last executing test programs: 3m37.744891754s ago: executing program 1 (id=5987): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f0000000140)=[{r1, 0xd461}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x2) 3m37.565764144s ago: executing program 1 (id=5990): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x167}], 0x1}}], 0x1, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 3m36.684476181s ago: executing program 1 (id=5997): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x104, 0x1) 3m36.631411864s ago: executing program 1 (id=5999): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1100) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 3m36.520928479s ago: executing program 1 (id=6000): r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x541, 0x4000101b, r1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000001700)=[{&(0x7f0000000100)='_T', 0x2}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r2, 0x0, r4, 0x0, 0x1, 0xb) 3m33.574968022s ago: executing program 1 (id=6021): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2a1}], 0x1}}], 0x1, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 3m32.747320059s ago: executing program 32 (id=6021): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2a1}], 0x1}}], 0x1, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2m34.843492492s ago: executing program 0 (id=6374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800010400000000000000008594233c2d76"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x6, 0xffff, 0x1, 0x7, 0x1, 0x0}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) capset(&(0x7f0000000340)={0x19980330, r1}, &(0x7f0000000240)={0x1ff, 0xfffffff7, 0xb, 0x4, 0xd1, 0x7}) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000007c0)={{0x2, 0x4, 0x6, 0x6, '\x00', 0x5}, 0x0, [0xa9, 0x7, 0x8, 0x9, 0x2, 0x0, 0x2c, 0x5, 0x7, 0x100, 0x6, 0x7, 0x4, 0x2, 0xfff, 0x8004, 0xd0, 0x5, 0x101, 0x5, 0x1, 0x5, 0x2, 0x8001, 0x3, 0x10, 0x7, 0xebd3, 0x7, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x4, 0x7fffffff, 0x6, 0x4, 0x77c2, 0x3, 0x401, 0xc, 0x8, 0x4, 0x5, 0x10000, 0x0, 0x4dc4, 0x2000000000000000, 0x4, 0xfffffffffffffff9, 0x3, 0x4c4a, 0xfff, 0x8, 0xa, 0x5, 0xff, 0x2, 0x3, 0x6, 0xc, 0x37ad, 0x9, 0x5, 0x3, 0x5, 0x9, 0x80000, 0x3, 0x8000000000000000, 0xc, 0x8179, 0x7, 0x7, 0xb2bf, 0x0, 0x3, 0x3, 0xffffffffffffff76, 0xb12, 0x5c, 0x20000006, 0x10000, 0xd, 0xdff6, 0x9, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x800, 0x10, 0xfffffffffffffff8, 0x8000000, 0x8, 0x9, 0xfff, 0x8000, 0x6b0a, 0x8d, 0x4, 0xba, 0xfffffffffffffffa, 0x9, 0x9, 0x6, 0x4, 0xcd, 0x7, 0x8, 0x8, 0x7, 0x8, 0x5a, 0xa, 0xffff, 0x7ff, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff5, 0xff2, 0xfff, 0x8, 0x6, 0x2, 0x100000001, 0x303e]}) 2m33.026575829s ago: executing program 0 (id=6383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2m32.25719964s ago: executing program 0 (id=6384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m31.181627983s ago: executing program 0 (id=6389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) syz_io_uring_submit(0x0, 0x0, 0x0) 2m30.081186653s ago: executing program 0 (id=6392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m29.559512037s ago: executing program 0 (id=6395): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r7 = open(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x2) flock(r7, 0x2) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x41) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 2m14.242707637s ago: executing program 33 (id=6395): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r7 = open(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x2) flock(r7, 0x2) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x41) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 1m30.742689674s ago: executing program 5 (id=6024): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08005700ba0200008402330080200900ffffffffffff0802110000005050505050505f08ffffffffffffffff6400001000060101010101010107b036016c1860a403012c0602ff01050a059705840713d363c6722a01042d1a00041602000000000000007b004700110000000000fc00000001760603002f000600dd40634f9d6767d40036e02b29087db4796f9460e41a9b7bfaef8ac63df1e298738a6223fe0407d407b082cc1ab24a3e387236d67378958b9caf41bbe8afe5482fcedd98a98fad01a56605bae953558ef77f9ff149046062c3a136155a6572f183265bf7ed2aa072bc5b247f708ea374fbd967c3f49c440dd300a84eb40929dfb9546e0d7676ec8d2281bf43388bc65903"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m14.523277803s ago: executing program 5 (id=6024): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m8.426508078s ago: executing program 6 (id=6441): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m4.999463497s ago: executing program 6 (id=6441): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m1.294400481s ago: executing program 5 (id=6024): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08005700ba0200008402330080200900ffffffffffff0802110000005050505050505f08ffffffffffffffff6400001000060101010101010107b036016c1860a403012c0602ff01050a059705840713d363c6722a01042d1a00041602000000000000007b004700110000000000fc00000001760603002f000600dd40634f9d6767d40036e02b29087db4796f9460e41a9b7bfaef8ac63df1e298738a6223fe0407d407b082cc1ab24a3e387236d67378958b9caf41bbe8afe5482fcedd98a98fad01a56605bae953558ef77f9ff149046062c3a136155a6572f183265bf7ed2aa072bc5b247f708ea374fbd967c3f49c440dd300a84eb40929dfb9546e0d7676ec8d2281bf43388bc65903"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 51.950363139s ago: executing program 6 (id=6441): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 40.951055819s ago: executing program 5 (id=6024): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08005700ba0200008402330080200900ffffffffffff0802110000005050505050505f08ffffffffffffffff6400001000060101010101010107b036016c1860a403012c0602ff01050a059705840713d363c6722a01042d1a00041602000000000000007b004700110000000000fc00000001760603002f000600dd40634f9d6767d40036e02b29087db4796f9460e41a9b7bfaef8ac63df1e298738a6223fe0407d407b082cc1ab24a3e387236d67378958b9caf41bbe8afe5482fcedd98a98fad01a56605bae953558ef77f9ff149046062c3a136155a6572f183265bf7ed2aa072bc5b247f708ea374fbd967c3f49c440dd300a84eb40929dfb9546e0d7676ec8d2281bf43388bc65903"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 36.96312587s ago: executing program 6 (id=6441): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 29.244184821s ago: executing program 5 (id=6024): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 24.253678279s ago: executing program 6 (id=6441): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 12.805919563s ago: executing program 5 (id=6024): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 10.071954809s ago: executing program 4 (id=6762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r8 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r10, &(0x7f0000000300), 0x0, 0x4, 0x541, 0x0) ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000000140)=0x200000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x61a6, 0x12, 0x1a, 0x10, "c6886cef11a20d8cfc49b691fee7b438d76131b755b202b21c5a1f170932794f7e2cc0bad5cfd47e329187647f2b4b9ba3796fc14017a348c67be674005135cd", "7ff6c25489bc05244c751a9e647327bc90a31cdaefadd4367d170fbeb18afd55", [0x9, 0x8d]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000340)=@nfc_llcp={0x27, r11, 0x0, 0x2, 0x8, 0x9, "3fb8ad7044a7b1404120d0a2ce934f786b42977366285151c1dc55c8e3d072fe0d976803b55968fc5f8ad40da4dc7070c878b61292fcdc8672ad0327374645", 0x2a}, 0x80, &(0x7f0000001900)=[{&(0x7f00000003c0)="d33043d0704d97ae9586563d4d8c56eb3f8480cce91be3534e3836b4edfe0f8af4824cc0d7518ea3c1c1c81d26038aab842b773ea41c331344bcab14c3c41906d82331dc141b99363b26cfdce9c42cda203492a62e8e233c54b8ca22bf4d106773a4335923c0fe7a9b3674d06a8c22e5ae09fccf5df191935465ce8506fecbebff77525a1df198ecefee46c26891463d9e0f31eb4e0bbdc8ee4e3940ee1cd2051c452ce88a9ab33b7d63c4", 0xab}, {&(0x7f0000000700)="e89984fc09a4b1574d088445a024038578227ad1e634ca6417141873c8765751884fc09ac8dae85f17be0626e2b21641b81bac3a33ed8585e228229208a6ed9432185e72d303218fe089be7225b8f4beb41b77a0a4b8deebc389c5ad1c7ee2357dc4841f37b443f86915bd44efa8c3bda517c3d90b01c9243c9d3c6e0ab4c966541755c596734fd4e2f8a0b16331d583b7de988f4ccc6b8c14783343023847cc6f668f9ead8a21345b7010223ac03f76ee7ff4d2ec7b6be7e5b2d5bf9bf0e1316177bb00be75a2486ad0b537525c65d8abe530d7a2389f7c14df2a15daa0d04c0f8d02aaf13e39d52b66eff62896cafc21e5fdd8b0b092d2570b14cfdee7b3f3ec6f94221ef89ac1af1122c569b986a7332b8d733d486d2bbe14e664c345da0a6207f6852631f320f4ba867efbacd5970936c00442791a2a80e761d4b9322a8284508f1362853e476238f106637ba4fa2b9b1c13cc3b00811ab596624f9528bc376b2e0a9c803f5199c7b1fdf462168501c59a434cbf6e28db3c4500155ff65b6b3a9d1916588e20107c21bc3bf4d0acbaa3508c7983715f5ed77aed713a82642778a061ad72d0f53799a3ab82a6557be0b4223ab2704f3b3b339441fe4edbd9ad2aa5c3aed53f97c205e76866c97e056db52f85237dc2b2afdd74e990751d6353461ba5a70dc5c261c3e826e5389161e063f3d02ff73d05c02add4251468762e810d4439b1942d90ff61b45bb2df371bcdbbdce620d156cc6cb574eaef4543ae3b18e52639f8e7b66094c4a52d1d2b11108fbe1b926e74732dd66c1fc61672e4fedca0e3b7a1675ad17e986eeb8b0b47ae93aa6e8c69d53e46eb903f35ed98c94b09726b87d924d8a9efa3687521ba0dfb13d143f67e45666b23b79744bb39fd5c260621d341f85e7e26228b22ba1ae761774d1069cde7148320e2a63288802c5181524909b1252e81c49a0a566f9377f9f1844198b5d947ffc47bf2a65dcd23f64d35aeff669b850f97783eac20b80f17004b1c578fa7c35fe74f21d2f30d31dc37ac5f87252a5aa508ed71b65f9d442ebd667711399d93a9406eb5f2d0401c76f02a05b512c9876d14d170291bd76e2dce2c1bf0600278ce5b5b6359d5e54e877dc7c4304557f3c7c02a9aa14ccff1f1489318a031ba35b901f27ea221ee13e13b2ec1ff3fb13ad22d48e57c75d88134cc67bbfce4c6d80c1e6c76ea1ab9c240f0b599f82874c64063423bd79060cb82124d56e25a951627003be7c625d7da8d63763453287d911ec3036264ae2bdd595c6a2dc385fa06c48b61c5addae25ff062bd75645e340a9393871a50723b49de22ce15f901c2c077e7f9936ce2230a3ada9b5c558ddf75c30fa3b2241ebdd98d9a720195d1e45f496f98ce3e01d77bb8f8a1a0953980af857bbafe6eddcea766e4ff4496ad1b07c253d00129eca204de34c83d94208d072dd408991b4a8e5b6e9aab510aa8d67cb0a134b66de6a6aa087a09196fe9ec32c744e1c80b4a2cc0a17fdfffa06b7055db166931fc77720463bb9313e4fc57c6644b7045f7c84fe4531e4e2e45cf9bb3e8a6525d4de294598e88f629401a85b639b07a2f462136877e2dd6e67b5ef4e17bc55e21711b3e9be47748874fda10f5aaebb56904f136e85a4b7f18a2d7abab677ad2d978d7832aba0a3021cf2ad0cb756cfa4d40a92280e39ad139df398c7ae623d2bd07f94b7643508e45ff2dea6cb02b506eb516f02e2e0c2e81ca9af43a997aa6e87d6e0c0a0f83cc55539e2062757beacb8848f948f306091b7e7c4e13c06821ed86ff0a2028c92df8f5cbcbacdc6c5e3660cd549bf6527660f37d687cdb99d6aee6d87e7498a4399ab7962dd60438dfd0d725e5cdba4396509917ad4c2a0676b4cb088bf8f85ddf5724cac6256ec8981f8189cb90b1ca22b44d729ff116d2f1731647d4b6d48d13f3410f5708c8ba267b791550c227ba94e699528344119523c3f52b6fcdf535e2173bc352ccb1a6500f7e411d3fd4778ff8b8fa0fda07ad6a578ae3152813891d7e5854027dd8b0505f5f4158c7e711b63d069602dce9e1d3e4680a7b6381a934c96253ffdcee286faa5d68c4dd9890a760a09434017cfc0326948cf17d81944081ba482c130daced0b86a93b655669a18fdb4d94f4ede73198a66a98e9aba07b6d69a286d1b75782726fc238e842f6df170ac89c4394d5ffcb1893c79f7681becbfec2f32b8c7f5bfabd94b1fc1f1aa5df6cabe56745ad071dd2be91aeb65bf42b8a29b732c7d504d59289bff2ddf79266044fd298894ec9b1fc338e99d58a07c6d4da89bdc51f6c0ccda49333517fee2e9c178c17a9fd7084521fbf594c30d404d085855a88f35d2f1e11fc114dc5358272ac292dd31ad84c86e04570eb778b64f500b0741577f3621fcac7783661a7534de417fb242b1dae41f3aae740ed4af6478c4c4c9d54011a05ae81f981689fa01857357b924c59d0c58c04a954e117e74ac189defd22550817cb755bc8f0ace35955e3938dd08665d319c3f56f968b70babc191a51e8348241c8fb8c847cea5a96e62d6d058a049a7bbb488c48d13cde34f5254c6ee544b4d208b1f59b95137966e30d8ca62367c968b9aeb17feb7ff97d9d1e6ad330788f56dbf784b4bf6762a7d83d87aae9c28bd4acb9e8bbfbf09821dfecbf04e7753a7f50cf84fc4bfafb443d476557abbe52e53c193bd79b0aa5c4b9ed905089de57aa47dd69acd2817d1c8dc1af60ffb81827aa1ae46f1d2c6a5d48d187e67b3a69d64281074b1e2bc8e78501d74706fb19a9f481abf55a54e86294ecd0a54a9686b392b5d291e5d3d448dad06de1c127f645656c873f737fcb737b13e711f24bc821d2bbd920d4d9c0d14a9b918c5789effb3ce398e4e66f05376bc3cc43ee3fd5b73bd1bb1725c39206cd98f2fc35cc9c8ccd3c8d35b9464cae96c31b95653451f33098e11ce031ed6268f6a248720bd931d3863389ec16cdc192f60b29832efe62942f052b216b4b471281fc4214d91ef9efb59335302cd1152eb9e4df3d6c325e0d84fcdf9b12fb50be238184f4a28dde46e03606ab17e9ce3768c3e4a3967bf7a73838568d6a6741ba21333d5797b1063bf693c5a10e1b96d3b0998465d55aa1d79ce8dbf18320aa3fd15ac6b03d269d54ec568142e4f0937132d6e6b313b8be4d27e31bd388f10feebc96de15def89672fbf20375eaa459de2559514ee046183176ba4c6505f2679c98f701fa4ec2b867539740ac49ced191ceb1197fb9a9aac2a529fa8c49ace94f56e7e7518c81c952132298521c1b2e531a26470d4fc24b1eb6cde5c5595e93e4025557ef45f9edf7d9edc224d77caefc47e3d49d8a2394b73f5f3436cf7013b53683ebbff9020836998e9bb6a225f7502ce3e476971ae7f57c3a101f8ac3b7329bbf6ee3c7d7ed9689cdce0c6947f0860a8266d9b98496804c8bdb1a248edccbc40ef74c7cff359668b813c686e7f450150463b5e6fe8cfdc0ab433d13a5f3c45b6b7346f1a9f75bc048e4dc99b50096fed6324bfaac876cd9d8a28c3e292dead69a72a50608f4d7790f7e26895dbafd7f0d20ac7d794073eca8c494e307321b7d8659196717e02325e5d778cf533b39248f623c541515396eaeb57c753153e36905c80489639e3c6eaa844f74ac41d62ffc328de840147f34b5087c2664e5feb0fbf77f039537b795e6315580dcd9b7db244793b767dca9d0fab2abf5a8c74a8dd44b6e7d755088401435934c06dbe7718a721b85a03dd9e1a0a46f48a8f380532919a11323e82472a1f3565c295a7a5e2114a345bb087677a6be0ff9dbb0e738430472a2fb582cc3d677f1d7e621d2c6fd92163adf93549b83d98f11cdfa865c57293cd4e0de329105db600e38d4adb93a98df794fb78c589fd3f7c7ea73241883dad4d9c8f377a2e083ca65fc6096bebb3e1910fda02d0fdf9ce88dcb17dc20bc54c85d73b53707b249c2b079daf2b4f1ec3e6408ff7d1c01d75aa979930c93fb4f9f62f179f19fffe19a6d18a296ba5fc8dbbd37a0c61f7a8e1d30749afe7d0e1201767ec31071482af31070330b58124ad7b51bd6be61e25b3747e86962bedd1e86666fcf304121a70c7ad74a860b9743f5082837f5b23aa07f40255622cf58ec0e9d5f0250fc89f2c07a66fc0db69a2669735e329ee258674ca4f00d6cdfa6006a9d23b2e25449cb858c98d808db0ce08ea647a2877bf80d3761fb9b5856b2ad8b2833162ce3373a8bb5091e276a30ddb057bcd65a7ca1155623c57b705d281e50b766d6415a26ac4d3fb8708db68f5d845960493ff37e0aa84932c83495a607ab18569418d5239613c0822b2ce084624bb6da6185e25aef6d78a44e365e2848ede85b64bfc5f0de711faa0081d2c6373a4bea5e53ca327c2fb39b0379213d04dee4a21f29d58da1076aeb6219fbadaa8f8ac6f2afb935ed1dfa529bb091b12ba1ef954f0c94395b2a9a83219df22109729b7b993ddef69e2c3dcebab39bc3abdd58a6549690468a151b820b862f01d6c44eb1ce370604f619355065bd09ae1929feab05d88513bde8198eb7d8811749b7c279dd93ed16e5b13e53e355dd266b5df3f6dfe2aba19b494e3dd30cd2d8ce333b561d07dd97968324a899615083e1e0d43fd158fc6ff7718f8e4fc99171cb641bcfed5de808369628f0afa8d0baf1f07fb18d1d067b6fe29e7b059f2237cc428abbab2f9cbea2a7d1cb18878409c1372c951d028bbdcaed965d51f760e707c22d9fd7bd4fa9f8a66b82ce1905bdab10f34f51f1345e0ce22c2421b2346f4625dc84df1ef962763ec272c792d6506607f33ffe0a5202f89d97c54540a28def8faadf126b0e7b93f4942d8fc58931c06c64156d293db0810b34d055750364af5915096c74111e53ba99b670888431135d4311c23f8f30f81699686bbdcf4485ce45d56967bae05af5d082f176b5afada02791aa1ec58423509888e9eefd111b63863bfc821d4c10db7ea460a255bed76b823db71981c05810fa20b6500b76ed553f16dec3b153bcac619ceb1f6fa1dc6897cea23197b39db32ef0f98ab5b149a8381248f90513b2d1de29c36c41dfc2e485a0e88e66d73a67b0fff282c851ca28f402ef89a39113fea301cdaf1f8f37cf2903e131e3ebf7386edc108498533204814c8f556f3f064624e458c7683c1a5e7c609da4428f7636b0fdafb827389c2cd264b5e06541607141d60b9378fb6bc7eb1f9ed86bdceca39ea4af629bc06c1c46b269376bb9d04496385986a20833840b242341f1b215cea60bc06c262ec09e1435c18b756c5ef2692518fd7efae6756394d1fda1161ae5790210e397cf12492bb0cf791553a0612f533c85a298fe7419ead29cd897613c5d8a2a8fa43c83262d5074cd1e87e98d715fddc00e24a0ec0034ef63e76f4bd62b29757c36b969aed265629f588d74dc171256c6a1111f3d9f17f4e4aa906cf10fa136a6351002fe4a92a8b6160d6a6f105a614306aa329e58d56bebf99b02a37cf2cb5f20eae3438f0651c93a1a7210290e84e13f9a53a1c61e5985c0df2194c12a738b0f247ea51a17903a62e5375801d97533c1e87fc8b1ff67319e202ef6cea3dd6c7a70bd9957c2dcde72548348366cbdb51036d16f5ba8b39d85689c0c78c7fa8de5f82e0018da432ca477e0e8417dae96cc9c26c3ce1240238e7e09e6c7ae75cb8b5e8a9154760fe079350aaf1308c7aa25583b865e88e9fd39966ee54174c83fea51f2037d765ef3bb3c520ae2de12aec0b789c637ff9ff40e1", 0x1000}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f00000004c0)="87b3", 0x2}, {&(0x7f0000000500)="82d01049eed42d62adfddeb2cbdfa5b2949cdfb89ffb7d588d7bbf69463d55901f3f9fd5868945ba848e214c66e41311c0f116c7f6b69394eac8aaa95700eca318162d64616ec6067c15071c22829a8e8c885c0b34e7cc3c0517d12489d0bc5ad2f4b26cf09c8a85771e17e91bb9bcc1564c1dbda04ee285c0ab80defab35cfc3b5de4", 0x83}, {&(0x7f0000001700)="72b70fd288240456a0a57d4117023ffd4d8e90d46df56c940ddc955e532af0934861d077dedfd25cd677154ace9f5932edbe01283c0e31b78459c415ed611d9bb878b014a8fc57360a2a919df092c64399125ff1ab0136406dcb9d8f570ec11781b450ec146911ccf476fa100bdd515913ef887a57c5b1eff3e6d74877b63fe51cf658d60c06667d33f3e2f518420faf4ad20183952c231f29d1bbbdaa92d248355a4763775da4c1f9a83b3fb263b8792d20200a996a344f6d5538f1ae7b128982bc1a0b655225aab308769657ef5bf9dd6ac5e19ab0778b55bbe8", 