138] Bluetooth: hci1: command tx timeout [ 433.239504][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.636945][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.648312][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.658357][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.666331][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.674075][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.714542][T10407] Failed to initialize the IGMP autojoin socket (err -2) [ 435.418853][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.427257][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.437528][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.445277][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.453588][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.483107][T10410] Failed to initialize the IGMP autojoin socket (err -2) [ 436.116690][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.137873][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.160234][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.237570][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.264523][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.386364][T10415] Failed to initialize the IGMP autojoin socket (err -2) [ 436.513418][ T5138] Bluetooth: hci0: command 0x0406 tx timeout [ 436.750604][ T5823] Bluetooth: hci2: command tx timeout [ 436.890841][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.899428][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.910423][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.918195][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.929220][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.956026][T10426] Failed to initialize the IGMP autojoin socket (err -2) [ 437.470432][ T5138] Bluetooth: hci3: command tx timeout [ 437.587726][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 437.599319][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 437.607203][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 437.618884][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.626714][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.658128][T10438] Failed to initialize the IGMP autojoin socket (err -2) [ 438.430816][ T5823] Bluetooth: hci1: command tx timeout [ 438.835373][ T5823] Bluetooth: hci2: command tx timeout [ 438.990369][ T5823] Bluetooth: hci4: command tx timeout [ 439.550588][ T5823] Bluetooth: hci3: command tx timeout [ 439.566225][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.710506][ T5823] Bluetooth: hci5: command tx timeout [ 440.510222][ T5823] Bluetooth: hci1: command tx timeout [ 440.910340][ T5823] Bluetooth: hci2: command tx timeout [ 441.071367][ T5823] Bluetooth: hci4: command tx timeout [ 441.630212][ T5823] Bluetooth: hci3: command tx timeout [ 441.790219][ T5823] Bluetooth: hci5: command tx timeout [ 442.333700][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.603529][ T5823] Bluetooth: hci1: command tx timeout [ 443.122501][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.133795][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.142150][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.149864][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.160248][ T5138] Bluetooth: hci4: command tx timeout [ 443.166280][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.204309][T10491] Failed to initialize the IGMP autojoin socket (err -2) [ 443.717826][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.726200][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.734002][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.745315][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.753043][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.779408][T10494] Failed to initialize the IGMP autojoin socket (err -2) [ 443.871941][ T5138] Bluetooth: hci5: command tx timeout [ 444.671337][ T5138] Bluetooth: hci1: command tx timeout [ 445.234204][ T5823] Bluetooth: hci4: command tx timeout [ 445.239663][ T5138] Bluetooth: hci2: command tx timeout [ 445.790380][ T5138] Bluetooth: hci3: command tx timeout [ 445.950348][ T5138] Bluetooth: hci5: command tx timeout [ 447.310297][ T5138] Bluetooth: hci2: command tx timeout [ 447.674235][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.774704][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.786063][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.794753][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.812614][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.860032][T10499] Failed to initialize the IGMP autojoin socket (err -2) [ 447.874470][ T5138] Bluetooth: hci3: command tx timeout [ 448.322062][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.347375][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.403341][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.414725][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.422518][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.454912][T10513] Failed to initialize the IGMP autojoin socket (err -2) [ 448.807059][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.818273][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.827058][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.839102][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.847029][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.876237][T10517] Failed to initialize the IGMP autojoin socket (err -2) [ 449.390420][ T5823] Bluetooth: hci2: command tx timeout [ 449.873178][ T5823] Bluetooth: hci0: command tx timeout [ 449.953226][ T5823] Bluetooth: hci3: command tx timeout [ 450.182038][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.523789][ T5823] Bluetooth: hci1: command tx timeout [ 450.915026][T10491] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 450.922873][ T5823] Bluetooth: hci4: command tx timeout [ 451.027946][T10491] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 451.099556][T10491] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 451.174477][T10491] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 451.470767][ T5823] Bluetooth: hci2: command tx timeout [ 451.953225][ T5823] Bluetooth: hci0: command tx timeout [ 452.346505][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.362055][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.369645][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.381123][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.388605][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.487608][T10491] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 452.538883][T10491] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 452.578118][T10548] Failed to initialize the IGMP autojoin socket (err -2) [ 452.591127][ T5138] Bluetooth: hci1: command tx timeout [ 452.603628][T10491] wireguard: wg0: Could not create IPv4 socket [ 452.669562][T10491] wireguard: wg1: Could not create IPv4 socket [ 452.679581][T10491] wireguard: wg2: Could not create IPv4 socket [ 452.990259][ T5138] Bluetooth: hci4: command tx timeout [ 454.030293][ T5138] Bluetooth: hci0: command tx timeout [ 454.590481][ T5138] Bluetooth: hci3: command tx timeout [ 454.670251][ T5138] Bluetooth: hci1: command tx timeout [ 455.070366][ T5138] Bluetooth: hci4: command tx timeout [ 456.110835][ T5138] Bluetooth: hci0: command tx timeout [ 