last executing test programs: 1m15.187583047s ago: executing program 1 (id=2015): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc8, 0x54, 0x9b, 0x40, 0x2c7c, 0x30e, 0x8128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x18, 0xd4, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 1m13.014209673s ago: executing program 1 (id=2017): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="001700000000000018000a80140001800c00020000000000000000"], 0x40}}, 0x0) 19.70372695s ago: executing program 2 (id=2069): socket(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000ac0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="cdb6d1667f2c6f3c4df60ce5c47773c6", 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x6, @dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0x10}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000005000000000000000001000000000000000000a5b46ba285d4c0dba96bc1ae7b33c7308b5f88f51b0f7b54c05c06fb11d146afe4c79d039654ff5e9757f7e476f3556bdfd7e891ee88c704dd3d6fd7fbdbedeea7b935fdafaf2358324300a52c06845dacd688d81a2e5b1757e51ce9ebc795eda22fb0c64333db191900e7a60d28482f5b32d107ae07a187037f2c03d12398f75e2383d30d62b3ac2c"], 0x0, 0x42, 0x0, 0x1}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89b0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x35, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') r7 = dup3(r3, r6, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r9, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffff38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYRES16, @ANYBLOB="2fdb1e0e398e89bde74ea1aa988fe505e93b015e060d7c2a8a9ae568", @ANYRES32=r10, @ANYBLOB="534749e5939d6103b4c6e895247d00ac4e9f669ec802b17556ed6dcc4df36ccd272cc5af92685521e2967c00af002084fac8d9b2c6b50837d5905b0ea1e06e6f7b75aa0fb312fd4519a75f45f5230d0e39c4b605798be8e98ef5e80dbb93a26cc3ab11f178e5"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x4048000) 16.22049444s ago: executing program 2 (id=2075): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) 16.048625261s ago: executing program 2 (id=2077): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 15.961936488s ago: executing program 3 (id=2078): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) 10.895660065s ago: executing program 2 (id=2080): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 10.563365665s ago: executing program 3 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x5}]}, 0x24}}, 0x0) 10.509764648s ago: executing program 2 (id=2083): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) syz_emit_ethernet(0x68, &(0x7f00000006c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) listen(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000480)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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"/462], 0x58}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"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", 0x1056}}, 0x100) 10.188373321s ago: executing program 3 (id=2084): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 9.150952203s ago: executing program 0 (id=2087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 8.822234419s ago: executing program 0 