last executing test programs: 22.531487267s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) truncate(0x0, 0xfe0) write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'workdir', 0x3a, 'novrs', 0x3a, './bus/file0', 0x3a, [0x4f]}, 0x38) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800490000380000000000059078ac1414000a010100440c0903ffffffff000000008302000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000053c2788000"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, 0x50}}, 0x0) ftruncate(0xffffffffffffffff, 0xffffffffffff48ba) 20.891689734s ago: executing program 1 (id=2): ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) iopl(0x3) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x35314258}}) removexattr(0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/237, 0xed) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10001) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0x0, &(0x7f00000000c0)={0x40, 0xe, 0xff13, 0x0, 0x7, 0x0, 0x9, 0x0, 0xfeff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206110157d8d3b82c6d6b96000000000500010007000000090002"], 0x5c}}, 0x20000001) 20.80900147s ago: executing program 2 (id=6): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x407ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bind$packet(r1, 0x0, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r7, &(0x7f0000001a00)=""/177, 0xb1) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xb78}}, 0x0) close(r8) 20.616637242s ago: executing program 1 (id=7): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) 19.461737309s ago: executing program 2 (id=8): ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) iopl(0x3) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x35314258}}) removexattr(0x0, &(0x7f0000000040)=@random={'btrfs.', ',-\xb5\x00'}) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/237, 0xed) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10001) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0x0, &(0x7f00000000c0)={0x40, 0xe, 0xff13, 0x0, 0x7, 0x0, 0x9, 0x0, 0xfeff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206110157d8d3b82c6d6b96000000000500010007000000090002"], 0x5c}}, 0x20000001) 18.195974973s ago: executing program 1 (id=11): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x20076, 0x24000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000003c0)={0x0, "f7b17c6d73ff447e239ef2c6156e422ea5954fe9153b6fc91d876303d3e6277868fb2b8a81b0e71e86de066689582049d6a174cc078eb568fe67f4ed0b7dfe99", 0x3b}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_provisioning(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x3}, &(0x7f0000001980)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001840), 0x0, r6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) unshare(0x64000600) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.988480273s ago: executing program 2 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) keyctl$chown(0x4, 0x0, 0x0, 0x0) setgroups(0x0, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000000000300000000000500010007000000"], 0x1c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000810000000000000000000000140001"], 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 16.849696065s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x705, 0x8000000000000000) 15.099641781s ago: executing program 2 (id=14): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 12.104771218s ago: executing program 0 (id=19): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="700000001400090500000000000000000201", @ANYRES32, @ANYBLOB="140006000600"], 0x70}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000f2000007"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.612963326s ago: executing program 3 (id=21): r0 = socket$kcm(0x10, 0x2, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x4402, 0x22101}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x1c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_CARRIER={0x5, 0x21, 0x81}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x4020) 11.228297978s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x705, 0x8000000000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) ioctl$FBIOBLANK(r3, 0x4611, 0x2) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) syz_emit_ethernet(0x5e, 0x0, 0x0) 11.104863851s ago: executing program 0 (id=25): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) rename(0x0, &(0x7f0000001080)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r1, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r4, 0x0, 0x0, 0x400c8c4) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000005140500000000000000000008003d000000000008000300001f9d0008003d00000000000800030000000000080001000000080008b40c58d100000008003d0004000000"], 0x48}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) io_uring_setup(0x2e34, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, 0x37f}) r6 = socket$inet6(0xa, 0xa, 0x1) listen(r6, 0x400000001ffffffd) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setns(r0, 0x20000000) recvmmsg(r7, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000880), 0x0, 0x0) 9.860395839s ago: executing program 3 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) keyctl$chown(0x4, 0x0, 0x0, 0x0) setgroups(0x1, &(0x7f0000000340)=[0x0]) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000000000300000000000500010007000000"], 0x1c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000810000000000000000000000140001"], 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 7.455504283s ago: executing program 0 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x2000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020200020c00000000000000000000000200080008000000fd0000000000000003000000ac14140000000000000000000200010000000000000006000000000003000500000000000200"/96], 0x60}, 0x1, 0x7}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0xb, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82c, 0x0, 0x81}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x14000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 7.076654672s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x705, 0x8000000000000000) 6.406813235s ago: executing program 4 (id=29): futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000007000000fd0900008400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001500000000000000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r2}, &(0x7f00000000c0)=""/28, 0x1c, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) 5.380259735s ago: executing program 4 (id=30): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000c600)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x21, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="23c9f669"]}]}, 0x1c}}, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000240)=@req={0x7fffffff, 0x0, 0x0, 0x2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002bbd7000fddbdf253700000008000300", @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x8005}, 0x8000) 4.740175676s ago: executing program 3 (id=31): r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000002740)=[{&(0x7f0000000000)="ffffffffffffff", 0x7}], 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_size', 