456.671161][ T5138] Bluetooth: hci3: command tx timeout [ 458.540389][T10499] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 458.634474][T10499] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 458.721518][T10499] wireguard: wg0: Could not create IPv4 socket [ 458.748311][T10499] wireguard: wg1: Could not create IPv4 socket [ 458.754812][ T5138] Bluetooth: hci3: command tx timeout [ 458.792114][T10499] wireguard: wg2: Could not create IPv4 socket [ 458.908932][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.920642][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.928825][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.936670][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.944219][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.004255][T10589] Failed to initialize the IGMP autojoin socket (err -2) [ 459.511783][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.520045][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.527813][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.535784][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.551149][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.671876][T10591] Failed to initialize the IGMP autojoin socket (err -2) [ 460.830393][ T5823] Bluetooth: hci3: command tx timeout [ 460.990343][ T5823] Bluetooth: hci1: command tx timeout [ 461.630327][ T5823] Bluetooth: hci0: command tx timeout [ 463.070318][ T5823] Bluetooth: hci1: command tx timeout [ 463.728739][ T5823] Bluetooth: hci0: command tx timeout [ 463.830534][ T13] bridge_slave_1: left allmulticast mode [ 463.850082][ T13] bridge_slave_1: left promiscuous mode [ 463.885426][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.959288][ T13] bridge_slave_0: left allmulticast mode [ 463.985092][ T13] bridge_slave_0: left promiscuous mode [ 464.020407][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.150653][ T5823] Bluetooth: hci1: command tx timeout [ 465.637700][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.654340][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.662559][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.673940][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.691209][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.790729][ T5138] Bluetooth: hci0: command tx timeout [ 467.230435][ T5138] Bluetooth: hci1: command tx timeout [ 467.791445][ T5138] Bluetooth: hci2: command tx timeout [ 467.870379][ T5138] Bluetooth: hci0: command tx timeout [ 469.870192][ T5138] Bluetooth: hci2: command tx timeout [ 471.950468][ T5138] Bluetooth: hci2: command tx timeout [ 473.922926][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.931835][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.962554][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.979280][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.990666][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.031342][ T5823] Bluetooth: hci2: command tx timeout [ 476.030334][ T5823] Bluetooth: hci4: command tx timeout [ 478.112490][ T5823] Bluetooth: hci4: command tx timeout [ 480.193147][ T5823] Bluetooth: hci4: command tx timeout [ 482.270241][ T5823] Bluetooth: hci4: command tx timeout [ 482.677922][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.729424][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.780065][ T13] bond0 (unregistering): Released all slaves [ 483.290033][ T13] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 483.956456][ T13] bond1 (unregistering): Released all slaves [ 484.103592][ T13] batman_adv: batadv0: Removing interface: ip6gretap1 [ 484.990703][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.037078][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.087915][ T13] bond0 (unregistering): Released all slaves [ 485.281207][T10600] Failed to initialize the IGMP autojoin socket (err -2) [ 485.291139][T10603] Failed to initialize the IGMP autojoin socket (err -2) [ 487.645508][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.654836][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.678531][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.693861][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.701903][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.774280][T10626] Failed to initialize the IGMP autojoin socket (err -2) [ 488.166072][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.186835][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.204289][T10548] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 488.220008][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.276764][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.324028][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.372374][T10548] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 488.412852][T10548] wireguard: wg0: Could not create IPv4 socket [ 488.449981][T10548] wireguard: wg1: Could not create IPv4 socket [ 488.483470][T10628] Failed to initialize the IGMP autojoin socket (err -2) [ 488.492334][T10548] wireguard: wg2: Could not create IPv4 socket [ 489.790875][ T5823] Bluetooth: hci0: command tx timeout [ 490.510283][ T5823] Bluetooth: hci1: command tx timeout [ 491.870193][ T5823] Bluetooth: hci0: command tx timeout [ 492.590958][ T5823] Bluetooth: hci1: command tx timeout [ 493.950987][ T5823] Bluetooth: hci0: command tx timeout [ 494.670674][ T5823] Bluetooth: hci1: command tx timeout [ 496.032106][ T5823] Bluetooth: hci0: command tx timeout [ 496.750310][ T5823] Bluetooth: hci1: command tx timeout [ 499.149244][ T13] : left promiscuous mode [ 501.004321][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.886888][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.895466][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.903173][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.910951][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.918796][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 513.994889][T10632] Failed to initialize the IGMP autojoin socket (err -2) [ 515.951173][ T5138] Bluetooth: hci3: command tx timeout [ 517.565509][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 517.577194][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 517.585358][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 517.596085][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 517.605740][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.640599][T10645] Failed to initialize the IGMP autojoin socket (err -2) [ 518.031949][ T5823] Bluetooth: hci3: command tx timeout [ 518.436843][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 518.451621][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 518.459169][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 518.472704][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 518.484521][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.542999][T10648] Failed to initialize the IGMP autojoin socket (err -2) [ 519.386800][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.407873][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.568476][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.576317][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.584876][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.640955][ T5138] Bluetooth: hci0: command tx timeout [ 519.654233][T10651] Failed to initialize the