0xdb}, {&(0x7f0000001800)="fa29eb1ee39ae3cb6967966a6111eba7b16c212a1048944bee25c19fddd478b203262c2248077e8435cfbea3f97a83a4b2d4e1cfd0d054f524e4f19cdb1106ebeddec931840e19e2081bb1296b54b9a8d9339e77166a3a1f033f05262100a7cb47a421371ae88ca3115524ed653ac825c7a504b4f6bb39b492a1b0a30f85ae7d4423463d7829146c2f25653f8dc52e69e466d198901f4a3edf696d0ea58e1268d50d5e181c3adfeaccdb4e3becff8d28271b4a", 0xb3}], 0x7, &(0x7f0000001980)}, 0x2000) 8.943620872s ago: executing program 6 (id=6441): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5.963519636s ago: executing program 4 (id=6770): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) syz_io_uring_setup(0xd51, &(0x7f0000000180)={0x0, 0x3ddf, 0x40, 0x3, 0xe}, &(0x7f0000000280), &(0x7f0000000340)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000d0a37fffde66f0538058a42c361ee2658bbe618efbba750fcb8aef71e15f7ef2c2731b218ede66578da9fd646a6c79e69dba45a0205734b70045811bcef85538a765729ff758ba7fc1009021f019e29ede3123ca92f72aee6b98397054016c6bf1d47752006303d767532d3fd6af21762edfe4"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 4.764963343s ago: executing program 4 (id=6773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={r5, 0x1ff, 0x3}, 0x8) 4.425243987s ago: executing program 2 (id=6774): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0xffffffffffffff14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "99e2b309f8f8516fddb8e260f295005344aba1e8d726efbf150ee8974b3f11136e82beafdb233ea576cb6d1b97ef2d9a7441b9b093f5cbb6ff5464c3b75f300b5c0e501122e9a2e2603f2744657072e9374185d0ad62c6e25e9ccd4ec1fae683afa75352007f4016a7f42360f4db9ec4e16e5267e6c1025fc9969aa51c8ed850769d1323dfbf1bbdf0df75558038382f0f9ee17536ae3c4276a81cf3c759e30f9f83716e3262c65f963caa046ae3c3c35bacd85565738be528b55838870191a22aa901275a239a369b6885cd72ba8f98fc807b3dedaf6f99c4e4ccce0eff"}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x107000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="00000000f4e1", 0x6}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x80}}, @hoplimit={{0x14, 0x29, 0x34, 0xa}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x84, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xe8}}], 0x1, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x6, 0x0, 0x9, 0x81, 0x8, "aa7651b9d2037a4d41cfb76ab5c0c3a055be1c", 0x4, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.314778317s ago: executing program 3 (id=6775): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}}, 0x108) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x6, 0x1, 0x3, 0x0, 0x5, 0x8, 0x6, 0x400, 0xfb, 0x8, 0x5, 0x5, 0x1, 0x6b23, 0x7, 0xfffffffe, 0x7f, 0x803, 0x40000003, 0x22, 0xda9f, 0x3, 0x20001e57, 0xb, 0xe66, 0x10, 0x995d000, 0x4085, 0x509e, 0xffffff53]}) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe9a8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 3.771361956s ago: executing program 2 (id=6776): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0x3}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$inet6(0xa, 0x4, 0x9) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000500000000000400000000a200000000000000cbaedc6dc3e2476bf94ff4afa64665c3e539ccdb7a3e847789a706fc5e03cfa4dffc818f0d40f0b33c99d1a1d5ff00c59fb9a5ba055c920907775f26bf065fc7619a14da2d9cac79", @ANYRES32=0xee00, @ANYBLOB="1000060000000000"], 0x8b, 0x1) 3.589896239s ago: executing program 4 (id=6777): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@hci={0x1f, 0x1, 0x3}, {0x0}, &(0x7f00000001c0), 0x8}, 0xa0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000200)=""/85, 0xaa) 2.484101103s ago: executing program 3 (id=6778): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x0, 0x8}, {0x2, 0x4, 0x5}, {0x1, 0x4, 0x8}]}]}}, &(0x7f0000000a40)=""/276, 0x4a, 0x114, 0x1, 0x7a72}, 0x28) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2.477366815s ago: executing program 4 (id=6779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19) write$binfmt_format(r3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@loopback, @mcast2, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0x5ae9374c1784bb6a], 'pimreg0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x1, 0x57}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x7, {0x7000000000000}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r5, 0x0, &(0x7f0000000540)) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, 0x0) 1.55522791s ago: executing program 4 (id=6780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0x3}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$inet6(0xa, 0x4, 0x9) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000500000000000400000000a200000000000000cbaedc6dc3e2476bf94ff4afa64665c3e539ccdb7a3e847789a706fc5e03cfa4dffc818f0d40f0b33c99d1a1d5ff00c59fb9a5ba055c920907775f26bf065fc7619a14da2d9cac79", @ANYRES32=0xee00], 0x8b, 0x1) 1.554257513s ago: executing program 2 (id=6781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000300)='./file0\x00') 1.544919737s ago: executing program 3 (id=6782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x14) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0xd0ff}) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 909.413812ms ago: executing program 3 (id=6783): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0ffcfbc12ef2db3c", 0x71}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe98bc2db9799488aa4bd58432fb72dee377296c6", 0x27}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992f8", 0x5e}], 0x6}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 833.244472ms ago: executing program 3 (id=6784): syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xf29}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012401600ffff16000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x10010, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 606.246313ms ago: executing program 2 (id=6785): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4d, 0x0, 0xffffffffffffffff, 0x0, r2, 0x1, 0x0, 0x2}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 562.247636ms ago: executing program 3 (id=6786): socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 282.997371ms ago: executing program 2 (id=6787): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_audit(0x10, 0x3, 0x9) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 0s ago: executing program 2 (id=6788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) kernel console output (not intermixed with test programs): tor's value: 3 [ 1951.363669][T24146] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1951.373312][T24146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1951.381768][T24146] usb 2-1: SerialNumber: syz [ 1952.020711][T24146] usb 2-1: 0:2 : does not exist [ 1952.025734][T24146] usb 2-1: unit 255 not found! [ 1952.044779][T24146] usb 2-1: USB disconnect, device number 39 [ 1952.088424][T28394] udevd[28394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1952.274341][T28822] bridge9: entered promiscuous mode [ 1952.279706][T28822] bridge9: entered allmulticast mode [ 1952.286237][T28822] team0: Port device bridge9 added [ 1953.732839][T28851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1953.745306][T28851] input: syz0 as /devices/virtual/input/input59 [ 1955.194060][T28867] vlan2: entered allmulticast mode [ 1955.641470][T28870] bridge9: entered promiscuous mode [ 1955.646685][T28870] bridge9: entered allmulticast mode [ 1955.653166][T28870] team0: Port device bridge9 added [ 1955.675619][T28870] bridge0: port 1(team0) entered blocking state [ 1955.682466][T28870] bridge0: port 1(team0) entered disabled state [ 1955.688839][T28870] team0: entered allmulticast mode [ 1955.693991][T28870] C: entered allmulticast mode [ 1955.698727][T28870] team_slave_1: entered allmulticast mode [ 1955.710061][T28870] team0: left allmulticast mode [ 1955.714910][T28870] C: left allmulticast mode [ 1955.719397][T28870] team_slave_1: left allmulticast mode [ 1956.574426][T28907] netlink: 'syz.0.5218': attribute type 11 has an invalid length. [ 1957.752432][ T5870] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1958.369815][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 1958.391432][ T5870] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1958.407634][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.428490][ T5870] usb 2-1: Product: syz [ 1958.438613][ T5870] usb 2-1: Manufacturer: syz [ 1958.445106][ T5870] usb 2-1: SerialNumber: syz [ 1958.460528][ T5870] usb 2-1: config 0 descriptor?? [ 1958.468815][ T5870] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1958.798456][T28971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5244'. [ 1959.349125][ T5870] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 1959.358751][ T5870] usb 2-1: USB disconnect, device number 40 [ 1962.001305][T29017] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 1962.089897][T29017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1962.207407][T29030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5264'. [ 1962.766985][T29035] vlan2: entered allmulticast mode [ 1962.928375][T29039] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 1963.524619][T29057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5271'. [ 1963.534068][T29057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5271'. [ 1965.203724][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5289'. [ 1965.259988][T29106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5289'. [ 1965.262033][T29105] input: syz0 as /devices/virtual/input/input60 [ 1967.126356][T29155] netlink: 'syz.1.5308': attribute type 1 has an invalid length. [ 1967.351440][T29172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5315'. [ 1968.261155][ T30] audit: type=1400 audit(1968.234:3070): avc: denied { lock } for pid=29195 comm="syz.3.5326" path="socket:[83930]" dev="sockfs" ino=83930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1968.497716][ T30] audit: type=1326 audit(1968.464:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.1.5329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec1e18f6c9 code=0x0 [ 1969.285847][T29222] netlink: 'syz.3.5334': attribute type 1 has an invalid length. [ 1969.877973][T29222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1970.348303][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1970.357425][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1970.552377][T29268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5355'. [ 1970.562519][T29268] netlink: 'syz.2.5355': attribute type 1 has an invalid length. [ 1971.178745][T29287] tipc: Enabling not permitted [ 1971.194148][T29287] tipc: Enabling of bearer rejected, failed to enable media [ 1971.980382][T29333] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 1971.989793][T29333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1972.079705][ T30] audit: type=1400 audit(1972.044:3072): avc: denied { write } for pid=29336 comm="syz.1.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1972.315727][T29360] vlan2: entered allmulticast mode [ 1973.409816][ T5863] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1973.617394][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.630066][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1973.649861][ T5863] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1973.659258][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.673309][ T5863] usb 2-1: config 0 descriptor?? [ 1974.292855][ T5863] hid-led 0003:27B8:01ED.0009: probe with driver hid-led failed with error -71 [ 1974.308673][ T5863] usb 2-1: USB disconnect, device number 41 [ 1974.902433][T29420] IPv6: NLM_F_CREATE should be specified when creating new route [ 1974.926988][T29418] bridge8: entered promiscuous mode [ 1974.932778][T29418] bridge8: entered allmulticast mode [ 1974.947057][T29418] team0: Port device bridge8 added [ 1974.957361][T29418] bridge0: port 1(team0) entered blocking state [ 1974.964164][T29418] bridge0: port 1(team0) entered disabled state [ 1975.593692][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.120781][T29517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1978.883405][T29537] 9pnet_fd: Insufficient options for proto=fd [ 1979.045385][T29538] vlan0: entered allmulticast mode [ 1979.130144][T29542] team0: No ports can be present during mode change [ 1979.522334][T29554] netlink: 'syz.3.5474': attribute type 3 has an invalid length. [ 1979.759658][T24146] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1979.950359][T24146] usb 2-1: Using ep0 maxpacket: 8 [ 1979.959240][T24146] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1979.969978][T24146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.998879][T24146] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1980.006455][T24146] pvrusb2: ********** [ 1980.010630][T24146] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1980.021085][T24146] pvrusb2: Important functionality might not be entirely working. [ 1980.030670][T24146] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1980.042327][T24146] pvrusb2: ********** [ 1980.205079][ T2335] pvrusb2: Invalid write control endpoint [ 1980.244323][ T2335] pvrusb2: Invalid write control endpoint [ 1980.252160][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1980.263002][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1980.270590][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1980.280603][ T2335] pvrusb2: Device being rendered inoperable [ 1980.289122][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1980.297973][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1980.311657][ T2335] pvrusb2: Attached sub-driver cx25840 [ 1980.317458][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1980.327946][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1980.416913][T29556] pvrusb2: Attempted to execute control transfer when device not ok [ 1980.426930][T24146] usb 2-1: USB disconnect, device number 42 [ 1981.112801][T29589] bridge9: entered promiscuous mode [ 1981.118061][T29589] bridge9: entered allmulticast mode [ 1981.124488][T29589] team0: Port device bridge9 added [ 1981.137741][T29589] bridge0: port 1(team0) entered blocking state [ 1981.144393][T29589] bridge0: port 1(team0) entered disabled state [ 1981.235900][T29595] 9pnet_fd: Insufficient options for proto=fd [ 1981.340304][T29599] sit0: left promiscuous mode [ 1981.345092][T29599] sit0: left allmulticast mode [ 1981.558136][T29615] bridge5: entered promiscuous mode [ 1981.563417][T29615] bridge5: entered allmulticast mode [ 1981.569921][T29615] team0: Port device bridge5 added [ 1981.859771][ T5863] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1982.019712][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 1982.026496][ T5863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1982.048300][ T5863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1982.058469][ T5863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1982.068775][ T5863] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1982.082184][ T5863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1982.099611][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.396842][ T5863] usb 2-1: GET_CAPABILITIES returned 0 [ 1982.402860][ T5863] usbtmc 2-1:16.0: can't read capabilities [ 1982.604872][T29617] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1982.630073][ T5863] usb 2-1: USB disconnect, device number 43 [ 1983.046231][T29639] bridge10: entered promiscuous mode [ 1983.053155][T29639] bridge10: entered allmulticast mode [ 1983.059739][T29639] team0: Port device bridge10 added [ 1983.069440][T29639] bridge0: port 1(team0) entered blocking state [ 1983.075970][T29639] bridge0: port 1(team0) entered disabled state [ 1984.932427][T29671] 9pnet_fd: Insufficient options for proto=fd [ 1986.375724][ T30] audit: type=1400 audit(1986.344:3073): avc: denied { write } for pid=29703 comm="syz.4.5539" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1986.494102][ T30] audit: type=1400 audit(1986.374:3074): avc: denied { open } for pid=29703 comm="syz.4.5539" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1986.657298][T29719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1988.273449][ T30] audit: type=1400 audit(1988.244:3075): avc: denied { load_policy } for pid=29744 comm="syz.1.5556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1988.366621][T29746] SELinux: ebitmap: truncated map [ 1988.502132][T29746] SELinux: failed to load policy [ 1988.507555][T29752] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5560'. [ 1988.586387][T29757] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1989.042513][ T5863] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1989.199869][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 1989.283996][ T5863] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1989.372692][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.408720][ T5863] usb 2-1: Product: syz [ 1989.416314][ T5863] usb 2-1: Manufacturer: syz [ 1989.427571][ T5863] usb 2-1: SerialNumber: syz [ 1989.440653][ T5863] usb 2-1: config 0 descriptor?? [ 1989.455036][ T5863] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1989.467556][T29781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5570'. [ 