0xb041, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xff6d, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000000000800000040800007b6d72fc3611ff98728a1d4bc02cc3a8cc59b4d023d301f0411ba6a178ca6e4355edf70000000003000005c6d2c78708658a65f3e857704d1eb1b2a9aeae84f4a358f3e847392b71a3b6a4e7c02b8d501b45fba584e0a78a5cf40127fe934a3a1b1d022cf51d166c16f5ea7b2abb921cdf787622112dbe42c1faf21a7a1651fcb14ac3e7b0a5209ffd22d23d50103172203ca9fa56b41adb4dfb6d746703898b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r6, 0x0, 0x1001}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000440)=@usbdevfs_driver={0x80000000, 0xcfb8, &(0x7f0000000280)="50a7f488c02519a8e96c8586872cf716d6b20e07d624cc774939ab19473a130b15236b2a7e1660dc88b25ed145628af56458bd1488bcb54578218a3714b6889ea01e1c85dfbb4ed1f7a739f1c1084448517b4f9eec5add4d3f8f05fd7a0fbde3e5f7850a85730262b43ed6741b941ced27ceb718471ff577d85b4fa6457954c898463826"}) socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000480)=@v2={0x2, @adiantum, 0x4, '\x00', @b}) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @multicast2}}) io_setup(0x20, &(0x7f0000001140)) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200031010203010902120001000000000904d4fe01c891ef00ae6af0e838037b3e43876f3a3ab6b0de19b1623029e241095f42486f45d68dbc90cb7eb6dddcee5654da5745641d7f58f318c7e0da8c53c7132cd79278b3a9fca0c27b3347e2884a2132b306d9fc10bcb5f2c97d335fdae3ef5f25ab3cc67a621b94897548c7bc69daf4cc"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.905743314s ago: executing program 4 (id=32): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000007f00000000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b715000000000000854b00008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x60, &(0x7f0000000340)=""/96, 0x41100, 0x90, '\x00', r3, 0x0, r1, 0x8, &(0x7f00000003c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x7ff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r0, r0], &(0x7f0000000480)=[{0x1, 0x2, 0xc, 0x1}, {0x5, 0x2, 0xb, 0x7}, {0x5, 0x3, 0x2, 0x7}, {0x3, 0x3, 0x9, 0x6}, {0x3, 0x3, 0x10, 0xb}, {0x1, 0x14, 0xf, 0x6}], 0x10, 0x40, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r4 = getpid() waitid(0x1, r4, &(0x7f0000000000), 0x12, &(0x7f0000000100)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000000c0)) 3.557454038s ago: executing program 4 (id=33): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x30b082, 0x1b5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1e0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x17, 0x4, 0x81, 0xc, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0x0, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000], 'netdevsim0\x00', 'wlan1\x00', {}, {0xff}, 0x0, 0x3, 0x6, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x1}}}, {{@uncond, 0x0, 0x108, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 'bridge0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2bb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x28) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x1000000) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x10) pipe2(&(0x7f0000000040), 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8), 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x40046207, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) 1.228774648s ago: executing program 0 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xc85d) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e1e, @dev}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000ae0000008608ff9f00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00040049f2a42c0bc6101b3bf2652d8d034b6e7babd68dcc36ee4215bc37fe4959c31035f4f3cc9f4a7a8be021e1e33fd9c9222c94fae5a77fa3b6fd1ee5e3f1d5875a3c5a9afd8f177e8746432783b2738fe9e18ed35175", @ANYRES16=r8, @ANYRES16=r6], 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20040010) 1.185563537s ago: executing program 4 (id=35): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000000005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='nr_inodes=t']) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 299.845095ms ago: executing program 3 (id=36): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x11) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) 228.839276ms ago: executing program 0 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffce4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) setfsgid(0xffffffffffffffff) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 0s ago: executing program 4 (id=38): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x1, 0x0, &(0x7f0000000140)=[{}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 76.313410][ T29] audit: type=1400 audit(1729717995.124:88): avc: denied { mounton } for pid=5214 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 76.320226][ T5214] cgroup: Unknown subsys name 'net' [ 76.341827][ T29] audit: type=1400 audit(1729717995.134:89): avc: denied { mount } for pid=5214 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.364238][ T29] audit: type=1400 audit(1729717995.164:90): avc: denied { unmount } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.487768][ T5214] cgroup: Unknown subsys name 'cpuset' [ 76.497034][ T5214] cgroup: Unknown subsys name 'rlimit' [ 76.613971][ T29] audit: type=1400 audit(1729717995.434:91): avc: denied { setattr } for pid=5214 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.648700][ T29] audit: type=1400 audit(1729717995.434:92): avc: denied { create } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.671079][ T29] audit: type=1400 audit(1729717995.434:93): avc: denied { write } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.696788][ T29] audit: type=1400 audit(1729717995.434:94): avc: denied { read } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.717402][ T29] audit: type=1400 audit(1729717995.434:95): avc: denied { mounton } for pid=5214 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 76.742719][ T29] audit: type=1400 audit(1729717995.434:96): avc: denied { mount } for pid=5214 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 76.765517][ T5216] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 76.769504][ T29] audit: type=1400 audit(1729717995.484:97): avc: denied { read } for pid=4891 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 76.776449][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.802143][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 78.257635][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.070505][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 82.070536][ T29] audit: type=1400 audit(1729718000.884:103): avc: denied { create } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.151970][ T29] audit: type=1400 audit(1729718000.884:104): avc: denied { read write } for pid=5224 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.185060][ T29] audit: type=1400 audit(1729718000.884:105): avc: denied { open } for pid=5224 