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000003c0)=0x2880, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="680000001a000000000000000000000014000000000000000000000000000000000000bad4c9244e01440000803e000000280101a1d8e656b0590d68d0d76a4a4e38207c18b38cea3c9c700be24a70446c454baa6f0421a4707aa17d16574e0f"], 0x68}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003004d4cb91514fa8d8c"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1) ioperm(0xf636, 0xff, 0x5) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2200000037020000f082000000000000ffffffffffffffff", @ANYRES32=r0, @ANYBLOB="70a500005300a3fb695c500a422262b7bd6da8c3aeb37c2092bdd34726d164"], 0x22) setrlimit(0xc, &(0x7f0000000280)={0xd9, 0xfffffffffffffff8}) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r5) connect$ax25(r6, &(0x7f0000000440)={{0x3, @bcast, 0x8}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 8.679003167s ago: executing program 2 (id=2089): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 7.580927562s ago: executing program 0 (id=2090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000001d80)=0x6, 0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000f80)=[{&(0x7f0000000540)="e9", 0x1}, {0x0}], 0x2, 0xb0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x80, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = dup(0xffffffffffffffff) r7 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r7, 0x200004) read$FUSE(r6, 0x0, 0x0) sendfile(r5, r7, 0x0, 0x2) 7.426724818s ago: executing program 4 (id=2091): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x24, 0x10, 0x1, 0x2}, 0x24}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 6.559890139s ago: executing program 4 (id=2092): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000004180), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000070c0)={{}, {0x0, 0x3938700}}, 0x0) 6.382939857s ago: executing program 4 (id=2093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffffff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000a380)="f7709f77945ec10b4eecea480cce6641402373da5e6d7f24014f7acee96be0135b59ce90b463223252169e036a4daf3dae250a1e6de526211d43d9512ae526730f553268794994fd54868ec480d09862b687b463a8fc5058903593b9bb4d50879635cbf67a9e7d1110fa0e8ef89dbd2abdae33183737b8c0b907f5cc74ad6ab0383f8240e091417d2816317f40abb64224f616136f93d932f2223ef42fa3c3155d53075d3eb1db73beb32bc364e3fc246d3dcaca2dc91a634815412bae915cdb1a6da7884559403b545235541ddac97d7b1ea8135539ebcfac1edfa2fee8cf78bb46da7644a8f9e42ae06ca7a188b83fa537b0962a10411b67fc4d7dfe9e95cce2aef82e75f4680b8ff9976b6569523b72a86bd3a8c96f30e85812fe33a610c2be0a3c1063e2ee864c6e8bbf331f2768accfea78700a7321e4af2db46fd162457e439369da2217992b77502b9b958df27bc086369963793854d7f8b00c537de3216898b8f2c1dd925049eef1ab57bb6f63b2d88850b49b3c54d71f545afafa16bd2d06ae501344987623890fdf9ac04b179d2131070a34cf143697b6642bf5da67437aaf5e78e7e6be85e44ad7b265d78d2baf92ee5ccb0a452eb32fb3fdd1a41abf3a68086acd20458af55c086f77c30bbbce4c19542f92ab1e68393ffa58b140586b49761aacdf6aeb7682561f01e0869f503c4a161fd405046d3e6523bd4071c09b7516e4e784f4d11706f1c2eb170e735e563c43317a5a9afad28511163cdb63660beb699f7b8a7eaf57d48517974ffa766fe8deab0cfb11562b9c281bce2493d08c40a259e0325c52124e303064c6fbae2826355e531543863030fef484621a381a945b6ec7253e20047e7294bd069442f72672e6dfe1ca17d75d8c6b16c931438cec72e6ee53f3db89a10a38a93cc84c7393773461db5074b4f5060dd0a04a069a7a9b078856a3fa1786fc8dab621ba622acafd0781b523ea097283afb0c59222a316c6ddc0554bcaccc70288e524ed7719fc02a86283b57