IGMP autojoin socket (err -2) [ 520.110484][ T5138] Bluetooth: hci3: command tx timeout [ 520.510268][ T5138] Bluetooth: hci1: command tx timeout [ 521.631295][ T5138] Bluetooth: hci2: command tx timeout [ 521.710672][ T5138] Bluetooth: hci0: command tx timeout [ 522.191377][ T5138] Bluetooth: hci3: command tx timeout [ 522.590202][ T5138] Bluetooth: hci1: command tx timeout [ 523.712239][ T5138] Bluetooth: hci2: command tx timeout [ 523.790553][ T5138] Bluetooth: hci0: command tx timeout [ 524.670361][ T5138] Bluetooth: hci1: command tx timeout [ 525.791931][ T5823] Bluetooth: hci2: command tx timeout [ 525.870662][ T5823] Bluetooth: hci0: command tx timeout [ 526.751437][ T5823] Bluetooth: hci1: command tx timeout [ 527.870927][ T5823] Bluetooth: hci2: command tx timeout [ 535.080520][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 535.088680][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 535.099544][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 535.107564][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 535.118624][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.188613][T10655] Failed to initialize the IGMP autojoin socket (err -2) [ 537.230329][ T5138] Bluetooth: hci5: command tx timeout [ 539.310309][ T5138] Bluetooth: hci5: command tx timeout [ 539.688991][ T13] : left promiscuous mode [ 541.393265][ T5138] Bluetooth: hci5: command tx timeout [ 541.505861][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.517938][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.525759][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.534287][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.541920][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.816481][T10663] Failed to initialize the IGMP autojoin socket (err -2) [ 543.470208][ T5138] Bluetooth: hci5: command tx timeout [ 543.871336][ T5138] Bluetooth: hci3: command tx timeout [ 545.950416][ T5823] Bluetooth: hci3: command tx timeout [ 548.032657][ T5823] Bluetooth: hci3: command tx timeout [ 550.111166][ T5823] Bluetooth: hci3: command tx timeout [ 562.456127][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.685084][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 568.702109][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 568.709718][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 568.719135][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.726715][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.768517][T10669] Failed to initialize the IGMP autojoin socket (err -2) [ 568.828517][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.840455][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.849084][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.862200][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.869656][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.924607][T10672] Failed to initialize the IGMP autojoin socket (err -2) [ 569.489710][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.498233][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.509769][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.517712][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.525401][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.569182][T10674] Failed to initialize the IGMP autojoin socket (err -2) [ 570.334146][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.343101][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.355255][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.363103][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.371507][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.421805][T10677] Failed to initialize the IGMP autojoin socket (err -2) [ 570.751034][ T5823] Bluetooth: hci0: command tx timeout [ 570.910257][ T5823] Bluetooth: hci1: command tx timeout [ 571.550216][ T5823] Bluetooth: hci2: command tx timeout [ 572.430270][ T5823] Bluetooth: hci5: command tx timeout [ 572.830170][ T5823] Bluetooth: hci0: command tx timeout [ 572.991365][ T5823] Bluetooth: hci1: command tx timeout [ 573.630159][ T5823] Bluetooth: hci2: command tx timeout [ 574.511603][ T5823] Bluetooth: hci5: command tx timeout [ 574.910718][ T5823] Bluetooth: hci0: command tx timeout [ 575.072478][ T5823] Bluetooth: hci1: command tx timeout [ 575.710816][ T5823] Bluetooth: hci2: command tx timeout [ 576.590405][ T5823] Bluetooth: hci5: command tx timeout [ 576.990713][ T5823] Bluetooth: hci0: command tx timeout [ 577.150801][ T5823] Bluetooth: hci1: command tx timeout [ 577.791320][ T5823] Bluetooth: hci2: command tx timeout [ 578.670189][ T5823] Bluetooth: hci5: command tx timeout [ 597.741909][ T13] tipc: Disabling bearer [ 597.804718][ T13] tipc: Left network mode [ 600.249939][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 600.258946][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.269805][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.280527][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.288018][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.353248][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 600.364996][T10683] Failed to initialize the IGMP autojoin socket (err -2) [ 602.350796][ T5823] Bluetooth: hci3: command tx timeout [ 604.430779][ T5823] Bluetooth: hci3: command tx timeout [ 606.510804][ T5823] Bluetooth: hci3: command tx timeout [ 608.590870][ T5823] Bluetooth: hci3: command tx timeout [ 623.898246][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.900910][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 629.909500][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 629.917793][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 629.925804][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 629.933727][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 630.053710][T10686] Failed to initialize the IGMP autojoin socket (err -2) [ 630.868685][ T49] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 630.881195][ T49] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 630.889247][ T49] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 630.897315][ T49] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 630.905272][ T49] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 630.968217][T10690] Failed to initialize the IGMP autojoin socket (err -2) [ 632.030242][ T5823] Bluetooth: hci6: command tx timeout [ 632.174654][ T5823] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 632.183413][ T5823] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 632.192157][ T5823] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 632.202173][ T5823] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 632.209647][ T5823] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 632.260850][T10694] Failed to initialize the IGMP autojoin socket (err -2) [ 632.958408][ T49] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 632.966751][ T49] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 632.974663][ T49] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 632.982953][ T49] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 632.990964][ T49] Bluetooth: hci7: command tx timeout [ 632.997458][T10699] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 633.048276][T10697] Failed to initialize the IGMP autojoin socket (err -2) [ 634.110788][T10699] Bluetooth: hci6: command tx