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.222266][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.231354][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.239724][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.248277][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.248863][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.263013][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.264921][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.275859][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.281089][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.285329][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.291577][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.301327][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.313673][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.313735][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.321832][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.328446][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.337066][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.347903][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.350992][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.363616][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.370190][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.378147][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.378849][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.385489][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.423761][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.433582][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.443215][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.443316][ T29] audit: type=1400 audit(1729718000.944:106): avc: denied { ioctl } for pid=5224 comm="syz-executor" path="socket:[4241]" dev="sockfs" ino=4241 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.444254][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.467490][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.497593][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.508272][ T29] audit: type=1400 audit(1729718001.174:107): avc: denied { read } for pid=5230 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.572249][ T29] audit: type=1400 audit(1729718001.174:108): avc: denied { open } for pid=5230 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.596180][ T29] audit: type=1400 audit(1729718001.174:109): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.900767][ T29] audit: type=1400 audit(1729718001.714:110): avc: denied { module_request } for pid=5241 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.998021][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 83.096901][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 83.109665][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 83.194470][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 83.213939][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 83.241933][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.252984][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.260632][ T5241] bridge_slave_0: entered allmulticast mode [ 83.268340][ T5241] bridge_slave_0: entered promiscuous mode [ 83.304943][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.312085][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.319822][ T5241] bridge_slave_1: entered allmulticast mode [ 83.327186][ T5241] bridge_slave_1: entered promiscuous mode [ 83.431697][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.460268][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.467931][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.475861][ T5230] bridge_slave_0: entered allmulticast mode [ 83.482703][ T5230] bridge_slave_0: entered promiscuous mode [ 83.490172][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.497922][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.505225][ T5227] bridge_slave_0: entered allmulticast mode [ 83.512065][ T5227] bridge_slave_0: entered promiscuous mode [ 83.525813][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.568942][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.576415][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.584049][ T5230] bridge_slave_1: entered allmulticast mode [ 83.590932][ T5230] bridge_slave_1: entered promiscuous mode [ 83.598815][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.606019][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.613218][ T5227] bridge_slave_1: entered allmulticast mode [ 83.620117][ T5227] bridge_slave_1: entered promiscuous mode [ 83.687343][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.697758][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.705520][ T5224] bridge_slave_0: entered allmulticast mode [ 83.712380][ T5224] bridge_slave_0: entered promiscuous mode [ 83.722931][ T5241] team0: Port device team_slave_0 added [ 83.732122][ T5241] team0: Port device team_slave_1 added [ 83.738589][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.746721][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.753980][ T5225] bridge_slave_0: entered allmulticast mode [ 83.760731][ T5225] bridge_slave_0: entered promiscuous mode [ 83.768650][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.775932][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.783130][ T5225] bridge_slave_1: entered allmulticast mode [ 83.790168][ T5225] bridge_slave_1: entered promiscuous mode [ 83.798738][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.810912][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.829376][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.836840][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.844570][ T5224] bridge_slave_1: entered allmulticast mode [ 83.851368][ T5224] bridge_slave_1: entered promiscuous mode [ 83.894526][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.950474][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.974432][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.986547][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.996899][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.004141][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.031288][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.045718][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.059001][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.071371][ T5230] team0: Port device team_slave_0 added [ 84.080531][ T5230] team0: Port device team_slave_1 added [ 84.116512][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.124037][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.150499][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.189615][ T5227] team0: Port device team_slave_0 added [ 84.207402][ T5224] team0: Port device team_slave_0 added [ 84.227599][ T5225] team0: Port device team_slave_0 added [ 84.237797][ T5225] team0: Port device team_slave_1 added [ 84.253298][ T5227] team0: Port device team_slave_1 added [ 84.261409][ T5224] team0: Port device team_slave_1 added [ 84.288523][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.295790][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.322283][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.364488][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.371486][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.397743][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.429791][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.434580][ T5243] Bluetooth: hci3: command tx timeout [ 84.442356][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.469069][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.486480][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.493986][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.520108][ T5243] Bluetooth: hci1: command tx timeout [ 