690a7320af028efbaedd5bd158a9dc9ea8e4f53c7da7566cdbdd4f4d9f01a9dfa6251a355e338efc8eee258add8731c7d22161482b7e3c8bc83f30482f9935fcc5974d9d0685b5fba3b07d7f85cc8fef18ac4e8e915b8476bb44d7384c996921ae40a4fdd2dd2a70ba17e1c2d6ec67b8f7b45568c105d52afa9c82bdc1dc7fd951b1e4fc1212bf29231d8e41ed4dacafec9a823a672dceeee0e4048b5620373c53ab8f3553c842a5a6d914f8334d6d8a4af785f418e6b4aab3965f94ca9d80a74a5a034fb6edd0322696aa1060d82c7b104983f8889026819ffdf3d45c604e53066b03dfae13fad499e3894120c10944eaf752989daee4e172decca9c2b324a817a7c787e6bc59fc2884e358a1a9b14b3704cabe374d23c002b8112be68f409302d3dad0a4c02105cb54c4350c24e6f3b7588bf1c28ae321eaebb930cf0c3b607acff20663eab8a593320c518eba8f9205350f11a9c1530115f7e00f2aa335c92e1305ffcfeac7cdecd6f1b6a33710ec77ce428484712d66bad137b6c8da5aa51d1b7196d981a14a40df8406b292f385cb149cfc0a86701566674e089b88487f34fdb0bf16ca94d9da4a837f15d5cf8f11d9c226844d3eb18d848420f344a3992772125319abb641ea56f03fc626f092f67a8b6716b29cf8585cf5fe25a35f5dab0e3e075ba3c84116fb6cbbf99a8153d179ffc1e64356f1fa0bca6823ebd8e1a176636962cff271cee5c5bafcb68fad4921e070c4ae08cd8fa0b94534f11e66403d129a5e8253bd3a9dc09a8189895819ff618532bf6743b17a243d515e63868bdf9287fd1bad0d525759953624c8e82debf88159b2c22945535d9379c911f89c7856be1438bd02df70c939b80741ddad245082a72556a2ab3c2390b84c17b6119103a0b8126dbc55e05b153ef9a12cc67f649c14160c698a7127b39fe88fb91d19b2a381c08114c6e3e6d3d42b77602c838c421a9a414f1eb182d0197ff67dcfb5d79404afbdf9c96f475a0d5afc9a4d7cdad458eed6b1de6c13b11c46004243db779e7ad6dbbf15e69ee34bd2524cf72e49a5352992a9251a86c3dc30d7d5fe61ae538928e8fdca0e04fdb5917523d8266b7b4f1679a5082e798f587c5ed9084c70965e94e12f643ab0191e606c2eb0c3359a2b8504f3bb2e721cfbcfdd90c31cde10992c9400273bbc45fe5ba34d7ede773036e2fd1fec1f001c495accdf8ff572de3eb2aeebad29acfe3d2b1448fd67368d0c37f8bfbbf09bafc8f99a44b187f4f443c82b21f66f722fb59f40ce0f9d83c52b9b3358a80e102b21795a1cfcb986c787ccbb9f9c96c2b66d2f7a94ef2c2a5b65d5c2970ba6f3107609f4a67432835c2ce1682d260f6826072a6b6d4b113a5b06311677ca01260f3567ff1ab6be13b455f93916906273c5430fcccb57e0d78224ebec422763ee3a6b94528749a7ee5f70c9036cf3a99a9c98abc0e8aec18733a0c7da76814f2ff741582a9d96eb798426065764fcf86e40b6490f545494b48749fa8d398c5938d6bc7dbe183deecb913ef4c61aef27ea6bb77c23af09c3dec453f01d8e0cf1a3df30d73d44c4e147d9ff2853cb05b1d9fcd2d80815016f65368c477f3e8b676ee1ef5b9154850f02951060f5335d7b8b1c395151b443130d27b4aa0cdd9c1badc38e1825cbaea22480e1d8a986b001a4464fea618707f43bdf7949f500f3f9293b7f7f28170d45eb3e9422d7a107d5dfab18b8e7a2cbc4b42a818384136a49a021721fe07dff4fb2f26e74ee6b5725166409d794c69a1a5b27cb6263c387b81612add3c9e9e509845843a6ffb2250d37c365e3f57f0ad6e908fab119211e7679b41c8e298f9e85558be25ec0a4e6c9aa3d523ef3771971bfd272fcb736d10fa98a87b78c532fcc322f5e24baa21f2a3c84a90ec9b546869400bad19dec3575ebc69c8e512210b81667ed3cede89d10ee5871a6fb166b2f5c96f079cd5bf97f41327930b210627106c4cb6d77e3793b808c425b8a4118bbaa2d1a1454b162cf9886ec17e215d12223a65348ab33185861ab1f3166a4a925d25a63def895a5b01deea11bcaf17c79d27a922834a32aa0f8676793c7257e44d3f7768de19292a385a7a4b3fc992abfb9f8f3ada57b83dc7955c0b2edef1a8214dd8ea2cc9679685137dd63f3918020e2e2f38602005a4a6e84422867b9160f65e92e053d0b58191eadcd5a8a69b18e3216ea63df3f31869c81de88fc75a1d9e15cbdf8d68ba50cd8dfa55259aa362c2615ccab13489844d5ed995383e334074f561a4a67e1060e64a818fc96135d34e604cabe3d9195cf1283725c7700e397ecb72fc8b36f38cd0830b19b439101e4b3839c48ddc95367