timeout [ 634.270249][T10699] Bluetooth: hci8: command tx timeout [ 635.070239][T10699] Bluetooth: hci9: command tx timeout [ 635.076209][T10699] Bluetooth: hci7: command tx timeout [ 636.197072][T10699] Bluetooth: hci6: command tx timeout [ 636.350427][T10699] Bluetooth: hci8: command tx timeout [ 637.155984][T10699] Bluetooth: hci7: command tx timeout [ 637.161433][ T5823] Bluetooth: hci9: command tx timeout [ 638.270466][T10699] Bluetooth: hci6: command tx timeout [ 638.431544][T10699] Bluetooth: hci8: command tx timeout [ 639.231516][ T5823] Bluetooth: hci9: command tx timeout [ 639.237253][T10699] Bluetooth: hci7: command tx timeout [ 640.510210][T10699] Bluetooth: hci8: command tx timeout [ 641.320496][T10699] Bluetooth: hci9: command tx timeout [ 661.904473][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.917051][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.924956][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.937301][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.945338][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.013372][T10701] Failed to initialize the IGMP autojoin socket (err -2) [ 664.030355][ T5823] Bluetooth: hci0: command tx timeout [ 666.110410][ T5823] Bluetooth: hci0: command tx timeout [ 668.192307][ T5823] Bluetooth: hci0: command tx timeout [ 670.270233][ T5823] Bluetooth: hci0: command tx timeout [ 685.343743][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.211668][T10699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 687.219932][T10699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 687.227964][T10699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 687.235896][T10699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 687.243525][T10699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 687.319667][T10709] Failed to initialize the IGMP autojoin socket (err -2) [ 687.360960][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.369042][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.380909][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.389026][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.397023][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.469613][T10711] Failed to initialize the IGMP autojoin socket (err -2) [ 688.286797][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 688.295332][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 688.306891][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 688.317069][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 688.324868][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 688.385704][T10714] Failed to initialize the IGMP autojoin socket (err -2) [ 689.310163][T10699] Bluetooth: hci1: command tx timeout [ 689.400101][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 689.408592][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.416533][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.424739][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.432670][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 689.470520][ T5823] Bluetooth: hci2: command tx timeout [ 689.499002][T10717] Failed to initialize the IGMP autojoin socket (err -2) [ 690.440165][ T5823] Bluetooth: hci3: command tx timeout [ 691.392662][ T5823] Bluetooth: hci1: command tx timeout [ 691.470289][ T5823] Bluetooth: hci5: command tx timeout [ 691.550533][ T5823] Bluetooth: hci2: command tx timeout [ 692.512007][ T5823] Bluetooth: hci3: command tx timeout [ 693.480167][ T5823] Bluetooth: hci1: command tx timeout [ 693.552490][ T5823] Bluetooth: hci5: command tx timeout [ 693.630144][ T5823] Bluetooth: hci2: command tx timeout [ 694.590191][ T5823] Bluetooth: hci3: command tx timeout [ 695.550364][ T5823] Bluetooth: hci1: command tx timeout [ 695.643237][ T5823] Bluetooth: hci5: command tx timeout [ 695.723078][ T5823] Bluetooth: hci2: command tx timeout [ 696.670956][ T5823] Bluetooth: hci3: command tx timeout [ 697.713110][ T5823] Bluetooth: hci5: command tx timeout [ 723.578299][T10699] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 723.587289][T10699] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 723.597792][T10699] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 723.607710][T10699] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 723.621370][T10699] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.677319][T10720] Failed to initialize the IGMP autojoin socket (err -2) [ 725.710132][ T5823] Bluetooth: hci6: command tx timeout [ 727.791199][ T5823] Bluetooth: hci6: command tx timeout [ 729.870574][ T5823] Bluetooth: hci6: command tx timeout [ 731.950124][ T5823] Bluetooth: hci6: command tx timeout [ 746.776717][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.560621][T10699] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.569354][T10699] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.577057][T10699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.584912][T10699] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.592767][T10699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 748.648426][T10727] Failed to initialize the IGMP autojoin socket (err -2) [ 750.151112][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 750.159761][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 750.167695][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 750.175516][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 750.183427][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 750.233915][T10733] Failed to initialize the IGMP autojoin socket (err -2) [ 750.678844][ T5823] Bluetooth: hci0: command tx timeout [ 751.212401][T10699] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 751.224774][T10699] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 751.235440][T10699] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 751.243400][T10699] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 751.250918][T10699] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 751.286920][T10736] Failed to initialize the IGMP autojoin socket (err -2) [ 752.273974][T10699] Bluetooth: hci7: command tx timeout [ 752.702816][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 752.715494][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 752.723543][ T5823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 752.732225][ T5823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 752.740435][ T5823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 752.760874][T10699] Bluetooth: hci0: command tx timeout [ 752.800593][T10739] Failed to initialize the IGMP autojoin socket (err -2) [ 753.310224][T10699] Bluetooth: hci8: command tx timeout [ 754.350173][T10699] Bluetooth: hci7: command tx timeout [ 754.830190][T10699] Bluetooth: hci0: command tx timeout [ 754.835639][T10699] Bluetooth: hci9: command tx timeout [ 755.392299][T10699] Bluetooth: hci8: command tx timeout [ 756.431106][T10699] Bluetooth: hci7: command tx timeout [ 756.910201][ T5138] Bluetooth: hci0: command tx timeout [ 756.915677][T10699] Bluetooth: hci9: command tx timeout [ 757.470170][T10699] Bluetooth: hci8: command tx timeout [ 758.511117][T10699] Bluetooth: hci7: command tx timeout [ 758.990170][T10699] Bluetooth: hci9: command tx timeout [ 759.550201][T10699] Bluetooth: hci8: command tx timeout [ 761.070132][T10699] Bluetooth: hci9: command tx timeout [ 785.245189][ T5138] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 785.254306][ T5138] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 785.262479][ T5138] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 785.273790][ T5138] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 785.284076][ T5138] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 785.333107][T10742] Failed to initialize the IGMP autojoin socket (err -2) [ 787.390342][ T5138] Bluetooth: hci10: command tx timeout [ 789.470257][ T5138] Bluetooth: hci10: command tx timeout [ 791.550674][ T5138] Bluetooth: hci10: command tx timeout [ 793.630779][ T5138] Bluetooth: hci10: command tx timeout [ 808.213388][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.241005][T10750] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 810.252448][T10750] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 810.260605][T10750] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 810.272097][T10750] Bluetooth: hci1: command 0x0406 tx timeout [ 810.278108][T10750] Bluetooth: hci2: command 0x0406 tx timeout [ 810.286509][T10752] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 810.299183][T10752] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 810.344274][T10748] Failed to initialize the IGMP autojoin socket (err -2) [ 811.666229][T10699] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 811.674564][T10699] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 811.682800][T10699] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 811.691376][T10699] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 811.698991][T10699] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 811.755453][T10754] Failed to initialize the IGMP autojoin socket (err -2) [ 812.432719][T10699] Bluetooth: hci11: command tx timeout [ 813.542210][T10752] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 813.554547][T10752] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 813.562733][T10752] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 813.571935][T10752] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 813.583148][T10752] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 813.799487][ T49] Bluetooth: hci12: command tx timeout [ 813.832674][T10758] Failed to initialize the IGMP autojoin socket (err -2) [ 814.525304][T10752] Bluetooth: hci11: command tx timeout [ 814.999847][ T49] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 815.020263][ T49] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 815.028337][ T49] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 815.036249][ T49] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 815.044371][ T49] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 815.412643][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 815.419238][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 815.445936][T10761] Failed to initialize the IGMP autojoin socket (err -2) [ 815.880215][ T5138] Bluetooth: hci12: command tx timeout [ 815.885746][ T5138] Bluetooth: hci13: command tx timeout [ 816.590240][ T5138] Bluetooth: hci11: command tx timeout [ 817.231121][ T5138] Bluetooth: hci14: command tx timeout [ 817.950976][T10699] Bluetooth: hci12: command tx timeout [ 817.956539][ T5138] Bluetooth: hci13: command tx timeout [ 818.670074][ T5138] Bluetooth: hci11: command tx timeout [ 819.310076][ T5138] Bluetooth: hci14: command tx timeout [ 820.030118][ T5138] Bluetooth: hci13: command tx timeout [ 820.036143][T10699] Bluetooth: hci12: command tx timeout [ 821.392048][ T5138] Bluetooth: hci14: command tx timeout [ 822.110194][ T5138] Bluetooth: hci13: command tx timeout [ 823.480063][ T5138] Bluetooth: hci14: command tx timeout [ 846.980473][T10699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.992209][T10699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.999797][T10699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 847.008601][T10699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.018081][T10699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.074654][T10765] Failed to initialize the IGMP autojoin socket (err -2) [ 849.071103][T10699] Bluetooth: hci1: command tx timeout [ 851.150093][T10699] Bluetooth: hci1: command tx timeout [ 853.230207][T10699] Bluetooth: hci1: command tx timeout [ 855.311826][T10699] Bluetooth: hci1: command tx timeout [ 869.660483][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.711734][T10699] Bluetooth: hci0: command 0x0406 tx timeout [ 871.907645][T10699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 871.915966][T10699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 871.924191][T10699] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 871.932369][T10699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 871.940454][T10699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 872.004190][T10771] Failed to initialize the IGMP autojoin socket (err -2) [ 874.032507][ T5138] Bluetooth: hci2: command tx timeout [ 874.321839][T10699] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 874.331802][T10699] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 874.339582][T10699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 874.348473][T10699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 874.356682][T10699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 874.397692][T10775] Failed to initialize the IGMP autojoin socket (err -2) [ 875.267189][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 875.275513][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 875.283429][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 875.291194][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 875.299859][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 875.391695][T10778] Failed to initialize the IGMP autojoin socket (err -2) [ 876.119356][ T49] Bluetooth: hci2: command tx timeout [ 876.430492][ T49] Bluetooth: hci3: command tx timeout [ 876.573955][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 876.582826][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 876.592539][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 876.600792][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 876.608244][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 876.654379][T10781] Failed to initialize the IGMP autojoin socket (err -2) [ 876.832699][ T49] Bluetooth: hci8: command 0x0406 tx timeout [ 876.838742][ T49] Bluetooth: hci9: command 0x0406 tx timeout [ 876.845038][ T5823] Bluetooth: hci7: command 0x0406 tx timeout [ 877.400277][T10752] Bluetooth: hci5: command tx timeout [ 878.190157][T10752] Bluetooth: hci2: command tx timeout [ 878.514615][T10752] Bluetooth: hci3: command tx timeout [ 878.670207][T10752] Bluetooth: hci6: command tx timeout [ 879.470348][T10752] Bluetooth: hci5: command tx timeout [ 880.270066][T10752] Bluetooth: hci2: command tx timeout [ 880.590789][T10752] Bluetooth: hci3: command tx timeout [ 880.750075][T10752] Bluetooth: hci6: command tx timeout [ 881.550716][T10752] Bluetooth: hci5: command tx timeout [ 882.670602][T10752] Bluetooth: hci3: command tx timeout [ 882.839599][T10752] Bluetooth: hci6: command tx timeout [ 883.631376][T10752] Bluetooth: hci5: command tx timeout [ 884.911232][T10752] Bluetooth: hci6: command tx timeout [ 899.070295][ T31] INFO: task syz-executor:10727 blocked for