84.520656][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.525805][ T4615] Bluetooth: hci4: command tx timeout [ 84.526031][ T4615] Bluetooth: hci2: command tx timeout [ 84.546330][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.554724][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.580876][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.592696][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.599955][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.625953][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.651183][ T5241] hsr_slave_0: entered promiscuous mode [ 84.658168][ T5241] hsr_slave_1: entered promiscuous mode [ 84.666019][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.673018][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.699187][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.710365][ T4615] Bluetooth: hci0: command tx timeout [ 84.712833][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.723030][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.749385][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.804250][ T5227] hsr_slave_0: entered promiscuous mode [ 84.810706][ T5227] hsr_slave_1: entered promiscuous mode [ 84.817466][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.825475][ T5227] Cannot create hsr debugfs directory [ 84.924868][ T5225] hsr_slave_0: entered promiscuous mode [ 84.931339][ T5225] hsr_slave_1: entered promiscuous mode [ 84.938286][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.946007][ T5225] Cannot create hsr debugfs directory [ 84.964549][ T5224] hsr_slave_0: entered promiscuous mode [ 84.971094][ T5224] hsr_slave_1: entered promiscuous mode [ 84.977672][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.985413][ T5224] Cannot create hsr debugfs directory [ 85.006354][ T5230] hsr_slave_0: entered promiscuous mode [ 85.012648][ T5230] hsr_slave_1: entered promiscuous mode [ 85.019094][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.027156][ T5230] Cannot create hsr debugfs directory [ 85.428392][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.441224][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.454528][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.467572][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.539068][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.550313][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.561804][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.578041][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.652615][ T5241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.666717][ T5241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.678155][ T5241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.689948][ T5241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.799064][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.807748][ T5224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.820848][ T5224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.831116][ T5224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.841524][ T5224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.935120][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.948840][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.956219][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.005923][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.013181][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.022022][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.032420][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.056950][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.086614][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.111425][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.162450][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.223029][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.253131][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.273135][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.280324][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.299500][ T29] audit: type=1400 audit(1729718005.114:111): avc: denied { sys_module } for pid=5227 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.341159][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.370886][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.378108][ T2557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.419546][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.432782][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.439990][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.470610][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.478382][ T2557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.513500][ T4615] Bluetooth: hci3: command tx timeout [ 86.585592][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.594217][ T4615] Bluetooth: hci4: command tx timeout [ 86.604061][ T4615] Bluetooth: hci2: command tx timeout [ 86.605039][ T5243] Bluetooth: hci1: command tx timeout [ 86.636923][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.651665][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.658901][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.709016][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.716269][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.739075][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.754050][ T5243] Bluetooth: hci0: command tx timeout [ 86.821597][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.882168][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.889402][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.908666][ T5227] veth0_vlan: entered promiscuous mode [ 86.943074][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.950323][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.042222][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.078282][ T5227] veth1_vlan: entered promiscuous mode [ 87.273182][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.314584][ T5225] veth0_vlan: entered promiscuous mode [ 87.349289][ T5227] veth0_macvtap: entered promiscuous mode [ 87.360782][ T5225] veth1_vlan: entered promiscuous mode [ 87.386966][ T5227] veth1_macvtap: entered promiscuous mode [ 87.421187][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.486210][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.524976][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.553230][ T5225] veth0_macvtap: entered promiscuous mode [ 87.567475][ T5241] veth0_vlan: entered promiscuous mode [ 87.585499][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.599804][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.612102][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.630217][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.658485][ T5225] veth1_macvtap: entered promiscuous mode [ 87.728278][ T5241] veth1_vlan: entered promiscuous mode [ 87.750362][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.770223][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.783052][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.828998][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.848220][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.860896][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.902993][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.913709][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.922477][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.931908][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.966551][ T5224] veth0_vlan: entered promiscuous mode [ 88.005001][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.063253][ T5224] veth1_vlan: entered promiscuous mode [ 88.102248][ T5241] veth0_macvtap: entered promiscuous mode [ 88.171628][ T5241] veth1_macvtap: entered promiscuous mode [ 88.264400][ T5224] veth0_macvtap: entered promiscuous mode [ 88.285307][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.297216][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.313774][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.327987][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.340192][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.368280][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.376101][ T5224] veth1_macvtap: entered promiscuous mode [ 88.393651][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.407175][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.418749][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.429225][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.440647][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.459156][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.472570][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.484645][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.527994][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.539177][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.549142][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.559633][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.570871][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.579741][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.594596][ T5243] Bluetooth: hci3: command tx timeout [ 88.600173][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.610512][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.621221][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.631143][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.641676][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.652768][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.673946][ T4615] Bluetooth: hci4: command tx timeout [ 88.679587][ T5243] Bluetooth: hci2: command tx timeout [ 88.685196][ T4615] Bluetooth: hci1: command tx timeout [ 88.697269][ T5224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.711104][ T5224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.720040][ T5224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.730773][ T5224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.743225][ T5241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.752294][ T5241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.761963][ T5241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.771806][ T5241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.792250][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.811233][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.828389][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.836621][ T5243] Bluetooth: hci0: command tx timeout [ 88.844698][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.875518][ T5230] veth0_vlan: entered promiscuous mode [ 88.901034][ T29] audit: type=1400 audit(1729718007.704:112): avc: denied { mounton } for pid=5227 comm="syz-executor" path="/root/syzkaller.8UssCP/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 88.924214][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.941390][ T29] audit: type=1400 audit(1729718007.704:113): avc: denied { mount } for pid=5227 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.943636][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.987501][ T29] audit: type=1400 audit(1729718007.714:114): avc: denied { mounton } for pid=5227 comm="syz-executor" path="/root/syzkaller.8UssCP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.016273][ T29] audit: type=1400 audit(1729718007.714:115): avc: denied { mount } for pid=5227 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.049777][ T29] audit: type=1400 audit(1729718007.714:116): avc: denied { mounton } for pid=5227 comm="syz-executor" path="/root/syzkaller.8UssCP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.107046][ T5230] veth1_vlan: entered promiscuous mode [ 89.107138][ T5227] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.117953][ T29] audit: type=1400 audit(1729718007.714:117): avc: denied { mounton } for pid=5227 comm="syz-executor" path="/root/syzkaller.8UssCP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 89.157618][ T29] audit: type=1400 audit(1729718007.724:118): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.179135][ T29] audit: type=1400 audit(1729718007.754:119): avc: denied { mounton } for pid=5227 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 89.204387][ T29] audit: type=1400 audit(1729718007.754:120): avc: denied { mount } for pid=5227 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.227340][ T29] audit: type=1400 audit(1729718007.754:121): avc: denied { mounton } for pid=5227 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 89.250442][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.262596][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.288727][ T5230] veth0_macvtap: entered promiscuous mode [ 89.299529][ T5230] veth1_macvtap: entered promiscuous mode [ 89.319046][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.329763][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.339916][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.350566][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.361357][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.371960][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.383455][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.395055][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.407288][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.474896][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.493844][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.506536][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.519785][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.530099][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.540976][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.551241][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.562461][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.588967][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.619301][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.632126][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.649579][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.660148][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.719454][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.765507][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.925477][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.960037][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.323883][ T5233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.530821][ T5233] usb 4-1: Using ep0 maxpacket: 32 [ 90.666938][ T5233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.677878][ T5243] Bluetooth: hci3: command tx timeout [ 90.753956][ T5243] Bluetooth: hci2: command tx timeout [ 90.760214][ T5243] Bluetooth: hci1: command tx timeout [ 90.763096][ T5233] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 90.766182][ T5243] Bluetooth: hci4: command tx timeout [ 90.807031][ T5233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.862620][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.875685][ T5233] usb 4-1: Product: syz [ 90.915653][ T5243] Bluetooth: hci0: command tx timeout [ 90.945254][ T5233] usb 4-1: Manufacturer: syz [ 90.964729][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.009177][ T5233] usb 4-1: SerialNumber: syz [ 91.032303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.463911][ T5233] usb 4-1: config 0 descriptor?? [ 91.474032][ T5233] usb 4-1: bad CDC descriptors [ 91.480017][ T5233] usb 4-1: unsupported MDLM descriptors [ 91.571042][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.588781][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.825455][ T938] cfg80211: failed to load regulatory.db [ 92.907733][ T941] usb 4-1: USB disconnect, device number 2 [ 92.929824][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.963723][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.446252][ T5338] vivid-001: ================= START STATUS ================= [ 93.454556][ T5338] vivid-001: Radio HW Seek Mode: Bounded [ 93.460594][ T5338] vivid-001: Radio Programmable HW Seek: false [ 93.467116][ T5338] vivid-001: RDS Rx I/O Mode: Block I/O [ 93.472895][ T5338] vivid-001: Generate RBDS Instead of RDS: false [ 93.480448][ T5338] vivid-001: RDS Reception: true [ 93.485917][ T5338] vivid-001: RDS Program Type: 0 inactive [ 93.492764][ T5338] vivid-001: RDS PS Name: inactive [ 93.505729][ T5338] vivid-001: RDS Radio Text: inactive [ 93.511599][ T5338] vivid-001: RDS Traffic Announcement: false inactive [ 93.518880][ T5338] vivid-001: RDS Traffic Program: false inactive [ 93.525619][ T5338] vivid-001: RDS Music: false inactive [ 93.531422][ T5338] vivid-001: ================== END STATUS ================== [ 93.614477][ T941] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.009997][ T941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.050382][ T941] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.102708][ T941] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.125547][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.191749][ T5335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.248071][ T941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.308756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.323581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.324476][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 94.324499][ T29] audit: type=1400 audit(1729718013.134:161): avc: denied { read } for pid=5337 comm="syz.4.5" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.331892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.369928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 94.378895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.420570][ T29] audit: type=1400 audit(1729718013.134:162): avc: denied { open } for pid=5337 comm="syz.4.5" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.486333][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.518029][ T29] audit: type=1400 audit(1729718014.334:163): avc: denied { ioctl } for pid=5337 comm="syz.4.5" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.585461][ T29] audit: type=1400 audit(1729718014.404:164): avc: denied { setopt } for pid=5337 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.115663][ T5233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.277023][ T5356] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9'. [ 96.923553][ T5233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.000017][ T5233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.129117][ T4615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.139301][ T4615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.154154][ T4615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.167588][ T4615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.183430][ T4615] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.195234][ T4615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.219863][ T29] audit: type=1400 audit(1729718016.034:165): avc: denied { mounton } for pid=5358 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 97.249678][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.410876][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.654662][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.021079][ T8] usb 4-1: USB disconnect, device number 3 [ 98.324621][ T29] audit: type=1400 audit(1729718017.124:166): avc: denied { create } for pid=5363 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.576595][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.592775][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.602922][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.612762][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.621513][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.629151][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.644789][ T29] audit: type=1400 audit(1729718017.224:167): avc: denied { mount } for pid=5363 comm="syz.3.16" name="/" dev="hugetlbfs" ino=6825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 98.814210][ T62] bridge_slave_1: left allmulticast mode [ 98.820869][ T62] bridge_slave_1: left promiscuous mode [ 98.871055][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.380576][ T5243] Bluetooth: hci2: command tx timeout [ 99.465599][ T62] bridge_slave_0: left allmulticast mode [ 99.487636][ T62] bridge_slave_0: left promiscuous mode [ 99.513819][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.767595][ T5233] usb 5-1: string descriptor 0 read error: -71 [ 99.782545][ T5233] usb 5-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 2.00 [ 99.793146][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.816206][ T5233] usb 5-1: can't set config #1, error -71 [ 99.853000][ T5233] usb 5-1: USB disconnect, device number 2 [ 100.010243][ T5376] FAULT_INJECTION: forcing a failure. [ 100.010243][ T5376] name failslab, interval 1, probability 0, space 0, times 1 [ 100.034056][ T29] audit: type=1400 audit(1729718018.824:168): avc: denied { create } for pid=5375 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 100.063233][ T5376] CPU: 0 UID: 0 PID: 5376 Comm: syz.4.18 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 100.073824][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.083937][ T5376] Call Trace: [ 100.087257][ T5376] [ 100.090223][ T5376] dump_stack_lvl+0x16c/0x1f0 [ 100.094989][ T5376] should_fail_ex+0x497/0x5b0 [ 100.099717][ T5376] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 100.105410][ T5376] should_failslab+0xc2/0x120 [ 100.110147][ T5376] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 100.116539][ T5376] ? sidtab_sid2str_get+0x17a/0x680 [ 100.121808][ T5376] kmemdup_noprof+0x29/0x60 [ 100.126367][ T5376] sidtab_sid2str_get+0x17a/0x680 [ 100.131457][ T5376] sidtab_entry_to_string+0x33/0x110 [ 100.136825][ T5376] security_sid_to_context_core+0x35c/0x640 [ 100.142776][ T5376] avc_audit_post_callback+0x10b/0x8c0 [ 100.148297][ T5376] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 100.154339][ T5376] ? audit_log_format+0xe9/0x130 [ 100.159346][ T5376] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 100.165389][ T5376] ? skb_put+0x138/0x1b0 [ 100.169698][ T5376] ? audit_log_n_string+0x251/0x540 [ 100.174972][ T5376] ? audit_log_n_untrustedstring+0xf2/0x100 [ 100.180937][ T5376] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 100.186978][ T5376] common_lsm_audit+0x260/0x2210 [ 100.191980][ T5376] ? __pfx_common_lsm_audit+0x10/0x10 [ 100.196981][ T29] audit: type=1400 audit(1729718019.014:170): avc: denied { read } for pid=5377 comm="syz.0.19" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.197384][ T5376] ? __pfx_lock_release+0x10/0x10 [ 100.223441][ T29] audit: type=1400 audit(1729718019.034:171): avc: denied { open } for pid=5377 comm="syz.0.19" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.224723][ T5376] ? __pfx_avc_node_free+0x10/0x10 [ 100.247471][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.252563][ T5376] ? rcu_is_watching+0x12/0xc0 [ 100.263433][ T5376] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.269315][ T5376] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.274623][ T5376] ? slow_avc_audit+0x17d/0x210 [ 100.279554][ T5376] slow_avc_audit+0x17d/0x210 [ 100.284295][ T5376] ? __pfx_slow_avc_audit+0x10/0x10 [ 100.289568][ T5376] ? avc_denied+0x138/0x180 [ 100.294127][ T5376] ? avc_has_perm_noaudit+0x2f8/0x3a0 [ 100.299564][ T5376] avc_has_perm+0x18d/0x1c0 [ 100.304136][ T5376] ? __pfx_avc_has_perm+0x10/0x10 [ 100.309222][ T5376] ? __pfx_mark_lock+0x10/0x10 [ 100.314043][ T5376] sock_has_perm+0x256/0x2f0 [ 100.315959][ T5379] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.318679][ T5376] ? __pfx_sock_has_perm+0x10/0x10 [ 100.335805][ T29] audit: type=1400 audit(1729718019.134:172): avc: denied { ioctl } for pid=5377 comm="syz.0.19" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.340622][ T5376] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 100.364860][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.371574][ T5376] ? __import_iovec+0x1fd/0x6e0 [ 100.382503][ T5376] ? lock_acquire+0x2f/0xb0 [ 100.387073][ T5376] security_socket_sendmsg+0x9b/0x240 [ 100.392523][ T5376] ____sys_sendmsg+0x7ec/0xc90 [ 100.397344][ T5376] ? copy_msghdr_from_user+0x10b/0x160 [ 100.402850][ T5376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.408214][ T5376] ? __pfx___lock_acquire+0x10/0x10 [ 100.413466][ T5376] ___sys_sendmsg+0x135/0x1e0 [ 100.418192][ T5376] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.423438][ T5376] ? lock_acquire+0x2f/0xb0 [ 100.427992][ T5376] ? __fget_files+0x40/0x3f0 [ 100.432638][ T5376] ? fdget+0x176/0x210 [ 100.436771][ T5376] __sys_sendmsg+0x117/0x1f0 [ 100.441385][ T5376] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.446524][ T5376] ? __fget_files+0x244/0x3f0 [ 100.451251][ T5376] do_syscall_64+0xcd/0x250 [ 100.455805][ T5376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.461779][ T5376] RIP: 0033:0x7f359cb7dff9 [ 100.466241][ T5376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.485880][ T5376] RSP: 002b:00007f359d906038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.494336][ T5376] RAX: ffffffffffffffda RBX: 00007f359cd35f80 RCX: 00007f359cb7dff9 [ 100.502349][ T5376] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 100.510336][ T5376] RBP: 00007f359d906090 R08: 0000000000000000 R09: 0000000000000000 [ 100.518320][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.526309][ T5376] R13: 0000000000000000 R14: 00007f359cd35f80 R15: 00007fffb83d51a8 [ 100.534331][ T5376] [ 100.576224][ T29] audit: type=1400 audit(1729718018.824:169): avc: denied { write } for pid=5375 comm="syz.4.18" ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 100.753817][ T5243] Bluetooth: hci4: command tx timeout [ 100.886938][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.899536][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.911065][ T62] bond0 (unregistering): Released all slaves [ 100.932547][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 100.939614][ T29] audit: type=1400 audit(1729718019.744:173): avc: denied { search } for pid=4891 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.076673][ T5318] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.412277][ T5243] Bluetooth: hci2: command tx timeout [ 101.438706][ T5318] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.451680][ T5318] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.475141][ T5318] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.495954][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.747934][ T29] audit: type=1400 audit(1729718020.384:174): avc: denied { read } for pid=5390 comm="syz.3.24" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 101.824615][ T5395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'. [ 101.854669][ T5388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.623894][ T5318] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.633538][ T29] audit: type=1400 audit(1729718020.384:175): avc: denied { open } for pid=5390 comm="syz.3.24" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.712213][ T29] audit: type=1400 audit(1729718020.404:176): avc: denied { ioctl } for pid=5390 comm="syz.3.24" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.737367][ T29] audit: type=1400 audit(1729718020.504:177): avc: denied { setopt } for pid=5393 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.843690][ T5243] Bluetooth: hci4: command tx timeout [ 104.028176][ T5417] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.23'. [ 104.754703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.777967][ T5243] Bluetooth: hci2: command tx timeout [ 104.918787][ T5243] Bluetooth: hci4: command tx timeout [ 105.053473][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 105.053576][ T29] audit: type=1400 audit(1729718023.864:188): avc: denied { ioctl } for pid=5419 comm="syz.0.27" path="socket:[6899]" dev="sockfs" ino=6899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 105.162522][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.172787][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.222626][ T5358] bridge_slave_0: entered allmulticast mode [ 105.253085][ T5358] bridge_slave_0: entered promiscuous mode [ 105.285090][ T5422] ipvlan2: entered promiscuous mode [ 105.300011][ T29] audit: type=1400 audit(1729718024.103:189): avc: denied { write } for pid=5391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.563668][ T29] audit: type=1400 audit(1729718024.113:190): avc: denied { add_name } for pid=5391 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.590263][ T5422] batman_adv: batadv0: Adding interface: ipvlan2 [ 105.638548][ T5422] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.668141][ T5422] batman_adv: batadv0: Interface activated: ipvlan2 [ 105.721231][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.737717][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.753796][ T5358] bridge_slave_1: entered allmulticast mode [ 105.770762][ T29] audit: type=1400 audit(1729718024.583:191): avc: denied { remove_name } for pid=5433 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1638 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.795795][ T5358] bridge_slave_1: entered promiscuous mode [ 105.847179][ T5318] usb 5-1: USB disconnect, device number 3 [ 