1989.645614][T29795] netlink: 'syz.3.5578': attribute type 29 has an invalid length. [ 1989.655628][T29795] netlink: 'syz.3.5578': attribute type 29 has an invalid length. [ 1989.667310][T29795] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5578'. [ 1989.677163][T29795] unsupported nla_type 58 [ 1989.992777][T29817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1990.157874][T29818] vlan0: entered allmulticast mode [ 1990.270626][ T5863] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 1990.301112][ T5863] usb 2-1: USB disconnect, device number 44 [ 1992.191741][T29869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5608'. [ 1992.202042][T29869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5608'. [ 1993.590169][ T30] audit: type=1400 audit(1993.564:3076): avc: denied { ioctl } for pid=29884 comm="syz.1.5614" path="socket:[87348]" dev="sockfs" ino=87348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1993.911931][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1993.921113][T29905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1993.955602][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1993.969047][ T30] audit: type=1400 audit(1993.934:3077): avc: denied { ioctl } for pid=29906 comm="syz.0.5624" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1994.002344][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.010505][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.018391][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.026845][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.035464][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.043891][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.052004][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.060741][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.068739][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: unknown main item tag 0x0 [ 1994.089050][ T5870] hid-generic 0007:FFFFFFF8:0FFF.000A: hidraw0: HID v0.07 Device [syz1] on syz0 [ 1995.457234][T29936] overlayfs: failed to clone upperpath [ 1995.467403][T29936] overlayfs: failed to clone upperpath [ 1995.991145][T29944] bridge11: entered promiscuous mode [ 1995.996463][T29944] bridge11: entered allmulticast mode [ 1996.003162][T29944] team0: Port device bridge11 added [ 1996.012938][T29944] bridge0: port 1(team0) entered blocking state [ 1996.019285][T29944] bridge0: port 1(team0) entered disabled state [ 1997.738925][ T30] audit: type=1400 audit(1997.704:3078): avc: denied { read } for pid=29992 comm="syz.1.5661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1998.484758][ T30] audit: type=1400 audit(1998.454:3079): avc: denied { mount } for pid=30011 comm="syz.3.5670" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1998.512638][T30014] overlayfs: failed to clone lowerpath [ 1998.520713][T30014] overlayfs: failed to clone lowerpath [ 1998.989814][ T5863] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1999.184107][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 1999.226157][ T5863] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1999.242878][T30030] netlink: 'syz.0.5676': attribute type 1 has an invalid length. [ 1999.254579][ T5863] usb 2-1: config 0 has no interface number 0 [ 1999.261956][ T5863] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1999.279858][ T5863] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1999.289156][ T5863] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1999.298628][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.308401][ T5863] usb 2-1: Product: syz [ 1999.314111][ T5863] usb 2-1: Manufacturer: syz [ 1999.318986][ T5863] usb 2-1: SerialNumber: syz [ 1999.327016][ T5863] usb 2-1: config 0 descriptor?? [ 1999.609040][ T5863] appletouch 2-1:0.85: Failed to read mode from device. [ 1999.632420][ T5863] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1999.670002][ T5863] usb 2-1: USB disconnect, device number 45 [ 2002.517887][ T5870] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2003.109747][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 2003.116302][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2003.127372][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2003.135858][ T5870] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2003.145036][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.153233][ T5870] usb 2-1: Product: syz [ 2003.157471][ T5870] usb 2-1: Manufacturer: syz [ 2003.162258][ T5870] usb 2-1: SerialNumber: syz [ 2003.174290][ T5870] usb 2-1: config 0 descriptor?? [ 2003.392849][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2003.403687][ T5870] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input66 [ 2003.425911][ T5870] imon:send_packet: packet tx failed (-71) [ 2003.449873][ T5870] imon 2-1:0.0: panel buttons/knobs setup failed [ 2003.519927][ T5870] rc_core: IR keymap rc-imon-pad not found [ 2003.525832][ T5870] Registered IR keymap rc-empty [ 2003.533092][ T5870] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2003.543443][ T5870] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2003.554925][ T5870] imon:send_packet: packet tx failed (-71) [ 2003.589772][ T5870] imon 2-1:0.0: remote input dev register failed [ 2003.596964][ T5870] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 2003.622620][ T5870] imon 2-1:0.0: unable to initialize intf0, err 0 [ 2003.629271][ T5870] imon:imon_probe: failed to initialize context! [ 2003.645901][ T5870] imon 2-1:0.0: unable to register, err -19 [ 2003.661356][ T5870] usb 2-1: USB disconnect, device number 46 [ 2003.989785][ T5870] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2004.139635][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 2004.146428][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2004.157543][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2004.166099][ T5870] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2004.175399][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.183906][ T5870] usb 2-1: Product: syz [ 2004.188103][ T5870] usb 2-1: Manufacturer: syz [ 2004.192964][ T5870] usb 2-1: SerialNumber: syz [ 2004.200873][ T5870] usb 2-1: config 0 descriptor?? [ 2004.351365][T30152] bridge10: entered promiscuous mode [ 2004.356691][T30152] bridge10: entered allmulticast mode [ 2004.363620][T30152] team0: Port device bridge10 added [ 2004.456138][ T5870] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input68 [ 2004.872092][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2005.315878][ T5870] imon:send_packet: packet tx failed (-71) [ 2005.349767][ T5870] imon 2-1:0.0: panel buttons/knobs setup failed [ 2005.420102][ T5870] rc_core: IR keymap rc-imon-pad not found [ 2005.426097][ T5870] Registered IR keymap rc-empty [ 2005.431834][ T5870] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2005.442864][ T5870] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2005.452623][ T5870] imon:send_packet: packet tx failed (-71) [ 2005.469671][ T5870] imon 2-1:0.0: remote input dev register failed [ 2005.476127][ T5870] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 2005.488603][ T5870] imon 2-1:0.0: unable to initialize intf0, err 0 [ 2005.495220][ T5870] imon:imon_probe: failed to initialize context! [ 2005.502462][ T5870] imon 2-1:0.0: unable to register, err -19 [ 2005.514242][ T5870] usb 2-1: USB disconnect, device number 47 [ 2005.750963][ T30] audit: type=1400 audit(2005.724:3080): avc: denied { ioctl } for pid=30185 comm="syz.1.5739" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2005.829777][ T5870] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 2006.003013][ T30] audit: type=1400 audit(2005.884:3081): avc: denied { prog_load } for pid=30197 comm="syz.2.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.152015][ T30] audit: type=1400 audit(2005.884:3082): avc: denied { bpf } for pid=30197 comm="syz.2.5745" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2006.309693][ T30] audit: type=1400 audit(2005.884:3083): avc: denied { perfmon } for pid=30197 comm="syz.2.5745" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2006.331299][ T30] audit: type=1400 audit(2005.894:3084): avc: denied { map_create } for pid=30197 comm="syz.2.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.360639][ T30] audit: type=1400 audit(2005.894:3085): avc: denied { map_read map_write } for pid=30197 comm="syz.2.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.381514][ T30] audit: type=1400 audit(2005.904:3086): avc: denied { prog_run } for pid=30197 comm="syz.2.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.400481][ T30] audit: type=1400 audit(2006.244:3087): avc: denied { create } for pid=30201 comm="syz.0.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2006.433953][ T5870] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2006.442732][ T5870] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 2006.457782][ T5870] usb 2-1: config 0 has no interface number 0 [ 2006.457845][ T30] audit: type=1400 audit(2006.324:3088): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2006.469607][ T5870] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2006.513999][ T30] audit: type=1400 audit(2006.324:3089): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2006.547851][ T5870] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2006.569359][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.598740][ T5870] usb 2-1: config 0 descriptor?? [ 2006.618777][T30186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2007.038190][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a961000: rx timeout, send abort [ 2007.546433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a961000: abort rx timeout. Force session deactivation [ 2007.563592][ T5870] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input70 [ 2007.779671][ T5863] usb 2-1: USB disconnect, device number 48 [ 2007.779748][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2007.989236][T30277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5780'. [ 2008.957814][ T5870] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2009.081663][T30302] 9pnet_fd: Insufficient options for proto=fd [ 2009.433164][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5792'. [ 2009.530042][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 2009.539366][ T5870] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2009.548843][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.557130][ T5870] usb 2-1: Product: syz [ 2009.561530][ T5870] usb 2-1: Manufacturer: syz [ 2009.566184][ T5870] usb 2-1: SerialNumber: syz [ 2009.573971][ T5870] usb 2-1: config 0 descriptor?? [ 2009.581864][ T5870] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2010.849750][T30336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5803'. [ 2010.858743][T30336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5803'. [ 2010.867858][T30336] netlink: 'syz.3.5803': attribute type 18 has an invalid length. [ 2010.876504][T30336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5803'. [ 2010.885901][T30336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5803'. [ 2010.896185][T30336] netlink: 'syz.3.5803': attribute type 18 has an invalid length. [ 2011.126471][ T5870] gspca_stk1135: reg_w 0xd err -71 [ 2011.135939][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.142348][ T5870] gspca_stk1135: Sensor write failed [ 2011.147657][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.154215][ T5870] gspca_stk1135: Sensor write failed [ 2011.160165][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.211202][ T5870] gspca_stk1135: Sensor read failed [ 2011.607846][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.614783][ T5870] gspca_stk1135: Sensor read failed [ 2011.624464][ T5870] gspca_stk1135: Detected sensor type unknown (0x0) [ 2011.632018][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.639711][ T5870] gspca_stk1135: Sensor read failed [ 2011.645009][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.654523][ T5870] gspca_stk1135: Sensor read failed [ 2011.662310][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.668801][ T5870] gspca_stk1135: Sensor write failed [ 2011.674477][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 2011.697128][ T5870] gspca_stk1135: Sensor write failed [ 2011.702990][ T5870] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 2011.715114][ T5870] usb 2-1: USB disconnect, device number 49 [ 2011.726406][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2011.726423][ T30] audit: type=1400 audit(2011.694:3135): avc: denied { read } for pid=30354 comm="syz.4.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2011.763047][ T30] audit: type=1400 audit(2011.694:3136): avc: denied { mount } for pid=30356 comm="syz.2.5812" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2011.864041][T30362] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5814'. [ 2011.928158][ T30] audit: type=1400 audit(2011.884:3137): avc: denied { unlink } for pid=30360 comm="syz.4.5815" name="#50" dev="tmpfs" ino=5414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2012.018384][ T30] audit: type=1400 audit(2011.884:3138): avc: denied { mount } for pid=30360 comm="syz.4.5815" name="/" dev="overlay" ino=5409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2012.041066][ T30] audit: type=1400 audit(2011.974:3139): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2012.074525][ T30] audit: type=1400 audit(2011.974:3140): avc: denied { create } for pid=30364 comm="syz.1.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2012.094749][ T30] audit: type=1400 audit(2011.984:3141): avc: denied { bind } for pid=30364 comm="syz.1.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2012.114536][ T30] audit: type=1400 audit(2012.034:3142): avc: denied { listen } for pid=30364 comm="syz.1.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2012.134463][ T30] audit: type=1400 audit(2012.034:3143): avc: denied { connect } for pid=30364 comm="syz.1.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2012.154443][ T30] audit: type=1400 audit(2012.044:3144): avc: denied { accept } for pid=30364 comm="syz.1.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2012.752573][T30381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2013.620098][T30405] netlink: 'syz.3.5831': attribute type 1 has an invalid length. [ 2013.761197][T30405] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2013.868704][T30408] bond6: (slave gretap1): making interface the new active one [ 2013.906206][T30408] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 2015.384318][T30442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2015.435745][T30442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2018.164710][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2018.164725][ T30] audit: type=1400 audit(2018.134:3176): avc: denied { mounton } for pid=30510 comm="syz.4.5873" path="/proc/4937/task" dev="proc" ino=89315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2018.359733][ T30] audit: type=1400 audit(2018.134:3177): avc: denied { mount } for pid=30510 comm="syz.4.5873" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2018.390260][ T30] audit: type=1400 audit(2018.314:3178): avc: denied { write } for pid=30512 comm="syz.1.5872" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2018.433725][ T30] audit: type=1400 audit(2018.314:3179): avc: denied { open } for pid=30512 comm="syz.1.5872" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2018.610629][T30518] kvm: emulating exchange as write [ 2019.052320][ T30] audit: type=1400 audit(2019.024:3180): avc: denied { create } for pid=30531 comm="syz.1.5880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2019.134762][ T30] audit: type=1400 audit(2019.024:3181): avc: denied { listen } for pid=30531 comm="syz.1.5880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2019.319517][ T30] audit: type=1400 audit(2019.024:3182): avc: denied { accept } for pid=30531 comm="syz.1.5880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2019.412019][T30541] 9pnet_fd: Insufficient options for proto=fd [ 2019.688569][ T30] audit: type=1400 audit(2019.654:3183): avc: denied { create } for pid=30547 comm="syz.4.5887" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2019.747245][ T30] audit: type=1400 audit(2019.714:3184): avc: denied { link } for pid=30547 comm="syz.4.5887" name="file0" dev="tmpfs" ino=5479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2019.785688][ T30] audit: type=1400 audit(2019.744:3185): avc: denied { unlink } for pid=5806 comm="syz-executor" name="file7" dev="tmpfs" ino=5479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2019.960498][T30554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5890'. [ 2020.660148][T24146] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2020.839899][T24146] usb 2-1: Using ep0 maxpacket: 32 [ 2020.853137][T24146] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2020.879682][T24146] usb 2-1: config 0 has no interface number 0 [ 