more than 143 seconds. [ 899.078234][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 899.110013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 899.118708][ T31] task:syz-executor state:D stack:26728 pid:10727 tgid:10727 ppid:1 task_flags:0x400140 flags:0x00004006 [ 899.260303][ T31] Call Trace: [ 899.263621][ T31] [ 899.266552][ T31] __schedule+0x116a/0x5de0 [ 899.351016][ T31] ? kasan_save_stack+0x42/0x60 [ 899.355913][ T31] ? __kasan_slab_free+0x51/0x70 [ 899.400051][ T31] ? __lock_acquire+0x622/0x1c90 [ 899.405042][ T31] ? __pfx___schedule+0x10/0x10 [ 899.409907][ T31] ? find_held_lock+0x2b/0x80 [ 899.450012][ T31] ? schedule+0x2d7/0x3a0 [ 899.454387][ T31] schedule+0xe7/0x3a0 [ 899.458465][ T31] schedule_preempt_disabled+0x13/0x30 [ 899.483053][ T31] __mutex_lock+0x6c7/0xb90 [ 899.487595][ T31] ? rcu_barrier+0x48/0x6e0 [ 899.505215][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 899.518009][ T31] ? ops_undo_list+0x78d/0xab0 [ 899.530018][ T31] ? ops_undo_list+0x3eb/0xab0 [ 899.534806][ T31] ? rcu_barrier+0x48/0x6e0 [ 899.539316][ T31] rcu_barrier+0x48/0x6e0 [ 899.587554][ T31] ? ops_init+0x2fa/0x5f0 [ 899.597918][ T31] setup_net+0x2e6/0x510 [ 899.625080][ T31] ? __pfx_setup_net+0x10/0x10 [ 899.629871][ T31] ? debug_mutex_init+0x37/0x70 [ 899.659279][ T31] copy_net_ns+0x2a6/0x5f0 [ 899.663774][ T31] create_new_namespaces+0x3ea/0xa90 [ 899.669074][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 899.698843][ T31] ksys_unshare+0x45b/0xa40 [ 899.710150][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 899.715194][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 899.753016][ T31] ? dnotify_flush+0x79/0x4c0 [ 899.757725][ T31] __x64_sys_unshare+0x31/0x40 [ 899.789146][ T31] do_syscall_64+0xcd/0x4c0 [ 899.798694][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.818495][ T31] RIP: 0033:0x7f2abe990127 [ 899.839297][ T31] RSP: 002b:00007ffdd6db0638 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 899.870095][ T31] RAX: ffffffffffffffda RBX: 00007f2abebb5f40 RCX: 00007f2abe990127 [ 899.878079][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 899.930015][ T31] RBP: 00007f2abebb6738 R08: 0000000000000000 R09: 0000000000000000 [ 899.938009][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 899.992343][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 900.013965][ T31] [ 900.017019][ T31] INFO: task syz-executor:10733 blocked for more than 144 seconds. [ 900.051619][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 900.059255][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 900.119246][ T31] task:syz-executor state:D stack:26728 pid:10733 tgid:10733 ppid:1 task_flags:0x400140 flags:0x00004004 [ 900.182450][ T31] Call Trace: [ 900.185757][ T31] [ 900.188688][ T31] __schedule+0x116a/0x5de0 [ 900.400450][ T31] ? kasan_save_stack+0x42/0x60 [ 900.405356][ T31] ? __kasan_slab_free+0x51/0x70 [ 900.415001][ T31] ? __lock_acquire+0x622/0x1c90 [ 900.439750][ T31] ? __pfx___schedule+0x10/0x10 [ 900.444675][ T31] ? find_held_lock+0x2b/0x80 [ 900.449358][ T31] ? schedule+0x2d7/0x3a0 [ 900.466422][ T31] schedule+0xe7/0x3a0 [ 900.486026][ T31] schedule_preempt_disabled+0x13/0x30 [ 900.500041][ T31] __mutex_lock+0x6c7/0xb90 [ 900.504568][ T31] ? rcu_barrier+0x48/0x6e0 [ 900.509079][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 900.552501][ T31] ? ops_undo_list+0x78d/0xab0 [ 900.557295][ T31] ? ops_undo_list+0x3eb/0xab0 [ 900.590306][ T31] ? rcu_barrier+0x48/0x6e0 [ 900.594845][ T31] rcu_barrier+0x48/0x6e0 [ 900.599187][ T31] ? ops_init+0x2fa/0x5f0 [ 900.630040][ T31] setup_net+0x2e6/0x510 [ 900.634315][ T31] ? __pfx_setup_net+0x10/0x10 [ 900.639094][ T31] ? debug_mutex_init+0x37/0x70 [ 900.681054][ T31] copy_net_ns+0x2a6/0x5f0 [ 900.685508][ T31] create_new_namespaces+0x3ea/0xa90 [ 900.721053][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 900.732034][ T31] ksys_unshare+0x45b/0xa40 [ 900.736563][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 900.779343][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 900.787583][ T31] ? dnotify_flush+0x79/0x4c0 [ 900.807414][ T31] __x64_sys_unshare+0x31/0x40 [ 900.829240][ T31] do_syscall_64+0xcd/0x4c0 [ 900.840021][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.845926][ T31] RIP: 0033:0x7f8691990127 [ 900.880012][ T31] RSP: 002b:00007ffce3939228 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 900.888449][ T31] RAX: ffffffffffffffda RBX: 00007f8691bb5f40 RCX: 00007f8691990127 [ 900.935890][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 900.970006][ T31] RBP: 00007f8691bb6738 R08: 0000000000000000 R09: 0000000000000000 [ 900.978001][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 901.032895][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 901.060546][ T31] [ 901.063625][ T31] INFO: task syz-executor:10736 blocked for more than 145 seconds. [ 901.117518][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 901.149377][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 901.181522][ T31] task:syz-executor state:D stack:26728 pid:10736 tgid:10736 ppid:1 task_flags:0x400140 flags:0x00004006 [ 901.224661][ T31] Call Trace: [ 901.227970][ T31] [ 901.250064][ T31] __schedule+0x116a/0x5de0 [ 901.254600][ T31] ? kasan_save_stack+0x42/0x60 [ 901.259464][ T31] ? __kasan_slab_free+0x51/0x70 [ 901.284235][ T31] ? __lock_acquire+0x622/0x1c90 [ 901.289220][ T31] ? __pfx___schedule+0x10/0x10 [ 901.579950][ T31] ? find_held_lock+0x2b/0x80 [ 901.640645][ T31] ? schedule+0x2d7/0x3a0 [ 901.645015][ T31] schedule+0xe7/0x3a0 [ 901.649092][ T31] schedule_preempt_disabled+0x13/0x30 [ 901.706510][ T31] __mutex_lock+0x6c7/0xb90 [ 901.723253][ T31] ? rcu_barrier+0x48/0x6e0 [ 901.727800][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 901.753015][ T31] ? ops_undo_list+0x78d/0xab0 [ 901.757809][ T31] ? ops_undo_list+0x3eb/0xab0 [ 901.793231][ T31] ? rcu_barrier+0x48/0x6e0 [ 901.797769][ T31] rcu_barrier+0x48/0x6e0 [ 901.822865][ T31] ? ops_init+0x2fa/0x5f0 [ 901.827227][ T31] setup_net+0x2e6/0x510 [ 901.850030][ T31] ? __pfx_setup_net+0x10/0x10 [ 901.854830][ T31] ? debug_mutex_init+0x37/0x70 [ 901.859688][ T31] copy_net_ns+0x2a6/0x5f0 [ 901.900243][ T31] create_new_namespaces+0x3ea/0xa90 [ 901.905567][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 901.935033][ T31] ksys_unshare+0x45b/0xa40 [ 901.939576][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 901.971052][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 901.976369][ T31] ? dnotify_flush+0x79/0x4c0 [ 902.011054][ T31] __x64_sys_unshare+0x31/0x40 [ 902.015855][ T31] do_syscall_64+0xcd/0x4c0 [ 902.042815][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.048744][ T31] RIP: 0033:0x7f6f7d990127 [ 902.082981][ T31] RSP: 002b:00007fffd2831b68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 902.117329][ T31] RAX: ffffffffffffffda RBX: 00007f6f7dbb5f40 RCX: 00007f6f7d990127 [ 902.150065][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 902.158063][ T31] RBP: 00007f6f7dbb6738 R08: 0000000000000000 R09: 0000000000000000 [ 902.210132][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 902.218129][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 902.260085][ T31] [ 902.273877][ T31] INFO: task syz-executor:10739 blocked for more than 146 seconds. [ 902.305181][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 