106.043275][ T62] hsr_slave_0: left promiscuous mode [ 106.061849][ T62] hsr_slave_1: left promiscuous mode [ 106.092125][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.131871][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.187657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.293704][ T29] audit: type=1400 audit(1729718025.023:192): avc: denied { create } for pid=5436 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.327880][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.665464][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.712966][ T62] veth1_macvtap: left promiscuous mode [ 106.755424][ T62] veth0_macvtap: left promiscuous mode [ 106.783772][ T62] veth1_vlan: left promiscuous mode [ 106.830582][ T62] veth0_vlan: left promiscuous mode [ 106.863432][ T5243] Bluetooth: hci2: command tx timeout [ 107.013625][ T5243] Bluetooth: hci4: command tx timeout [ 107.612834][ T5443] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.698677][ T29] audit: type=1400 audit(1729718026.453:193): avc: denied { create } for pid=5440 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.364975][ T29] audit: type=1400 audit(1729718026.473:194): avc: denied { setopt } for pid=5440 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.449237][ T29] audit: type=1400 audit(1729718027.263:195): avc: denied { ioctl } for pid=5446 comm="syz.4.32" path="socket:[6950]" dev="sockfs" ino=6950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.502139][ T29] audit: type=1400 audit(1729718027.293:196): avc: denied { write } for pid=5446 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.646911][ T29] audit: type=1400 audit(1729718027.313:197): avc: denied { getattr } for pid=5446 comm="syz.4.32" path="socket:[6951]" dev="sockfs" ino=6951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 109.093626][ T5280] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.605714][ T5280] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 109.623554][ T5280] usb 4-1: config 0 has no interface number 0 [ 109.633506][ T5280] usb 4-1: config 0 interface 212 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.654503][ T5280] usb 4-1: config 0 interface 212 has no altsetting 0 [ 109.678825][ T5280] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 109.691585][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.699952][ T5280] usb 4-1: Product: syz [ 109.704296][ T5280] usb 4-1: Manufacturer: syz [ 109.708964][ T5280] usb 4-1: SerialNumber: syz [ 109.743807][ T5280] usb 4-1: config 0 descriptor?? [ 109.774840][ T5280] ftdi_sio 4-1:0.212: FTDI USB Serial Device converter detected [ 109.791544][ T5280] usb 4-1: Detected FT4232HP [ 110.354430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.684811][ T62] team0 (unregistering): Port device team_slave_1 removed [ 110.822891][ T62] team0 (unregistering): Port device team_slave_0 removed [ 111.172277][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 111.172301][ T29] audit: type=1400 audit(1729718029.983:206): avc: denied { create } for pid=5454 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.209142][ T5456] mmap: syz.4.35 (5456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.362429][ T29] audit: type=1400 audit(1729718029.983:207): avc: denied { bind } for pid=5454 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.492432][ T29] audit: type=1400 audit(1729718029.983:208): avc: denied { accept } for pid=5454 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.573571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 111.687975][ T5280] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 111.772680][ T5280] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 112.035256][ T5280] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.055826][ T29] audit: type=1400 audit(1729718029.993:209): avc: denied { write } for pid=5454 comm="syz.4.35" path="socket:[6970]" dev="sockfs" ino=6970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.093009][ T29] audit: type=1400 audit(1729718030.073:210): avc: denied { bind } for pid=5453 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 112.140231][ T29] audit: type=1400 audit(1729718030.073:211): avc: denied { name_bind } for pid=5453 comm="syz.0.34" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 112.152104][ T5280] usb 4-1: USB disconnect, device number 4 [ 112.246024][ T5280] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 112.261467][ T29] audit: type=1400 audit(1729718030.073:212): avc: denied { node_bind } for pid=5453 comm="syz.0.34" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 112.322917][ T29] audit: type=1400 audit(1729718030.083:213): avc: denied { write } for pid=5453 comm="syz.0.34" lport=36232 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 113.254893][ T5280] ftdi_sio 4-1:0.212: device disconnected [ 113.343439][ T29] audit: type=1400 audit(1729718030.083:214): avc: denied { create } for pid=5453 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.646097][ T29] audit: type=1400 audit(1729718030.093:215): avc: denied { setopt } for pid=5453 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.283531][ T29] audit: type=1400 audit(1729718030.833:216): avc: denied { create } for pid=5454 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.603960][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.610316][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.314310][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.321216][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.954945][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 214.961088][ T5243] Bluetooth: hci0: command 0x0406 tx timeout [ 218.953343][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 225.433377][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 229.409557][ T5240] Bluetooth: hci4: command 0x0406 tx timeout [ 261.563809][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.570333][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.283464][ T30] INFO: task kworker/0:0:8 blocked for more than 147 seconds. [ 264.291273][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 264.554166][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.562902][ T30] task:kworker/0:0 state:D stack:24608 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 264.573342][ T30] Workqueue: events bpf_prog_free_deferred [ 264.579226][ T30] Call Trace: [ 264.582543][ T30] [ 264.585695][ T30] __schedule+0xe55/0x5730 [ 264.590192][ T30] ? __pfx_mark_lock+0x10/0x10 [ 264.595313][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 264.601235][ T30] ? find_held_lock+0x2d/0x110 [ 265.223362][ T30] ? __pfx___schedule+0x10/0x10 [ 265.228334][ T30] ? schedule+0x298/0x350 [ 265.232740][ T30] ? __pfx_lock_release+0x10/0x10 [ 265.253335][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.258639][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.223712][ T30] schedule+0xe7/0x350 [ 267.227902][ T30] schedule_preempt_disabled+0x13/0x30 [ 267.243492][ T30] __mutex_lock+0x5b8/0x9c0 [ 267.248122][ T30] ? bpf_prog_dev_bound_destroy+0x23/0x330 [ 271.263350][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 271.268524][ T30] ? bpf_prog_dev_bound_destroy+0x23/0x330 [ 273.250209][ T30] ? rtnl_lock+0x9/0x20 [ 273.254559][ T30] bpf_prog_dev_bound_destroy+0x23/0x330 [ 273.260276][ T30] bpf_prog_free_deferred+0x583/0x6f0