2020.892274][T24146] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2020.913733][T24146] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2020.932615][T24146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.941052][T24146] usb 2-1: Product: syz [ 2020.945259][T24146] usb 2-1: Manufacturer: syz [ 2020.950366][T24146] usb 2-1: SerialNumber: syz [ 2020.984017][T24146] usb 2-1: config 0 descriptor?? [ 2021.787662][T30622] 9pnet_fd: Insufficient options for proto=fd [ 2022.667591][T24146] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 2022.714348][T24146] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2022.723246][T24146] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2022.737666][T24146] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2022.750636][T24146] usb 2-1: USB disconnect, device number 50 [ 2023.334276][T30665] bridge12: entered promiscuous mode [ 2023.339633][T30665] bridge12: entered allmulticast mode [ 2023.352622][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2023.352636][ T30] audit: type=1400 audit(2023.324:3209): avc: denied { connect } for pid=30662 comm="syz.3.5935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2023.589692][T19614] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2023.789756][T19614] usb 2-1: Using ep0 maxpacket: 32 [ 2023.806927][T19614] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2023.818403][ T30] audit: type=1400 audit(2023.754:3210): avc: denied { read } for pid=30669 comm="syz.0.5937" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2023.898254][T19614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.175936][T19614] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2024.595353][ T30] audit: type=1400 audit(2024.564:3211): avc: denied { watch } for pid=30685 comm="syz.3.5942" path="/1388/file0" dev="tmpfs" ino=7356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2024.664731][ T30] audit: type=1400 audit(2024.594:3212): avc: denied { watch_sb watch_reads } for pid=30685 comm="syz.3.5942" path="/1388/file0" dev="tmpfs" ino=7356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2024.720381][ T30] audit: type=1400 audit(2024.594:3213): avc: denied { mounton } for pid=30685 comm="syz.3.5942" path="/1388/file0" dev="tmpfs" ino=7356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2024.752645][ T30] audit: type=1400 audit(2024.624:3214): avc: denied { setopt } for pid=30687 comm="syz.4.5943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2024.776137][ T30] audit: type=1400 audit(2024.714:3215): avc: denied { create } for pid=30692 comm="syz.4.5946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2024.837466][ T30] audit: type=1400 audit(2024.724:3216): avc: denied { write } for pid=30692 comm="syz.4.5946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2024.880119][ T30] audit: type=1400 audit(2024.724:3217): avc: denied { sqpoll } for pid=30689 comm="syz.2.5944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2025.280656][T30712] netlink: 'syz.2.5952': attribute type 2 has an invalid length. [ 2025.299341][T30712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5952'. [ 2025.306316][T19614] gspca_nw80x: reg_w err -71 [ 2025.316798][T19614] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 2025.320226][T30712] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 2025.334636][T19614] usb 2-1: USB disconnect, device number 51 [ 2025.376804][ T30] audit: type=1400 audit(2025.344:3218): avc: denied { setopt } for pid=30713 comm="syz.4.5953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2025.399821][T30715] netlink: 'syz.2.5952': attribute type 2 has an invalid length. [ 2025.434206][T30715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5952'. [ 2026.981605][T30739] vlan2: entered allmulticast mode [ 2027.210111][T30751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5967'. [ 2027.239821][T30753] sch_tbf: burst 19872 is lower than device lo mtu (117440530) ! [ 2027.435697][T30751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2027.872010][T30774] syz.2.5973 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2028.448830][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2028.448853][ T30] audit: type=1326 audit(2028.414:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30793 comm="syz.2.5981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb201b8f6c9 code=0x0 [ 2028.960898][ T30] audit: type=1400 audit(2028.934:3223): avc: denied { shutdown } for pid=30812 comm="syz.1.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2028.991836][T30817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5989'. [ 2029.001251][T30817] netlink: 'syz.3.5989': attribute type 18 has an invalid length. [ 2029.010303][T30817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5989'. [ 2029.019364][T30817] netlink: 'syz.3.5989': attribute type 18 has an invalid length. [ 2029.840651][ T30] audit: type=1400 audit(2029.814:3224): avc: denied { read write } for pid=30832 comm="syz.0.5995" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2029.864442][ T30] audit: type=1400 audit(2029.814:3225): avc: denied { open } for pid=30832 comm="syz.0.5995" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2029.888609][ T30] audit: type=1400 audit(2029.824:3226): avc: denied { mount } for pid=30832 comm="syz.0.5995" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2030.004384][ T30] audit: type=1400 audit(2029.924:3227): avc: denied { read write } for pid=30832 comm="syz.0.5995" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2030.233318][ T30] audit: type=1400 audit(2029.924:3228): avc: denied { open } for pid=30832 comm="syz.0.5995" path="/1110/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2030.420976][ T30] audit: type=1400 audit(2029.934:3229): avc: denied { mount } for pid=30838 comm="syz.1.5997" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2030.484417][ T30] audit: type=1400 audit(2029.934:3230): avc: denied { search } for pid=30838 comm="syz.1.5997" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2030.651669][ T30] audit: type=1400 audit(2029.934:3231): avc: denied { search } for pid=30838 comm="syz.1.5997" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2031.898981][T30872] overlayfs: failed to clone upperpath [ 2032.216167][T30875] vlan2: entered allmulticast mode [ 2032.473670][T30887] netlink: 'syz.4.6015': attribute type 1 has an invalid length. [ 2032.596647][T30891] gretap0: entered allmulticast mode [ 2032.615181][T30891] bond3: (slave gretap0): making interface the new active one [ 2032.630295][T30891] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 2033.172058][T30904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2033.411510][T30909] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2033.914051][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2033.914068][ T30] audit: type=1400 audit(2033.884:3242): avc: denied { getopt } for pid=30911 comm="syz.3.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2034.105589][ T30] audit: type=1400 audit(2034.074:3243): avc: denied { ioctl } for pid=30920 comm="syz.4.6029" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2034.399998][ T30] audit: type=1400 audit(2034.364:3244): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2034.664496][T26930] team0: left allmulticast mode [ 2034.685240][T26930] team_slave_0: left allmulticast mode [ 2034.709405][T26930] team_slave_1: left allmulticast mode [ 2034.719760][T26930] team0: left promiscuous mode [ 2034.724615][T26930] team_slave_0: left promiscuous mode [ 2034.736575][T26930] team_slave_1: left promiscuous mode [ 2034.772689][T26930] bridge0: port 2(team0) entered disabled state [ 2034.806060][T26930] gretap0: left allmulticast mode [ 2034.821294][T26930] gretap0: left promiscuous mode [ 2034.826517][T26930] bridge0: port 1(gretap0) entered disabled state [ 2034.997736][ T30] audit: type=1400 audit(2034.964:3245): avc: denied { ioctl } for pid=30936 comm="syz-executor" path="socket:[91365]" dev="sockfs" ino=91365 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2035.064149][T30940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2035.096963][T30940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2035.211588][T30940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2035.227431][T30940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2035.238653][T30940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2036.546472][T26930] dvmrp0 (unregistering): left allmulticast mode [ 2037.031171][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.394951][T30940] Bluetooth: hci3: command tx timeout [ 2037.429055][T26930] bond4 (unregistering): (slave bridge2): Removing an active aggregator [ 2037.441930][T26930] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 2037.491247][ T30] audit: type=1400 audit(2037.454:3246): avc: denied { create } for pid=30977 comm="syz.4.6048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2037.538870][T26930] team0: Port device bridge3 removed [ 2037.587412][T26930] team0: Port device bridge4 removed [ 2037.642928][T26930] team0: Port device bridge5 removed [ 2038.162791][T26930] bond0 (unregistering): left promiscuous mode [ 2038.197789][T26930] bond_slave_1: left promiscuous mode [ 2038.274418][ T30] audit: type=1400 audit(2038.244:3247): avc: denied { remount } for pid=30991 comm="syz.2.6053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2038.294921][T26930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2038.304472][ T30] audit: type=1400 audit(2038.264:3248): avc: denied { dac_override } for pid=30993 comm="syz.2.6053" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2038.326328][T26930] bond0 (unregistering): Released all slaves [ 2038.468365][T26930] bond1 (unregistering): Released all slaves [ 2038.624029][T26930] bond2 (unregistering): (slave veth3): Releasing active interface [ 2038.681528][T26930] bond2 (unregistering): Released all slaves [ 2038.694488][T26930] bond3 (unregistering): Released all slaves [ 2038.857467][T26930] bond4 (unregistering): Released all slaves [ 2038.876738][T26930] bond5 (unregistering): Released all slaves [ 2038.897301][T26930] bond6 (unregistering): Released all slaves [ 2038.913950][T26930] bond7 (unregistering): Released all slaves [ 2038.931327][T26930] bond8 (unregistering): Released all slaves [ 2038.960471][T30997] 8021q: adding VLAN 0 to HW filter on device team0 [ 2038.987888][T30997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2039.016204][ T30] audit: type=1400 audit(2038.984:3249): avc: denied { append } for pid=31003 comm="syz.0.6058" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2039.062642][T30936] Failed to initialize the IGMP autojoin socket (err -2) [ 2039.423613][ T30] audit: type=1400 audit(2039.044:3250): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2039.429560][T30940] Bluetooth: hci3: command tx timeout [ 2039.779787][ T30] audit: type=1400 audit(2039.044:3251): avc: denied { search } for pid=5478 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2039.849109][T30936] chnl_net:caif_netlink_parms(): no params data found [ 2039.964449][T31023] vlan0: entered allmulticast mode [ 2040.048673][ T30] audit: type=1400 audit(2039.044:3252): avc: denied { search } for pid=5478 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.118377][ T30] audit: type=1400 audit(2039.044:3253): avc: denied { read } for pid=5478 comm="dhcpcd" name="n125" dev="tmpfs" ino=9299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2040.184733][ T30] audit: type=1400 audit(2039.044:3254): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=9299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2040.370330][ T30] audit: type=1400 audit(2039.044:3255): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=9299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2040.482211][ T30] audit: type=1400 audit(2040.014:3256): avc: denied { read open } for pid=31037 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.507645][ T30] audit: type=1400 audit(2040.014:3257): avc: denied { getattr } for pid=31037 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.864269][T30936] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.892044][T30936] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.903863][ T30] audit: type=1400 audit(2040.874:3258): avc: denied { add_name } for pid=31011 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.929834][T30936] bridge_slave_0: entered allmulticast mode [ 2040.946874][T30936] bridge_slave_0: entered promiscuous mode [ 2041.011064][T30936] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.026006][T30936] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.045238][T30936] bridge_slave_1: entered allmulticast mode [ 2041.060848][T30936] bridge_slave_1: entered promiscuous mode [ 2041.345208][T30936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.501851][T30940] Bluetooth: hci3: command tx timeout [ 2041.725150][T30936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.914792][T30936] team0: Port device team_slave_0 added [ 2041.999351][T30936] team0: Port device team_slave_1 added [ 2042.161141][T31091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2042.199118][T30936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.218485][T30936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.275110][T30936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.295898][T31094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6077'. [ 2042.306748][T30936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.319969][T30936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.828347][T30936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2043.114664][T26930] hsr_slave_0: left promiscuous mode [ 2043.124336][T26930] hsr_slave_1: left promiscuous mode [ 2043.190355][T26930] pim6reg (unregistering): left allmulticast mode [ 2043.530026][T31119] nft_compat: unsupported protocol 5 [ 2043.592818][T30940] Bluetooth: hci3: command tx timeout [ 2043.869299][T26930] team0 (unregistering): Port device team_slave_1 removed [ 2043.928915][T26930] team0 (unregistering): Port device team_slave_0 removed [ 2044.048376][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6096'. [ 2044.567908][T30936] hsr_slave_0: entered promiscuous mode [ 2044.571556][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2044.571570][ T30] audit: type=1400 audit(2044.534:3271): avc: denied { mounton } for pid=31149 comm="syz.4.6098" path="/1066/file0" dev="cgroup" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2044.583429][T30936] hsr_slave_1: entered promiscuous mode [ 2044.620989][ T30] audit: type=1400 audit(2044.584:3272): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2044.690383][T31146] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6096'. [ 2044.715577][T31148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6097'. [ 2045.061606][T31161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6105'. [ 2045.088081][T26930] IPVS: stop unused estimator thread 0... [ 2045.654498][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6109'. [ 2045.786703][T30936] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 2045.833005][T30936] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 2045.948037][T30936] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 2045.978922][ T30] audit: type=1400 audit(2045.944:3273): avc: denied { create } for pid=31207 comm="syz.3.6115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2046.015748][T30936] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 2046.063363][ T30] audit: type=1400 audit(2046.004:3274): avc: denied { ioctl } for pid=31207 comm="syz.3.6115" path="socket:[92113]" dev="sockfs" ino=92113 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2046.111329][ T30] audit: type=1400 audit(2046.004:3275): avc: denied { bind } for pid=31207 comm="syz.3.6115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2046.292761][ T30] audit: type=1400 audit(2046.264:3276): avc: denied { ioctl } for pid=31215 comm="syz.4.6116" path="socket:[92602]" dev="sockfs" ino=92602 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2046.677859][T31235] overlayfs: failed to clone upperpath [ 2046.678133][ T30] audit: type=1400 audit(2046.644:3277): avc: denied { cmd } for pid=31229 comm="syz.2.6123" path="socket:[93198]" dev="sockfs" ino=93198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2046.738482][ T30] audit: type=1400 audit(2046.704:3278): avc: denied { read } for pid=31236 comm="syz.4.6126" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2046.764575][T30936] 8021q: adding VLAN 0 to HW filter on device team0 [ 2046.841591][ T30] audit: type=1400 audit(2046.704:3279): avc: denied { open } for pid=31236 comm="syz.4.6126" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2046.844155][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.871592][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2046.941899][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6128'. [ 