902.332348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.363145][ T31] task:syz-executor state:D stack:26728 pid:10739 tgid:10739 ppid:1 task_flags:0x400140 flags:0x00004006 [ 902.410024][ T31] Call Trace: [ 902.413326][ T31] [ 902.416262][ T31] __schedule+0x116a/0x5de0 [ 902.452017][ T31] ? kasan_save_stack+0x42/0x60 [ 902.456902][ T31] ? __kasan_slab_free+0x51/0x70 [ 902.492949][ T31] ? __lock_acquire+0x622/0x1c90 [ 902.497927][ T31] ? __pfx___schedule+0x10/0x10 [ 902.529303][ T31] ? find_held_lock+0x2b/0x80 [ 902.540200][ T31] ? schedule+0x2d7/0x3a0 [ 902.544553][ T31] schedule+0xe7/0x3a0 [ 902.548628][ T31] schedule_preempt_disabled+0x13/0x30 [ 902.600011][ T31] __mutex_lock+0x6c7/0xb90 [ 902.604567][ T31] ? rcu_barrier+0x48/0x6e0 [ 902.609086][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 902.633153][ T31] ? ops_undo_list+0x78d/0xab0 [ 902.637959][ T31] ? ops_undo_list+0x3eb/0xab0 [ 902.670252][ T31] ? rcu_barrier+0x48/0x6e0 [ 902.674794][ T31] rcu_barrier+0x48/0x6e0 [ 902.679137][ T31] ? ops_init+0x2fa/0x5f0 [ 902.710048][ T31] setup_net+0x2e6/0x510 [ 902.714324][ T31] ? __pfx_setup_net+0x10/0x10 [ 902.719097][ T31] ? debug_mutex_init+0x37/0x70 [ 902.746990][ T31] copy_net_ns+0x2a6/0x5f0 [ 902.769302][ T31] create_new_namespaces+0x3ea/0xa90 [ 902.779240][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 902.802084][ T31] ksys_unshare+0x45b/0xa40 [ 902.806613][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 902.839450][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 902.844867][ T31] ? dnotify_flush+0x79/0x4c0 [ 902.849568][ T31] __x64_sys_unshare+0x31/0x40 [ 902.876866][ T31] do_syscall_64+0xcd/0x4c0 [ 902.890324][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.896233][ T31] RIP: 0033:0x7fefb6590127 [ 902.920254][ T31] RSP: 002b:00007fff33aee138 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 902.928681][ T31] RAX: ffffffffffffffda RBX: 00007fefb67b5f40 RCX: 00007fefb6590127 [ 902.970072][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 902.978067][ T31] RBP: 00007fefb67b6738 R08: 0000000000000000 R09: 0000000000000000 [ 903.030024][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 903.038020][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 903.069830][ T31] [ 903.086336][ T31] [ 903.086336][ T31] Showing all locks held in the system: [ 903.106830][ T31] 4 locks held by kworker/u8:1/13: [ 903.128754][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 903.167690][ T31] #1: ffffc90000127d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 903.202041][ T31] #2: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 903.232587][ T31] #3: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 903.269333][ T31] 1 lock held by khungtaskd/31: [ 903.288633][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 903.320066][ T31] 1 lock held by dhcpcd/5482: [ 903.324757][ T31] 1 lock held by dhcpcd/5483: [ 903.329426][ T31] 2 locks held by getty/5574: [ 903.374155][ T31] #0: ffff88814cc520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 903.400058][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 903.429392][ T31] 7 locks held by syz-executor/10603: [ 903.443157][ T31] #0: ffff888031fba428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 903.480065][ T31] #1: ffff88802aa44088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 903.490844][ T31] #2: ffff888143b17698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 903.528014][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 903.562850][ T31] #4: ffff8880299830e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 903.607478][ T31] #5: ffff888029980250 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 903.635244][ T31] #6: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 903.672378][ T31] 5 locks held by kworker/1:9/10653: [ 903.677679][ T31] 2 locks held by syz-executor/10727: [ 903.714645][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 903.749575][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 903.780033][ T31] 2 locks held by syz-executor/10733: [ 903.785417][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 903.839486][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 903.869312][ T31] 2 locks held by syz-executor/10736: [ 903.875042][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 903.900012][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 903.931685][ T31] 2 locks held by syz-executor/10739: [ 903.937063][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 903.970973][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.006467][ T31] 2 locks held by syz-executor/10742: [ 904.029094][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.058961][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.089502][ T31] 2 locks held by syz-executor/10748: [ 904.100192][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.130083][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.169320][ T31] 2 locks held by syz-executor/10754: [ 904.190842][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.230064][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.259920][ T31] 2 locks held by syz-executor/10758: [ 904.287647][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.319480][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.352265][ T31] 2 locks held by syz-executor/10761: [ 904.357648][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.404999][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.439384][ T31] 2 locks held by syz-executor/10765: [ 904.460008][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.469443][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.519309][ T31] 2 locks held by syz-executor/10771: [ 904.530223][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.539667][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.600010][ T31] 2 locks held by syz-executor/10775: [ 904.620031][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.629460][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.680130][ T31] 2 locks held by syz-executor/10778: [ 904.685533][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.720093][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.750072][ T31] 2 locks held by syz-executor/10781: [ 904.755457][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 904.807363][ T31] #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 904.831163][ T31] [ 904.833500][ T31] ============================================= [ 904.833500][ T31] [ 904.869215][ T31] NMI backtrace for cpu 0 [ 904.869229][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 904.869249][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.869260][ T31] Call Trace: [ 904.869266][ T31] [ 904.869272][ T31] dump_stack_lvl+0x116/0x1f0 [ 904.869306][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 904.869326][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 904.869351][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 904.869373][ T31] watchdog+0xf70/0x12c0 [ 904.869397][ T31] ? __pfx_watchdog+0x10/0x10 [ 904.869415][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 904.869440][ T31] ? __kthread_parkme+0x19e/0x250 [ 904.869465][ T31] ? __pfx_watchdog+0x10/0x10 [ 904.869484][ T31] kthread+0x3c2/0x780 [ 904.869499][ T31] ? __pfx_kthread+0x10/0x10 [ 904.869516][ T31] ? rcu_is_watching+0x12/0xc0 [ 