2047.002728][T31249] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2047.019859][T31085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2047.030521][T31247] nbd0: detected capacity change from 0 to 127 [ 2047.047945][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.055264][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2047.061507][T31254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6130'. [ 2047.108105][T30940] block nbd0: Receive control failed (result -104) [ 2047.410998][T31085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2047.823979][ T30] audit: type=1400 audit(2047.794:3280): avc: denied { read } for pid=31281 comm="syz.0.6142" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2048.556984][T31287] bridge5: entered promiscuous mode [ 2048.564235][T31287] bridge5: entered allmulticast mode [ 2048.614838][T31290] bridge10: entered promiscuous mode [ 2048.622189][T31290] bridge10: entered allmulticast mode [ 2048.642145][T31290] team0: Port device bridge10 added [ 2048.809331][T30936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2050.056209][T30936] veth0_vlan: entered promiscuous mode [ 2050.104478][T30936] veth1_vlan: entered promiscuous mode [ 2050.364931][T30936] veth0_macvtap: entered promiscuous mode [ 2050.443540][T30936] veth1_macvtap: entered promiscuous mode [ 2050.486074][T31335] KVM: debugfs: duplicate directory 31335-5 [ 2050.531307][T31338] bridge11: entered promiscuous mode [ 2050.536616][T31338] bridge11: entered allmulticast mode [ 2050.543300][T31338] team0: Port device bridge11 added [ 2050.664501][T30936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2050.752361][T30936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2050.809861][T30936] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2050.859754][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2050.859789][ T30] audit: type=1400 audit(2050.814:3282): avc: denied { create } for pid=31342 comm="syz.2.6159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2050.893648][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6160'. [ 2050.909083][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6160'. [ 2050.926550][T30936] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2051.001251][T30936] wireguard: wg0: Could not create IPv4 socket [ 2051.013252][T30936] wireguard: wg1: Could not create IPv4 socket [ 2051.022937][T30936] wireguard: wg2: Could not create IPv4 socket [ 2051.243725][T31362] bridge14: entered promiscuous mode [ 2051.249081][T31362] bridge14: entered allmulticast mode [ 2051.255747][T31362] team0: Port device bridge14 added [ 2051.519893][T31362] bridge0: port 1(team0) entered blocking state [ 2051.526409][T31362] bridge0: port 1(team0) entered disabled state [ 2052.862370][ T30] audit: type=1400 audit(2052.804:3283): avc: denied { read write } for pid=31377 comm="syz.4.6174" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2052.961335][ T30] audit: type=1400 audit(2052.804:3284): avc: denied { open } for pid=31377 comm="syz.4.6174" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2053.075906][ T30] audit: type=1326 audit(2052.884:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.2.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb201b8f6c9 code=0x7ffc0000 [ 2053.075954][ T30] audit: type=1326 audit(2052.894:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.2.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb201b8f6c9 code=0x7ffc0000 [ 2053.075994][ T30] audit: type=1326 audit(2052.894:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.2.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb201b8f6c9 code=0x7ffc0000 [ 2053.076039][ T30] audit: type=1326 audit(2052.894:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.2.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb201b8f6c9 code=0x7ffc0000 [ 2053.076078][ T30] audit: type=1326 audit(2052.894:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.2.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb201b8f6c9 code=0x7ffc0000 [ 2053.076117][ T30] audit: type=1326 audit(2052.894:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.2.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb201b8f6c9 code=0x7ffc0000 [ 2053.076156][ T30] audit: type=1326 audit(2052.894:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.2.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb201b8f6c9 code=0x7ffc0000 [ 2053.225571][ C1] vkms_vblank_simulate: vblank timer overrun [ 2053.494929][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2053.497141][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2053.504503][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2053.512914][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2053.513889][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2053.523177][T31404] Failed to initialize the IGMP autojoin socket (err -2) [ 2054.977222][T31431] overlayfs: failed to get inode (-116) [ 2054.990943][T31431] overlayfs: failed to get inode (-116) [ 2055.581637][T30940] Bluetooth: hci3: command tx timeout [ 2055.705932][T31404] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 2055.732972][T31404] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 2055.755448][T31404] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 2055.779043][T31404] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 2056.101325][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2056.101341][ T30] audit: type=1326 audit(2056.074:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.197922][ T30] audit: type=1326 audit(2056.104:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.220937][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.276193][ T30] audit: type=1326 audit(2056.114:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.337306][ T30] audit: type=1326 audit(2056.114:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.360261][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.452166][ T30] audit: type=1326 audit(2056.114:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.475147][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.573947][ T30] audit: type=1326 audit(2056.114:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.675718][ T30] audit: type=1326 audit(2056.114:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.715822][T31503] netlink: 'syz.0.6208': attribute type 4 has an invalid length. [ 2056.794710][ T30] audit: type=1326 audit(2056.114:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.797909][T31221] lo speed is unknown, defaulting to 1000 [ 2056.872022][ T30] audit: type=1326 audit(2056.114:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2056.913319][T31221] sz1: Port: 1 Link DOWN [ 2056.943490][ T10] lo speed is unknown, defaulting to 1000 [ 2056.988963][ T30] audit: type=1326 audit(2056.114:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31475 comm="syz.0.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x7ffc0000 [ 2057.026337][ C1] vkms_vblank_simulate: vblank timer overrun [ 2057.142205][T31404] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2057.196979][T31404] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2057.199104][T31404] wireguard: wg0: Could not create IPv4 socket [ 2057.206004][T31404] wireguard: wg1: Could not create IPv4 socket [ 2057.207902][T31404] wireguard: wg2: Could not create IPv4 socket [ 2057.337901][T31520] overlayfs: failed to clone upperpath [ 2057.628181][T31525] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6213'. [ 2060.716940][T31611] netlink: 'syz.2.6228': attribute type 10 has an invalid length. [ 2060.725104][T31611] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6228'. [ 2061.506557][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2061.520765][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2061.536566][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2061.548918][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2061.557993][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2061.600953][T31641] Failed to initialize the IGMP autojoin socket (err -2) [ 2062.892513][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2062.892529][ T30] audit: type=1400 audit(2062.864:3343): avc: denied { read } for pid=31675 comm="syz.4.6240" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2062.924522][ T30] audit: type=1400 audit(2062.894:3344): avc: denied { open } for pid=31675 comm="syz.4.6240" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2063.583843][T30940] Bluetooth: hci3: command tx timeout [ 2064.508078][T31641] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 2064.662697][T31641] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 2064.806663][T31641] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 2064.852403][T31641] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 2064.922461][T31714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2064.992315][T31712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2065.010509][T31711] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2065.612772][T31739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6251'. [ 2065.662434][T30940] Bluetooth: hci3: command tx timeout [ 2066.618628][T31767] syzkaller0: entered promiscuous mode [ 2066.626224][T31767] syzkaller0: entered allmulticast mode [ 2066.647168][T31641] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2066.697236][T31641] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2066.838540][T31641] wireguard: wg0: Could not create IPv4 socket [ 2066.847230][T31641] wireguard: wg1: Could not create IPv4 socket [ 2066.856172][T31641] wireguard: wg2: Could not create IPv4 socket [ 2066.957277][T31782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6262'. [ 2068.118769][T31812] overlayfs: failed to clone upperpath [ 2068.278728][T31817] futex_wake_op: syz.2.6272 tries to shift op by -1; fix this program [ 2068.323139][T31817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6272'. [ 2068.740578][T31840] overlayfs: failed to clone upperpath [ 2068.829456][T31842] tipc: Enabled bearer , priority 0 [ 2068.949268][T31836] tipc: Resetting bearer [ 2070.679899][ T30] audit: type=1400 audit(2070.604:3345): avc: denied { ioctl } for pid=31869 comm="syz.4.6282" path="socket:[97360]" dev="sockfs" ino=97360 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2073.671053][T31836] tipc: Disabling bearer [ 2073.736585][T31881] sch_tbf: burst 14 is lower than device lo mtu (1550) ! [ 2073.890041][T31960] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6290'. [ 2074.421523][T31967] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2075.362229][T31989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6295'. [ 2075.742999][ T30] audit: type=1804 audit(2075.714:3346): pid=31984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.6293" name="/newroot/1175/file1" dev="fuse" ino=1 res=1 errno=0 [ 2076.279762][ T30] audit: type=1800 audit(2075.714:3347): pid=31984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.6293" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2076.475877][T32006] syzkaller0: entered promiscuous mode [ 2076.503683][T32006] syzkaller0: entered allmulticast mode [ 2076.636969][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2076.655829][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2076.667040][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2076.679430][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2076.697295][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2076.757707][T32019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6303'. [ 2076.789076][T32013] Failed to initialize the IGMP autojoin socket (err -2) [ 2077.713814][T21547] block nbd0: Possible stuck request ffff888026690000: control (read@0,1024B). Runtime 30 seconds [ 2077.729465][T21547] block nbd0: Possible stuck request ffff8880266901c0: control (read@1024,1024B). Runtime 30 seconds [ 2077.782718][T21547] block nbd0: Possible stuck request ffff888026690380: control (read@2048,1024B). Runtime 30 seconds [ 2077.794875][T21547] block nbd0: Possible stuck request ffff888026690540: control (read@3072,1024B). Runtime 30 seconds [ 2078.779669][T30940] Bluetooth: hci3: command tx timeout [ 2078.855400][T32061] netlink: 'syz.2.6309': attribute type 1 has an invalid length. [ 2079.868369][T32013] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 2079.913975][T32113] syzkaller0: entered promiscuous mode [ 2079.919731][T32113] syzkaller0: entered allmulticast mode [ 2079.931290][T32013] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 2079.982526][T32013] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 2080.002474][T32115] tipc: Enabled bearer , priority 0 [ 2080.012537][T32013] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 2080.859874][T30940] Bluetooth: hci3: command tx timeout [ 2080.873909][ T30] audit: type=1400 audit(2080.834:3348): avc: denied { create } for pid=32120 comm="syz.4.6325" name="#58" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2081.024987][ T30] audit: type=1400 audit(2080.884:3349): avc: denied { link } for pid=32120 comm="syz.4.6325" name="#58" dev="tmpfs" ino=5931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2081.047457][ T30] audit: type=1400 audit(2080.884:3350): avc: denied { rename } for pid=32120 comm="syz.4.6325" name="#59" dev="tmpfs" ino=5931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2081.873021][T32154] overlayfs: failed to clone upperpath [ 2082.949673][T30940] Bluetooth: hci3: command tx timeout [ 2083.582724][T32013] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2083.763877][T32013] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2083.869357][T32215] vlan2: entered allmulticast mode [ 2083.921359][T32013] wireguard: wg0: Could not create IPv4 socket [ 2083.939365][T32013] wireguard: wg1: Could not create IPv4 socket [ 2084.002413][T32013] wireguard: wg2: Could not create IPv4 socket [ 2085.754947][ T30] audit: type=1400 audit(2085.714:3351): avc: denied { create } for pid=32257 comm="syz.0.6353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2085.775057][ T30] audit: type=1326 audit(2085.724:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32257 comm="syz.0.6353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02b2d8f6c9 code=0x0 [ 2086.684367][T32312] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2086.690932][T32312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2086.741382][T32312] vhci_hcd vhci_hcd.0: Device attached [ 2087.178236][ T30] audit: type=1400 audit(2087.134:3353): avc: denied { connect } for pid=32308 comm="syz.2.6359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2087.504433][T31221] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 2087.985781][ T30] audit: type=1400 audit(2087.954:3354): avc: denied { create } for pid=32341 comm="syz.4.6363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2088.025292][T32340] netlink: 'syz.3.6362': attribute type 3 has an invalid length. [ 2088.033495][T32340] netlink: 'syz.3.6362': attribute type 3 has an invalid length. [ 2088.428555][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2088.649317][ T30] audit: type=1400 audit(2088.534:3355): avc: denied { execute_no_trans } for pid=32353 comm="syz.3.6366" path="/1498/file0" dev="tmpfs" ino=7944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2088.801070][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2088.813572][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2088.825181][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2088.833193][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2088.872499][T32362] Failed to initialize the IGMP autojoin socket (err -2) [ 2089.367485][ T30] audit: type=1400 audit(2089.324:3356): avc: denied { kexec_image_load } for pid=32375 comm="syz.3.6368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2090.011939][T32314] vhci_hcd: connection reset by peer [ 2090.024942][T30908] vhci_hcd: stop threads [ 2090.143434][T30908] vhci_hcd: release socket [ 2090.148257][T30908] vhci_hcd: disconnect device [ 2090.349379][ T30] audit: type=1400 audit(2090.284:3357): avc: denied { mount } for pid=32390 comm="syz.2.6370" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2090.441722][ T30] audit: type=1400 audit(2090.394:3358): avc: denied { write } for pid=32390 comm="syz.2.6370" path="socket:[99335]" dev="sockfs" ino=99335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2090.864881][T32362] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 2090.921580][T32362] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 2090.940153][ T5822] Bluetooth: hci3: command tx timeout [ 2090.963051][T32362] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 2091.466222][T32362] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 2092.328117][T32421] tipc: Enabling of bearer rejected, failed to enable media [ 2092.609793][T31221] vhci_hcd: vhci_device speed not set [ 2093.019898][ T5822] Bluetooth: hci3: command tx timeout [ 2094.337639][T32362] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2094.562025][T32362] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2094.632537][T32476] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 2094.640948][T32476] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 2094.648450][T32476] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 2094.720352][T32362] wireguard: wg0: Could not create IPv4 socket [ 2094.728936][T32362] wireguard: wg1: Could not create IPv4 socket [ 2094.741799][T32362] wireguard: wg2: Could not create IPv4 socket [ 2094.763893][T32476] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 2095.273403][ T5822] Bluetooth: hci3: command tx timeout [ 2096.971403][ T30] audit: type=1400 audit(2096.584:3359): avc: denied { wake_alarm } for pid=32508 comm="syz.3.6391" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2097.101823][T32517] netlink: 'syz.0.6395': attribute type 10 has an invalid length. [ 2097.125919][T32517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6395'. [ 2097.170006][ T30] audit: type=1400 audit(2097.134:3360): avc: denied { setopt } for pid=32521 comm="syz.2.6394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2097.259265][T32522] netlink: 'syz.2.6394': attribute type 1 has an invalid length. [ 2097.268599][T32517] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2097.339998][T32517] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 2097.373971][T32517] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2097.424083][T32522] bond5: entered promiscuous mode [ 2097.435766][T32522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2098.463700][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.548419][T32555] bridge15: entered promiscuous mode [ 2098.553839][T32555] bridge15: entered allmulticast mode [ 2098.561083][T32555] team0: Port device bridge15 added [ 2098.573585][T32555] bridge0: port 1(team0) entered blocking state [ 2098.579918][T32555] bridge0: port 1(team0) entered disabled state [ 2100.533635][T30940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2100.544760][T30940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2100.554267][T30940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2100.562244][T30940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2100.589813][T30940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2100.613388][T32603] Failed to initialize the IGMP autojoin socket (err -2) [ 2102.059422][T32650] vlan2: entered allmulticast mode [ 2102.621552][ T5822] Bluetooth: hci3: command tx timeout [ 2103.002326][T32603] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 2103.114723][T32603] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 2103.183710][T32603] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 2103.290791][T32603] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 2103.470077][T32678] vlan2: entered allmulticast mode [ 2104.699638][ T5822] Bluetooth: hci3: command tx timeout [ 2106.114410][ T30] audit: type=1400 audit(2106.074:3361): avc: denied { create } for pid=32727 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2106.300619][T32603] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2106.336777][T32603] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2106.388011][T32603] wireguard: wg0: Could not create IPv4 socket [ 2106.417650][T32603] wireguard: wg1: Could not create IPv4 socket [ 2106.446886][T32603] wireguard: wg2: Could not create IPv4 socket [ 2108.063708][T21547] block nbd0: Possible stuck request ffff888026690000: control (read@0,1024B). Runtime 60 seconds [ 2108.074424][T21547] block nbd0: Possible stuck request ffff8880266901c0: control (read@1024,1024B). Runtime 60 seconds [ 2108.085330][T21547] block nbd0: Possible stuck request ffff888026690380: control (read@2048,1024B). Runtime 60 seconds [ 2108.096186][T21547] block nbd0: Possible stuck request ffff888026690540: control (read@3072,1024B). Runtime 60 seconds [ 2108.648333][ T30] audit: type=1400 audit(2108.614:3362): avc: denied { write } for pid=311 comm="syz.4.6429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2109.004296][ T328] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.6432'. [ 2111.928524][T30940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2111.940004][T30940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2111.965922][T30940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2112.099881][T30940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2112.118854][T30940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2112.163470][ T410] Failed to initialize the IGMP autojoin socket (err -2) [ 2112.315072][ T30] audit: type=1400 audit(2112.144:3363): avc: denied { watch watch_reads } for pid=412 comm="syz.3.6440" path="pipe:[100613]" dev="pipefs" ino=100613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2112.686414][ T30] audit: type=1400 audit(2112.654:3364): avc: denied { ioctl } for pid=407 comm="syz.4.6439" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2112.973499][ T430] vlan2: entered allmulticast mode [ 2113.746445][T30940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2113.757628][T30940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2113.766811][T30940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2113.774816][T30940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2113.782499][T30940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2113.845284][ T445] Failed to initialize the IGMP autojoin socket (err -2) [ 2114.231528][ T5822] Bluetooth: hci3: command tx timeout [ 2114.393292][ T30] audit: type=1400 audit(2114.354:3365): avc: denied { relabelfrom } for pid=445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2114.469969][ T30] audit: type=1400 audit(2114.354:3366): avc: denied { relabelto } for pid=445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2114.780175][ T30] audit: type=1400 audit(2114.664:3367): avc: denied { getopt } for pid=463 comm="syz.3.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2116.310565][ T5822] Bluetooth: hci3: command tx timeout [ 2116.531974][ T410] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 2116.553410][ T410] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 2116.587657][ T410] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 2116.618737][ T410] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 2117.396129][ T503] Failed to initialize the IGMP autojoin socket (err -2) [ 2117.575653][T30940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2117.591470][T30940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2117.600624][T30940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2117.609257][T30940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2117.619435][T30940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2117.679926][ T512] Failed to initialize the IGMP autojoin socket (err -2) [ 2117.735714][ T520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6460'. [ 2117.768708][ T520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6460'. [ 2118.356796][ T544] bridge11: entered promiscuous mode [ 2118.356956][ T544] bridge11: entered allmulticast mode [ 2118.409674][ T544] team0: Port device bridge11 added [ 2118.464338][T30940] Bluetooth: hci3: command tx timeout [ 2118.676847][ T410] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2118.717430][ T544] bridge0: port 1(team0) entered blocking state [ 2118.740368][ T544] bridge0: port 1(team0) entered disabled state [ 2118.790900][ T544] team0: entered allmulticast mode [ 2118.919624][ T544] C: entered allmulticast mode [ 2118.926261][ T544] team_slave_1: entered allmulticast mode [ 2119.070677][ T544] team0: left allmulticast mode [ 2119.076777][ T544] C: left allmulticast mode [ 2119.091868][ T544] team_slave_1: left allmulticast mode [ 2119.099332][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2119.113005][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2119.121597][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2119.129351][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2119.147201][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2119.193929][ T410] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2120.150930][ T410] wireguard: wg0: Could not create IPv4 socket [ 2120.158218][ T410] wireguard: wg1: Could not create IPv4 socket [ 2120.242023][ T30] audit: type=1400 audit(2119.324:3368): avc: denied { mount } for pid=564 comm="syz.4.6467" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2120.295582][ T559] Failed to initialize the IGMP autojoin socket (err -2) [ 2120.307068][ T410] wireguard: wg2: Could not create IPv4 socket [ 2120.452943][ T30] audit: type=1400 audit(2120.424:3369): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2120.554532][T30940] Bluetooth: hci3: command tx timeout [ 2120.695205][ T30] audit: type=1400 audit(2120.644:3370): avc: denied { ioctl } for pid=576 comm="syz.4.6469" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2122.466545][ T600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2122.493473][ T603] futex_wake_op: syz.3.6474 tries to shift op by 32; fix this program [ 2122.955991][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2122.971777][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2122.992513][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2123.007118][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2123.014814][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2123.108305][ T622] Failed to initialize the IGMP autojoin socket (err -2) [ 2124.842124][ T622] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2124.864722][ T622] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2124.885071][ T622] wireguard: wg0: Could not create IPv4 socket [ 2124.893543][ T622] wireguard: wg1: Could not create IPv4 socket [ 2124.902503][ T622] wireguard: wg2: Could not create IPv4 socket [ 2125.472883][ T690] bridge12: entered promiscuous mode [ 2125.478304][ T690] bridge12: entered allmulticast mode [ 2125.494759][ T690] team0: Port device bridge12 added [ 2125.503348][ T692] bridge0: port 1(team0) entered blocking state [ 2125.511029][ T692] bridge0: port 1(team0) entered disabled state [ 2125.512414][ T692] team0: entered allmulticast mode [ 2125.512431][ T692] C: entered allmulticast mode [ 2125.512495][ T692] team_slave_1: entered allmulticast mode [ 2125.621904][ T692] team0: left allmulticast mode [ 2125.621922][ T692] C: left allmulticast mode [ 2125.621931][ T692] team_slave_1: left allmulticast mode [ 2125.626822][ T683] vlan2: entered allmulticast mode [ 2125.916476][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2125.927883][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2125.937617][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2125.947936][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2125.955890][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2126.003041][ T708] Failed to initialize the IGMP autojoin socket (err -2) [ 2127.062373][ T30] audit: type=1400 audit(2126.914:3371): avc: denied { create } for pid=729 comm="syz.4.6491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2127.738545][ T30] audit: type=1400 audit(2127.024:3372): avc: denied { connect } for pid=729 comm="syz.4.6491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2127.883921][ T30] audit: type=1400 audit(2127.434:3373): avc: denied { write } for pid=729 comm="syz.4.6491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2127.911519][ T728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6492'. [ 2127.980770][ T5822] Bluetooth: hci3: command tx timeout [ 2128.204495][ T744] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 2129.607932][ T30] audit: type=1400 audit(2129.574:3374): avc: denied { create } for pid=773 comm="syz.4.6499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2129.626830][ C1] vkms_vblank_simulate: vblank timer overrun [ 2130.082838][ T5822] Bluetooth: hci3: command tx timeout [ 2130.116771][ T30] audit: type=1400 audit(2130.084:3375): avc: denied { bind } for pid=777 comm="syz.2.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2131.734389][ T811] ptrace attach of "./syz-executor exec"[5808] was attempted by " [ 2132.140306][ T5822] Bluetooth: hci3: command tx timeout [ 2132.376868][ T5183] udevd[5183]: worker [31029] /devices/virtual/block/nbd0 is taking a long time [ 2134.309616][ T5822] Bluetooth: hci3: command tx timeout [ 2135.947355][ T708] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2135.960582][ T708] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2135.984009][ T708] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2136.005510][ T708] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2136.223696][ T880] tipc: Enabled bearer , priority 0 [ 2136.292654][ T880] syzkaller0: entered promiscuous mode [ 2136.310598][ T880] syzkaller0: entered allmulticast mode [ 2136.952294][ T880] tipc: Resetting bearer [ 2137.042242][ T876] tipc: Resetting bearer [ 2137.114261][T30940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2137.125209][T30940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2137.134300][T30940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2137.141896][T30940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2137.149128][T30940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2137.192382][ T876] tipc: Disabling bearer [ 2137.213145][ T893] Failed to initialize the IGMP autojoin socket (err -2) [ 2137.431480][ T901] tipc: Enabled bearer , priority 0 [ 2137.461272][ T901] syzkaller0: entered promiscuous mode [ 2137.496315][ T901] syzkaller0: entered allmulticast mode [ 2138.182029][T21547] block nbd0: Possible stuck request ffff888026690000: control (read@0,1024B). Runtime 90 seconds [ 2138.193034][T21547] block nbd0: Possible stuck request ffff8880266901c0: control (read@1024,1024B). Runtime 90 seconds [ 2138.204446][T21547] block nbd0: Possible stuck request ffff888026690380: control (read@2048,1024B). Runtime 90 seconds [ 2138.209635][ T899] tipc: Resetting bearer [ 2138.215756][T21547] block nbd0: Possible stuck request ffff888026690540: control (read@3072,1024B). Runtime 90 seconds [ 2138.418407][ T899] tipc: Disabling bearer [ 2138.546045][ T708] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2138.570493][ T708] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2138.589378][ T708] wireguard: wg0: Could not create IPv4 socket [ 2138.598761][ T708] wireguard: wg1: Could not create IPv4 socket [ 2138.607449][ T708] wireguard: wg2: Could not create IPv4 socket [ 2138.857346][ T955] syzkaller0: entered promiscuous mode [ 2138.863510][ T955] syzkaller0: entered allmulticast mode [ 2139.222815][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2139.235520][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2139.244821][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2139.276238][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2139.284058][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2139.310213][ T966] Failed to initialize the IGMP autojoin socket (err -2) [ 2140.263550][ T992] tipc: Enabled bearer , priority 0 [ 2140.743904][ T996] syzkaller0: entered promiscuous mode [ 2140.768324][ T996] syzkaller0: entered allmulticast mode [ 2140.816151][ T992] tipc: Resetting bearer [ 2140.839378][ T991] tipc: Resetting bearer [ 2140.857398][ T991] tipc: Disabling bearer [ 2141.669553][ T5822] Bluetooth: hci3: command tx timeout [ 2142.153750][ T1017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6529'. [ 2142.282190][ T1017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6529'. [ 2143.203710][ T30] audit: type=1400 audit(2143.174:3376): avc: denied { map } for pid=1024 comm="syz.2.6531" path="socket:[103594]" dev="sockfs" ino=103594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2143.741398][ T5822] Bluetooth: hci3: command tx timeout [ 2144.005635][ T30] audit: type=1400 audit(2143.954:3377): avc: denied { mount } for pid=1056 comm="syz.4.6534" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2144.089942][ T966] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2144.237370][ T966] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2144.269697][ T966] wireguard: wg0: Could not create IPv4 socket [ 2144.279850][ T966] wireguard: wg1: Could not create IPv4 socket [ 2144.290328][ T966] wireguard: wg2: Could not create IPv4 socket [ 2144.423034][ T30] audit: type=1326 audit(2144.394:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.2.6536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb201b8f6c9 code=0x0 [ 2144.536731][ T30] audit: type=1400 audit(2144.484:3379): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2145.980567][ T1132] 9pnet_fd: Insufficient options for proto=fd [ 2147.418583][T30940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2147.431211][T30940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2147.440227][T30940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2147.447896][T30940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2147.455724][T30940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2147.480595][ T1145] Failed to initialize the IGMP autojoin socket (err -2) [ 2149.123748][ T30] audit: type=1326 audit(2149.014:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.3.