904.869538][ T31] ? __pfx_kthread+0x10/0x10 [ 904.869554][ T31] ret_from_fork+0x5d4/0x6f0 [ 904.869576][ T31] ? __pfx_kthread+0x10/0x10 [ 904.869592][ T31] ret_from_fork_asm+0x1a/0x30 [ 904.869621][ T31] [ 904.869627][ T31] Sending NMI from CPU 0 to CPUs 1: [ 904.987970][ C1] NMI backtrace for cpu 1 [ 904.987983][ C1] CPU: 1 UID: 0 PID: 10763 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 904.988003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.988013][ C1] Workqueue: bat_events batadv_nc_worker [ 904.988034][ C1] RIP: 0010:debug_object_activate+0x18a/0x4c0 [ 904.988058][ C1] Code: 42 80 3c 20 00 0f 85 b0 02 00 00 48 8b 9b 40 7a f4 9a 45 31 e4 48 85 db 0f 84 75 01 00 00 49 be 00 00 00 00 00 fc ff df eb 1e <48> 89 d8 48 c1 e8 03 42 80 3c 30 00 0f 85 56 02 00 00 48 8b 1b 48 [ 904.988072][ C1] RSP: 0018:ffffc90000a08430 EFLAGS: 00000087 [ 904.988083][ C1] RAX: 1ffff1100cc54bfb RBX: ffff8880662a5fc0 RCX: ffffffff8198c6bc [ 904.988092][ C1] RDX: ffffffff8baeb5a0 RSI: 0000000000000004 RDI: ffff8880662a5fd8 [ 904.988101][ C1] RBP: ffffc90000a08518 R08: 0000000000000001 R09: fffff52000141074 [ 904.988110][ C1] R10: 0000000000000206 R11: ffffffff9afa2f60 R12: 000000000000003b [ 904.988119][ C1] R13: ffff88802d86f050 R14: dffffc0000000000 R15: 1ffff9200014108a [ 904.988128][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 904.988142][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 904.988151][ C1] CR2: 00007f22e6fb7460 CR3: 0000000032fe0000 CR4: 00000000003526f0 [ 904.988160][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 904.988168][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 904.988177][ C1] Call Trace: [ 904.988181][ C1] [ 904.988188][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 904.988211][ C1] ? synproxy_send_tcp.isra.0+0x439/0x630 [ 904.988226][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 904.988244][ C1] __call_rcu_common.constprop.0+0x35/0xa10 [ 904.988258][ C1] ? percpu_counter_add_batch+0xb8/0x1f0 [ 904.988275][ C1] dst_release+0x266/0x340 [ 904.988291][ C1] skb_release_head_state+0x234/0x290 [ 904.988309][ C1] consume_skb+0x85/0x100 [ 904.988334][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 904.988351][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 904.988366][ C1] ? batadv_nc_worker+0x921/0x1030 [ 904.988382][ C1] ? process_one_work+0x9cc/0x1b70 [ 904.988395][ C1] ? worker_thread+0x6c8/0xf10 [ 904.988408][ C1] ? ret_from_fork+0x5d4/0x6f0 [ 904.988430][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 904.988446][ C1] nft_do_chain+0x2e9/0x1920 [ 904.988463][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 904.988476][ C1] ? mark_held_locks+0x49/0x80 [ 904.988497][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 904.988518][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 904.988534][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 904.988557][ C1] nft_do_chain_inet+0x18a/0x340 [ 904.988571][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 904.988586][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 904.988601][ C1] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 904.988619][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 904.988636][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 904.988649][ C1] nf_hook_slow+0xbe/0x200 [ 904.988668][ C1] nf_hook.constprop.0+0x422/0x750 [ 904.988688][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 904.988708][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 904.988727][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 904.988746][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 904.988768][ C1] ip_local_deliver+0x169/0x1f0 [ 904.988786][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 904.988805][ C1] ip_rcv+0x2c3/0x5d0 [ 904.988823][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 904.988841][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 904.988859][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 904.988877][ C1] ? lock_acquire+0x179/0x350 [ 904.988898][ C1] ? process_backlog+0x3f0/0x15e0 [ 904.988914][ C1] __netif_receive_skb+0x1d/0x160 [ 904.988930][ C1] process_backlog+0x442/0x15e0 [ 904.988949][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 904.988967][ C1] net_rx_action+0xa9f/0xfe0 [ 904.988987][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 904.989003][ C1] ? mark_held_locks+0x49/0x80 [ 904.989022][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 904.989040][ C1] ? tmigr_handle_remote+0x132/0x380 [ 904.989059][ C1] ? run_timer_base+0x121/0x190 [ 904.989078][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 904.989098][ C1] handle_softirqs+0x216/0x8e0 [ 904.989117][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 904.989132][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 904.989152][ C1] ? batadv_nc_purge_paths+0x1d4/0x3a0 [ 904.989168][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 904.989185][ C1] do_softirq+0xb2/0xf0 [ 904.989200][ C1] [ 904.989204][ C1] [ 904.989209][ C1] __local_bh_enable_ip+0x100/0x120 [ 904.989225][ C1] batadv_nc_purge_paths+0x1d4/0x3a0 [ 904.989244][ C1] batadv_nc_worker+0x921/0x1030 [ 904.989261][ C1] ? try_to_wake_up+0x157/0x1680 [ 904.989277][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 904.989296][ C1] ? rcu_is_watching+0x12/0xc0 [ 904.989314][ C1] process_one_work+0x9cc/0x1b70 [ 904.989336][ C1] ? __pfx_process_one_work+0x10/0x10 [ 904.989352][ C1] ? assign_work+0x1a0/0x250 [ 904.989374][ C1] worker_thread+0x6c8/0xf10 [ 904.989390][ C1] ? __kthread_parkme+0x19e/0x250 [ 904.989408][ C1] ? __pfx_worker_thread+0x10/0x10 [ 904.989421][ C1] kthread+0x3c2/0x780 [ 904.989433][ C1] ? __pfx_kthread+0x10/0x10 [ 904.989445][ C1] ? rcu_is_watching+0x12/0xc0 [ 904.989461][ C1] ? __pfx_kthread+0x10/0x10 [ 904.989473][ C1] ret_from_fork+0x5d4/0x6f0 [ 904.989489][ C1] ? __pfx_kthread+0x10/0x10 [ 904.989501][ C1] ret_from_fork_asm+0x1a/0x30 [ 904.989520][ C1] [ 905.850181][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 905.857061][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 905.868863][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.878919][ T31] Call Trace: [ 905.882196][ T31] [ 905.885125][ T31] dump_stack_lvl+0x3d/0x1f0 [ 905.889736][ T31] panic+0x71c/0x800 [ 905.893651][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 905.899552][ T31] ? __pfx_panic+0x10/0x10 [ 905.903978][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 905.909362][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 905.915349][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 905.920729][ T31] ? watchdog+0xdda/0x12c0 [ 905.925148][ T31] ? watchdog+0xdcd/0x12c0 [ 905.929571][ T31] watchdog+0xdeb/0x12c0 [ 905.933822][ T31] ? __pfx_watchdog+0x10/0x10 [ 905.938498][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 905.943705][ T31] ? __kthread_parkme+0x19e/0x250 [ 905.948739][ T31] ? __pfx_watchdog+0x10/0x10 [ 905.953419][ T31] kthread+0x3c2/0x780 [ 905.957499][ T31] ? __pfx_kthread+0x10/0x10 [ 905.962087][ T31] ? rcu_is_watching+0x12/0xc0 [ 905.966858][ T31] ? __pfx_kthread+0x10/0x10 [ 905.971445][ T31] ret_from_fork+0x5d4/0x6f0 [ 905.976039][ T31] ? __pfx_kthread+0x10/0x10 [ 905.980632][ T31] ret_from_fork_asm+0x1a/0x30 [ 905.985412][ T31] [ 905.988616][ T31] Kernel Offset: disabled [ 905.992922][ T31] Rebooting in 86400 seconds..