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36b78f6c9 code=0x7fc00000 [ 2149.169853][ T30] audit: type=1326 audit(2149.014:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.3.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd36b78f6c9 code=0x7fc00000 [ 2149.195057][ T30] audit: type=1326 audit(2149.014:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.3.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36b78f6c9 code=0x7fc00000 [ 2149.232183][ T30] audit: type=1326 audit(2149.014:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.3.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36b78f6c9 code=0x7fc00000 [ 2149.267051][ T30] audit: type=1326 audit(2149.014:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.3.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36b78f6c9 code=0x7fc00000 [ 2149.296321][ T30] audit: type=1326 audit(2149.014:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.3.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36b78f6c9 code=0x7fc00000 [ 2149.506457][T30940] Bluetooth: hci3: command tx timeout [ 2150.103225][ T1145] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2150.154016][ T1145] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2150.290393][ T1145] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2150.321492][ T1145] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2151.036693][ T30] audit: type=1400 audit(2150.994:3386): avc: denied { setopt } for pid=1237 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2151.281829][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2151.293673][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2151.364481][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2151.375228][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2151.388213][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2151.486830][ T1249] Failed to initialize the IGMP autojoin socket (err -2) [ 2151.579686][ T5822] Bluetooth: hci3: command tx timeout [ 2152.178123][ T1145] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2152.262756][ T1145] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2152.394387][ T1145] wireguard: wg0: Could not create IPv4 socket [ 2152.412715][ T1145] wireguard: wg1: Could not create IPv4 socket [ 2152.473221][ T1145] wireguard: wg2: Could not create IPv4 socket [ 2153.896239][ T1283] vlan2: entered allmulticast mode [ 2154.004198][T30940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2154.015318][T30940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2154.023693][T30940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2154.031737][T30940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2154.039551][T30940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2154.073399][ T1286] Failed to initialize the IGMP autojoin socket (err -2) [ 2154.525038][ T1310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2155.404937][ T1325] tipc: Enabling of bearer rejected, failed to enable media [ 2156.061191][T30940] Bluetooth: hci3: command tx timeout [ 2156.759327][ T1286] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2156.779023][ T1286] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2156.799962][ T1286] wireguard: wg0: Could not create IPv4 socket [ 2156.808202][ T1286] wireguard: wg1: Could not create IPv4 socket [ 2156.817040][ T1286] wireguard: wg2: Could not create IPv4 socket [ 2158.132090][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2158.145326][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2158.154169][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2158.192501][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2158.200892][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2158.306183][ T1385] Failed to initialize the IGMP autojoin socket (err -2) [ 2159.804964][ T30] audit: type=1400 audit(2159.754:3387): avc: denied { firmware_load } for pid=1399 comm="syz.3.6577" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 2159.903608][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.219581][T30940] Bluetooth: hci3: command tx timeout [ 2160.320781][ T1416] vlan2: entered allmulticast mode [ 2161.498070][ T1439] tipc: Enabled bearer , priority 0 [ 2161.540988][ T1439] syzkaller0: entered promiscuous mode [ 2161.546501][ T1439] syzkaller0: entered allmulticast mode [ 2161.622049][ T1439] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6586'. [ 2161.635542][ T1439] tipc: Resetting bearer [ 2161.674680][ T1438] tipc: Resetting bearer [ 2161.706093][ T1438] tipc: Disabling bearer [ 2162.303500][T30940] Bluetooth: hci3: command tx timeout [ 2162.607001][ T1385] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2162.631450][ T1385] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2162.658103][ T1385] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2162.699027][ T1385] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2163.169226][ T1385] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2163.196564][ T1385] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2163.216299][ T1385] wireguard: wg0: Could not create IPv4 socket [ 2163.229043][ T1385] wireguard: wg1: Could not create IPv4 socket [ 2163.237856][ T1385] wireguard: wg2: Could not create IPv4 socket [ 2163.476932][ T30] audit: type=1400 audit(2163.444:3388): avc: denied { write } for pid=1501 comm="syz.4.6592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2164.647353][ T1516] vlan2: entered allmulticast mode [ 2164.911270][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2164.920942][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2164.932908][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2164.942133][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2164.949654][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2165.058842][ T1526] Failed to initialize the IGMP autojoin socket (err -2) [ 2165.150205][ T1525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'. [ 2165.456614][ T1534] tipc: Enabled bearer , priority 0 [ 2165.477521][ T1534] syzkaller0: entered promiscuous mode [ 2165.486595][ T1534] syzkaller0: entered allmulticast mode [ 2165.728311][ T1539] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2165.796244][ T1534] tipc: Resetting bearer [ 2165.816618][ T1543] tipc: Enabling of bearer rejected, failed to enable media [ 2165.874045][ T1533] tipc: Resetting bearer [ 2165.932960][ T1533] tipc: Disabling bearer [ 2166.399807][ T30] audit: type=1400 audit(2166.284:3389): avc: denied { mount } for pid=1548 comm="syz.2.6600" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2167.299996][T30940] Bluetooth: hci3: command tx timeout [ 2168.746055][T21547] block nbd0: Possible stuck request ffff888026690000: control (read@0,1024B). Runtime 120 seconds [ 2168.756880][T21547] block nbd0: Possible stuck request ffff8880266901c0: control (read@1024,1024B). Runtime 120 seconds [ 2168.767949][T21547] block nbd0: Possible stuck request ffff888026690380: control (read@2048,1024B). Runtime 120 seconds [ 2168.782798][T21547] block nbd0: Possible stuck request ffff888026690540: control (read@3072,1024B). Runtime 120 seconds [ 2169.385812][T30940] Bluetooth: hci3: command tx timeout [ 2170.715781][ T30] audit: type=1800 audit(2170.614:3390): pid=1611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6610" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 errno=0 [ 2171.419765][T30940] Bluetooth: hci3: command tx timeout [ 2171.488106][ T1618] bridge13: entered promiscuous mode [ 2171.498038][ T1618] bridge13: entered allmulticast mode [ 2171.530143][ T1618] team0: Port device bridge13 added [ 2171.537887][ T1619] bridge0: port 1(team0) entered blocking state [ 2171.545307][ T1619] bridge0: port 1(team0) entered disabled state [ 2171.552227][ T1619] team0: entered allmulticast mode [ 2171.557382][ T1619] C: entered allmulticast mode [ 2171.562400][ T1619] team_slave_1: entered allmulticast mode [ 2171.620556][ T1619] team0: left allmulticast mode [ 2171.646861][ T1619] C: left allmulticast mode [ 2171.655118][ T1619] team_slave_1: left allmulticast mode [ 2173.009394][ T1526] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2173.028465][ T1526] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2173.046764][ T1526] wireguard: wg0: Could not create IPv4 socket [ 2173.055330][ T1526] wireguard: wg1: Could not create IPv4 socket [ 2173.064301][ T1526] wireguard: wg2: Could not create IPv4 socket [ 2173.797244][ T1695] /dev/nullb0: Can't lookup blockdev [ 2174.626264][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2174.637899][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2174.647188][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2174.655195][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2174.665532][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2174.694565][ T1711] Failed to initialize the IGMP autojoin socket (err -2) [ 2176.711506][ T5822] Bluetooth: hci3: command tx timeout [ 2177.025593][ T30] audit: type=1400 audit(2176.994:3391): avc: denied { connect } for pid=1745 comm="syz.2.6622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2178.779691][ T5822] Bluetooth: hci3: command tx timeout [ 2178.911872][ T1711] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2178.925147][ T1711] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2178.962667][ T1711] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2178.986591][ T1711] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2180.293606][T30940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2180.303007][ T1711] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2180.361251][T30940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2180.379145][T30940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2180.387317][T30940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2180.395416][T17439] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2180.429410][ T1711] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2180.520837][ T1711] wireguard: wg0: Could not create IPv4 socket [ 2180.649407][ T1711] wireguard: wg1: Could not create IPv4 socket [ 2180.684724][ T1812] Failed to initialize the IGMP autojoin socket (err -2) [ 2180.694380][ T1711] wireguard: wg2: Could not create IPv4 socket [ 2180.860503][T17439] Bluetooth: hci3: command tx timeout [ 2181.684037][ T1828] Failed to initialize the IGMP autojoin socket (err -2) [ 2184.318202][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2184.366612][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2184.376254][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2184.387625][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2184.400046][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2184.419131][ T1917] Failed to initialize the IGMP autojoin socket (err -2) [ 2186.460392][ T5822] Bluetooth: hci3: command tx timeout [ 2186.474475][ T1917] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2186.495287][ T1917] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2186.515313][ T1917] wireguard: wg0: Could not create IPv4 socket [ 2186.523944][ T1917] wireguard: wg1: Could not create IPv4 socket [ 2186.533290][ T1917] wireguard: wg2: Could not create IPv4 socket [ 2186.879668][ T30] audit: type=1400 audit(2186.844:3392): avc: denied { ioctl } for pid=1984 comm="syz.4.6640" path="socket:[109280]" dev="sockfs" ino=109280 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2188.592654][ T2002] netlink: 360 bytes leftover after parsing attributes in process `syz.4.6640'. [ 2188.897684][T17439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2188.908573][T17439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2188.927581][T17439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2188.936310][T17439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2188.945167][T17439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2188.987037][ T2007] Failed to initialize the IGMP autojoin socket (err -2) [ 2191.023895][ T5822] Bluetooth: hci3: command tx timeout [ 2192.032307][ T30] audit: type=1400 audit(2192.004:3393): avc: denied { read } for pid=2057 comm="syz.4.6652" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2192.193905][ T30] audit: type=1400 audit(2192.034:3394): avc: denied { open } for pid=2057 comm="syz.4.6652" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2192.255690][ T2070] netlink: 'syz.3.6654': attribute type 10 has an invalid length. [ 2192.283285][ T2070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6654'. [ 2193.099792][ T5822] Bluetooth: hci3: command tx timeout [ 2193.272787][ T2096] ptrace attach of "./syz-executor exec"[5808] was attempted by " \x09\x09\x1bD\x09\x098S\x0d=\x0720l\x09\x0a\x0a\x0a3aK$\x0d[\x0a~R xpR<\x1b\x1b[1\x07\x0d\x07J\x096;x\x0da X\x07\x22r'gW¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 u'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻ /AnV\x1b1bBk~}$Qd[\x0cavi1N/pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?|ea\x0c !SR /ugy\x09PpA`B\x0cVdy!Mۈ2Э{F5_`Πw [ 2193.449299][ T2101] Failed to initialize the IGMP autojoin socket (err -2) [ 2195.179718][ T5822] Bluetooth: hci3: command tx timeout [ 2195.296324][ T2007] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2195.309888][ T2007] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2195.323880][ T2007] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2195.334844][ T2007] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2195.872085][ T2007] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2195.894041][ T2007] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2195.914719][ T2007] wireguard: wg0: Could not create IPv4 socket [ 2195.923516][ T2007] wireguard: wg1: Could not create IPv4 socket [ 2195.932758][ T2007] wireguard: wg2: Could not create IPv4 socket [ 2196.950847][ T2198] comedi comedi3: board detection failed [ 2197.058824][ T30] audit: type=1400 audit(2196.914:3395): avc: denied { append } for pid=2189 comm="syz.4.6669" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2197.351234][ T2202] 9pnet_fd: Insufficient options for proto=fd [ 2197.359604][ T30] audit: type=1400 audit(2197.324:3396): avc: denied { mounton } for pid=2201 comm=272C7B7D24AC267E3A2E2D25252E path="/1610/file0" dev="tmpfs" ino=8517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2197.892192][T17439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2197.903792][T17439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2197.919563][T17439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2197.936241][T17439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2197.947482][T17439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2198.498001][ T2210] Failed to initialize the IGMP autojoin socket (err -2) [ 2199.566084][T21547] block nbd0: Possible stuck request ffff888026690000: control (read@0,1024B). Runtime 150 seconds [ 2199.576874][T21547] block nbd0: Possible stuck request ffff8880266901c0: control (read@1024,1024B). Runtime 150 seconds [ 2199.590589][T21547] block nbd0: Possible stuck request ffff888026690380: control (read@2048,1024B). Runtime 150 seconds [ 2199.601655][T21547] block nbd0: Possible stuck request ffff888026690540: control (read@3072,1024B). Runtime 150 seconds [ 2200.612706][T17439] Bluetooth: hci3: command tx timeout [ 2200.859606][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2202.729567][T17439] Bluetooth: hci3: command tx timeout [ 2203.535668][ T2279] overlayfs: failed to clone upperpath [ 2204.215894][ T2290] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6688'. [ 2204.779785][T17439] Bluetooth: hci3: command tx timeout [ 2205.022942][ T2303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6691'. [ 2206.400793][ T2210] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2206.422923][ T2210] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2206.441720][ T2210] wireguard: wg0: Could not create IPv4 socket [ 2206.450753][ T2210] wireguard: wg1: Could not create IPv4 socket [ 2206.459009][ T2210] wireguard: wg2: Could not create IPv4 socket [ 2208.394075][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2208.411472][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2208.420011][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2208.427868][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2208.435369][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2208.456032][ T2432] Failed to initialize the IGMP autojoin socket (err -2) [ 2210.144068][ T2432] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2210.162509][ T2432] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2210.173774][ T2432] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2210.193481][ T2432] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2210.549793][ T5822] Bluetooth: hci3: command tx timeout [ 2210.636887][ T2432] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2210.657650][ T2432] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2210.680707][ T2432] wireguard: wg0: Could not create IPv4 socket [ 2210.688905][ T2432] wireguard: wg1: Could not create IPv4 socket [ 2210.698149][ T2432] wireguard: wg2: Could not create IPv4 socket [ 2212.758182][T17439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2212.767767][T17439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2212.776561][T17439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2212.784426][T17439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2212.792098][T17439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2213.284436][ T2575] Failed to initialize the IGMP autojoin socket (err -2) [ 2215.259600][T17439] Bluetooth: hci3: command tx timeout [ 2215.508445][ T2638] vlan2: entered allmulticast mode [ 2217.353335][T17439] Bluetooth: hci3: command tx timeout [ 2217.585548][ T2687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6724'. [ 2217.594564][ T2687] netlink: 440 bytes leftover after parsing attributes in process `syz.2.6724'. [ 2217.937175][ T2575] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2217.958285][ T2575] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2217.977053][ T2575] wireguard: wg0: Could not create IPv4 socket [ 2217.987091][ T2575] wireguard: wg1: Could not create IPv4 socket [ 2217.997115][ T2575] wireguard: wg2: Could not create IPv4 socket [ 2219.447858][ T2792] bridge14: entered promiscuous mode [ 2219.453288][ T2792] bridge14: entered allmulticast mode [ 2219.887523][ T2796] PKCS7: Unknown OID: [5] (bad) [ 2219.892533][ T2796] PKCS7: Only support pkcs7_signedData type [ 2219.898602][ T30] audit: type=1400 audit(2219.854:3397): avc: denied { write } for pid=2782 comm="syz.2.6725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2220.954029][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2220.969514][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2220.980175][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2220.987823][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2220.997581][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2221.022573][ T2823] Failed to initialize the IGMP autojoin socket (err -2) [ 2221.918457][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.331806][ T2840] vlan2: entered allmulticast mode [ 2223.020172][ T5822] Bluetooth: hci3: command tx timeout [ 2223.587926][ T2823] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2223.604717][ T2823] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2223.615449][ T2823] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2223.635421][ T2823] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2224.076532][ T2823] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2224.102434][ T2823] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2224.121829][ T2823] wireguard: wg0: Could not create IPv4 socket [ 2224.131760][ T2823] wireguard: wg1: Could not create IPv4 socket [ 2224.142422][ T2823] wireguard: wg2: Could not create IPv4 socket [ 2224.596292][ T2932] ptrace attach of "./syz-executor exec"[5807] was attempted by " \x09\x09\x1bD\x09\x098S\x0d=\x0720l\x09\x0a\x0a\x0a3aK$\x0d[\x0a~R xpR<\x1b\x1b[1\x07\x0d\x07J\x096;x\x0da X\x07\x22r'gW¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 u'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻ /AnV\x1b1bBk~}$Qd[\x0cavi1N/pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?|ea\x0c !SR /ugy\x09PpA`B\x0cVdy!Mۈ2Э{F5_`Πw [ 2224.885560][T17439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2225.118037][T17439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2225.128324][T17439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2225.141361][T17439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2225.159443][T17439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2225.334132][ T2940] Failed to initialize the IGMP autojoin socket (err -2) [ 2225.804451][ T2950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6740'. [ 2227.271172][T17439] Bluetooth: hci3: command tx timeout [ 2227.518250][ T2961] vlan2: entered allmulticast mode [ 2227.783642][ T2981] vlan2: entered allmulticast mode [ 2229.409566][T17439] Bluetooth: hci3: command tx timeout [ 2230.493897][T21547] block nbd0: Possible stuck request ffff888026690000: control (read@0,1024B). Runtime 180 seconds [ 2230.505557][T21547] block nbd0: Possible stuck request ffff8880266901c0: control (read@1024,1024B). Runtime 180 seconds [ 2230.674699][T21547] block nbd0: Possible stuck request ffff888026690380: control (read@2048,1024B). Runtime 180 seconds [ 2230.686515][T21547] block nbd0: Possible stuck request ffff888026690540: control (read@3072,1024B). Runtime 180 seconds [ 2231.519567][T17439] Bluetooth: hci3: command tx timeout [ 2232.031777][ T5183] udevd[5183]: worker [31029] /devices/virtual/block/nbd0 timeout; kill it [ 2232.226106][ T3030] overlayfs: failed to clone upperpath [ 2232.590818][ T5183] udevd[5183]: seq 22967 '/devices/virtual/block/nbd0' killed [ 2233.454192][ T2940] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2233.540136][ T2940] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2233.585470][T17439] Bluetooth: hci3: command tx timeout [ 2233.586328][ T2940] wireguard: wg0: Could not create IPv4 socket [ 2233.811189][ T2940] wireguard: wg1: Could not create IPv4 socket [ 2233.852555][ T2940] wireguard: wg2: Could not create IPv4 socket [ 2236.748419][ T3154] vlan2: entered allmulticast mode [ 2237.517374][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2237.528529][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2237.536814][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2237.544359][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2237.551792][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2237.590785][ T3171] Failed to initialize the IGMP autojoin socket (err -2) [ 2239.587984][ T5822] Bluetooth: hci3: command tx timeout [ 2239.909240][ T3171] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 2239.925241][ T3171] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 2239.941169][ T3171] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 2239.960700][ T3171] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 2240.389329][ T3171] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2240.409320][ T3171] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2240.427552][ T3171] wireguard: wg0: Could not create IPv4 socket [ 2240.436945][ T3171] wireguard: wg1: Could not create IPv4 socket [ 2240.445410][ T3171] wireguard: wg2: Could not create IPv4 socket [ 2241.000910][ T3253] siw: device registration error -23 [ 2241.348443][ T30] audit: type=1400 audit(2240.964:3398): avc: denied { write } for pid=3245 comm="syz.4.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2241.492945][T17439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2241.503590][T17439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2241.511936][T17439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2241.520069][T17439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2242.062541][T17439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2242.098517][ T3259] Failed to initialize the IGMP autojoin socket (err -2) [ 2244.139786][T17439] Bluetooth: hci3: command tx timeout [ 2244.973958][ T30] audit: type=1400 audit(2244.474:3399): avc: denied { create } for pid=3307 comm="syz.4.6779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2246.219594][T17439] Bluetooth: hci3: command tx timeout [ 2246.441874][ T3382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6787'. [ 2247.290952][ T31] INFO: task syz.0.6395:32520 blocked for more than 143 seconds. [ 2247.312653][ T31] Not tainted syzkaller #0 [ 2247.332836][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2247.376052][ T31] task:syz.0.6395 state:D stack:27480 pid:32520 tgid:32516 ppid:5818 task_flags:0x400140 flags:0x00080002 [ 2247.389732][ T31] Call Trace: [ 2247.393562][ T31] [ 2247.402409][ T31] __schedule+0x1190/0x5de0 [ 2247.412755][ T31] ? check_path.constprop.0+0x24/0x50 [ 2247.427736][ T31] ? __lock_acquire+0x622/0x1c90 [ 2247.442167][ T31] ? __pfx___schedule+0x10/0x10 [ 2247.489341][ T31] ? find_held_lock+0x2b/0x80 [ 2247.494716][ T31] ? schedule+0x2d7/0x3a0 [ 2247.499748][ T31] ? bdev_open+0xa2/0xe40 [ 2247.504537][ T31] schedule+0xe7/0x3a0 [ 2247.514062][ T31] schedule_preempt_disabled+0x13/0x30 [ 2247.520299][ T31] __mutex_lock+0x818/0x1060 [ 2247.525240][ T31] ? bdev_open+0xa2/0xe40 [ 2247.579779][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2247.584855][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 2247.618928][ T31] ? bdev_open+0xa2/0xe40 [ 2247.628652][ T31] bdev_open+0xa2/0xe40 [ 2247.639473][ T31] ? iput+0x35/0x40 [ 2247.643471][ T31] bdev_file_open_by_dev+0x182/0x210 [ 2247.648828][ T31] setup_bdev_super+0x39b/0x730 [ 2247.658986][ T31] get_tree_bdev_flags+0x363/0x620 [ 2247.669317][ T31] ? __pfx_vxfs_fill_super+0x10/0x10 [ 2247.684205][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 2247.690444][ T31] ? bpf_lsm_capable+0x9/0x10 [ 2247.695270][ T31] ? security_capable+0x7e/0x260 [ 2247.700664][ T31] vfs_get_tree+0x8e/0x340 [ 2247.705213][ T31] path_mount+0x7b9/0x23a0 [ 2247.710651][ T31] ? __pfx_path_mount+0x10/0x10 [ 2247.715611][ T31] ? putname+0x154/0x1a0 [ 2247.720686][ T31] ? putname+0x154/0x1a0 [ 2247.725112][ T31] ? putname+0x154/0x1a0 [ 2247.729729][ T31] ? __x64_sys_mount+0x293/0x310 [ 2247.734820][ T31] __x64_sys_mount+0x293/0x310 [ 2247.740518][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 2247.745948][ T31] do_syscall_64+0xcd/0xfa0 [ 2247.750995][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2247.756999][ T31] RIP: 0033:0x7f02b2d8f6c9 [ 2247.761933][ T31] RSP: 002b:00007f02b3c74038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2247.770818][ T31] RAX: ffffffffffffffda RBX: 00007f02b2fe6090 RCX: 00007f02b2d8f6c9 [ 2247.778884][ T31] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000200000000000 [ 2247.787328][ T31] RBP: 00007f02b2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2247.795846][ T31] R10: 00000000020080c4 R11: 0000000000000246 R12: 0000000000000000 [ 2247.804547][ T31] R13: 00007f02b2fe6128 R14: 00007f02b2fe6090 R15: 00007ffc9b45f8f8 [ 2247.813208][ T31] [ 2247.856282][ T31] [ 2247.856282][ T31] Showing all locks held in the system: [ 2247.874711][ T3259] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2247.904987][ T3259] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2247.931024][ T31] 1 lock held by rcu_preempt/16: [ 2247.936784][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2247.950170][ T31] 1 lock held by khungtaskd/31: [ 2247.951930][ T3259] wireguard: wg0: Could not create IPv4 socket [ 2247.955046][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2247.972408][ T31] 2 locks held by dhcpcd/5478: [ 2247.977194][ T31] #0: ffff88807b1516e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xa25/0xd30 [ 2247.988384][ T31] #1: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2247.991020][ T3259] wireguard: wg1: Could not create IPv4 socket [ 2247.998767][ T31] 2 locks held by getty/5577: [ 2248.019567][ T31] #0: ffff88803634d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2248.029832][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2248.055359][ T3259] wireguard: wg2: Could not create IPv4 socket [ 2248.055665][ T31] 3 locks held by kworker/1:0/19614: [ 2248.069088][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2248.080271][ T31] #1: ffffc9001b947d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2248.094126][ T31] #2: ffff88804e22e240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 2248.109140][ T31] 1 lock held by udevd/29249: [ 2248.116026][ T31] 1 lock held by udevd/31029: [ 2248.121212][ T31] #0: ffff888026556358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2248.130736][ T31] 3 locks held by kworker/0:3/31508: [ 2248.136087][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2248.147290][ T31] #1: ffffc90005ec7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2248.160062][ T31] #2: ffff8880793cd240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 2248.171494][ T31] 2 locks held by syz.0.6395/32520: [ 2248.176769][ T31] #0: ffff888081a500e0 (&type->s_umount_key#100/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 2248.187274][ T31] #1: ffff888026556358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 2248.196810][ T31] 1 lock held by syz-executor/3171: [ 2248.202445][ T31] #0: ffffffff8e3cfb80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 2248.212576][ T31] 1 lock held by syz-executor/3259: [ 2248.217848][ T31] #0: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 2248.229800][ T31] [ 2248.232193][ T31] ============================================= [ 2248.232193][ T31] [ 2248.243140][ T31] NMI backtrace for cpu 0 [ 2248.243153][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2248.243169][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2248.243177][ T31] Call Trace: [ 2248.243182][ T31] [ 2248.243188][ T31] dump_stack_lvl+0x116/0x1f0 [ 2248.243215][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2248.243231][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2248.243259][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2248.243281][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2248.243301][ T31] watchdog+0xf3f/0x1170 [ 2248.243325][ T31] ? rcu_is_watching+0x12/0xc0 [ 2248.243345][ T31] ? __pfx_watchdog+0x10/0x10 [ 2248.243362][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2248.243389][ T31] ? __kthread_parkme+0x19e/0x250 [ 2248.243415][ T31] ? __pfx_watchdog+0x10/0x10 [ 2248.243435][ T31] kthread+0x3c5/0x780 [ 2248.243452][ T31] ? __pfx_kthread+0x10/0x10 [ 2248.243469][ T31] ? rcu_is_watching+0x12/0xc0 [ 2248.243489][ T31] ? __pfx_kthread+0x10/0x10 [ 2248.243505][ T31] ret_from_fork+0x675/0x7d0 [ 2248.243519][ T31] ? __pfx_kthread+0x10/0x10 [ 2248.243536][ T31] ret_from_fork_asm+0x1a/0x30 [ 2248.243572][ T31] [ 2248.243584][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2248.299785][T17439] Bluetooth: hci3: command tx timeout [ 2248.303830][ C1] NMI backtrace for cpu 1 [ 2248.303842][ C1] CPU: 1 UID: 0 PID: 17439 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 2248.303859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2248.303868][ C1] Workqueue: hci3 hci_cmd_timeout [ 2248.303891][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 2248.303910][ C1] Code: 94 93 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 7d 33 3a 06 e8 f8 22 fc fc eb a2 e8 81 23 [ 2248.303924][ C1] RSP: 0018:ffffc9000ffe7648 EFLAGS: 00000002 [ 2248.303933][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 2248.303942][ C1] RDX: 00000000000003fd RSI: ffffffff852963f0 RDI: ffffffff9add8780 [ 2248.303951][ C1] RBP: ffffffff9add8740 R08: 0000000000000001 R09: 000000000000001f [ 2248.303959][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 2248.303967][ C1] R13: 0000000000000020 R14: fffffbfff35bb142 R15: dffffc0000000000 [ 2248.303976][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 2248.303992][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2248.304001][ C1] CR2: ffffffffffffffe8 CR3: 000000007668a000 CR4: 00000000003526f0 [ 2248.304010][ C1] Call Trace: [ 2248.304016][ C1] [ 2248.304022][ C1] wait_for_lsr+0x13a/0x210 [ 2248.304042][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 2248.304058][ C1] serial8250_console_write+0xf81/0x1890 [ 2248.304076][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 2248.304090][ C1] ? lock_acquire+0x179/0x350 [ 2248.304107][ C1] console_flush_all+0x801/0xc60 [ 2248.304126][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 2248.304143][ C1] ? __lock_acquire+0x622/0x1c90 [ 2248.304164][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2248.304182][ C1] console_unlock+0xd8/0x210 [ 2248.304197][ C1] ? __pfx_console_unlock+0x10/0x10 [ 2248.304216][ C1] vprintk_emit+0x3d7/0x680 [ 2248.304232][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 2248.304247][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 2248.304268][ C1] _printk+0xc7/0x100 [ 2248.304280][ C1] ? __pfx__printk+0x10/0x10 [ 2248.304292][ C1] ? register_lock_class+0x41/0x4c0 [ 2248.304304][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2248.304322][ C1] bt_err+0xe4/0x120 [ 2248.304339][ C1] ? __pfx_bt_err+0x10/0x10 [ 2248.304359][ C1] ? process_one_work+0x13d6/0x1b70 [ 2248.304373][ C1] hci_cmd_timeout+0x1ff/0x260 [ 2248.304392][ C1] process_one_work+0x9cf/0x1b70 [ 2248.304410][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2248.304427][ C1] ? assign_work+0x1a0/0x250 [ 2248.304440][ C1] worker_thread+0x6c8/0xf10 [ 2248.304458][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2248.304472][ C1] kthread+0x3c5/0x780 [ 2248.304485][ C1] ? __pfx_kthread+0x10/0x10 [ 2248.304503][ C1] ? rcu_is_watching+0x12/0xc0 [ 2248.304520][ C1] ? __pfx_kthread+0x10/0x10 [ 2248.304532][ C1] ret_from_fork+0x675/0x7d0 [ 2248.304544][ C1] ? __pfx_kthread+0x10/0x10 [ 2248.304557][ C1] ret_from_fork_asm+0x1a/0x30 [ 2248.304581][ C1]