bff87b888407a517f94fbe58a7033db1123c0a0074c730e34ce821e12f43d84d3b4f0310c6ecd8afe7779671d7b825bb3892825c762b86f0ffd182b6aafd477fadf0c7a931cb61e2b05fc11267bf0a9882e7c2f8e84d3480d9e4576cc03f0e1dbfbef9f66840ad37e76da3ff8a419730a0076de67e9b913f03f5b637287d981eafa1223feafb86bcff5b2ce987f6fa8386ee036a3f75fe014ef90b05a744e038c43766b5fd552e66b9b4996f774988d2a70fa0bf05fbc453cc4fd0ab642db1bc71e1b63919f3c49254f177306f9b00af5782c0633d68ecb85f93fc1afd8dee3dd1ca8b0d7ba0ea463de0b6e3e05c080f832e129cec16853923cf15f06d9a38e20a5a6fa5125d03c1b72680547eafd9fdf246af08dcb4d4d746577478fbc72d7a36bb4bd3b5ba4dc5e407babfcd64b8c413d7dd5433d6a4ee17d5b4835a74c81414a9397d73e15ae387f04a5012a37c88b226207aba933d68a67bcd38f5e0fb8b24c4434c3a0109deaef4f9ab1d230ea6a4acd6db0c3962d0de3bb64e33a29af8dcbf39d48a27c1649a66d4aecdce2db60c50bcec31677559369184608db197f2ebed81ca8fbeb9d2f8c486ec9839e765df69ea634f2815e75eac613febfa26012767c28eae207ed9315bf19c42de9602f44f45a9cb9913a67548787a30c9e56f3399ab281c537751a28d98392655a60ceb9f2515772d2f1d5d2843952312e2a59061b60f128def6795e0c8eb7b12a710c1afacc84f498a29d683d1949c17f3aeeb8b9a32eb10bb242d61a2db5902d592224fb8e1e713ef33caaec6f8516333ca4886345555166e91a6469d67f39241d144c6457c0f74c60e662439281a660b3c802eafa5825fab36b764d4753b33920dc72ec4b7136be556c7d0d528eef67049f5a7bd9cc7e4e94a4874ad8d06595ed38a5f1cafff1018c1351d1d7eab144edba6d4f9eeb7924a25b9f7a3eb20984919d9ade66a18c33f92b65031472ca657a724d86053a3fc60fc5502acec81822bc609954e402a406081cfe7931a1adbfc45a3168e30a451561302a131ff702b4d6c5d3603ea9d1b54c64aad93407e078d6b435154236ba594e8d2f798bbdface489b43120bc0bd7e1bcb6658c2c192ccf18f278e9c5bb14dbdf1a4eb3412f9dc64a31abefd79bd7c91bb7297c9f694840a75cae5d3482d15a2d148092a6545972b7f95a23206bda509260bb370a012b744c2bb46b57da12367d35e778b7d7f463fd8230368b5a5636f28e2cddd03c69adc9c913027a726130c95d818fa38ca7ba8421d3fcf0736cd3001ffcf80701cf6d737cc3dd8f905af39fb2806d2f22289d0001c74eb482f4faf0a1863099cc1b236edd1cfa206b21a2ed86affb4e6a3a4dfb54fab46c8c06cd3e370b50e08e1b7a08864269d867eba5fae8a49560e9479209966002c09719ab8ca58702bfb0071d3859df0193a956ed4d8ad19a2c79656c6dd42eb5a44b808df394333683b605ad0cf176bfcfdc89b01317a802cf0ab02fc3673822b55fcfba512792c9e40a150cfae4dcd40b2b12296ba95063a2f50f552b4682c4d461b1efb7555816b5b836ff0319af6935ae5b41e67329a7b21da93c36fcd87cbba1653c0d00077b14cfcba24f891d62219c157b6354300837d211fbcf1881f5e98d6195fb782479e106c072020b56285107e2fd7947bc64ec9a43a0b239c140ec0456685ac3eba988952e641d2eb16cd0132d2bb25576fc6bcd5e29eb9da2d40e8b50776abe5cd7ea45da8442a311977c51755015b3e4995739edef0567a3f169e980addb1705224175372339de904eb952e13f648449722258fa21f7e53f4a1956e8e9a39dbb18c6d2d10d9146358158a0ab7ce3f54120b705e1ccb7a13fb7e9103d0b80faaac31cab07f6d2d9f668c707b5e3bdf259923a1057816a31e8c771267fd974193d90e1a9837a987d9ba52f7af599c1aeed13f6619cc0b334396b750c9017f84cff56c0dfecc12faee59e37cf7d44575bb448abb19616d4fa79f4fdf96631328dd0d0717f12b9587d76b577bbe78eaa7b0acace3b79776b5d2e77942c57745e347ec766170e90cc66a5191bff3ad49d423ba2817cf92be74e653cc6274a20bade324638d57a27f2fea01d4670bc1ad5ec4d006492ff5fa616a0010be824766f12acec9b26a7606cc8453382c3dd1f5f5c85354569123824002c44d0ae4cd2e1ebb4e33e3d7b69fe14e05fb53af9d66f53990a830120cd618cfaa10e5f6deab4ef4522afd380ea52f90b181fd5b538f424900aac643d118c33dbb6ffe0b2428844f51943412d8fda4a327b71c814cd6345b3690a4716f04fc7323ff1af08e82ef5e571c9fb0fa9b22af40948febda32ea14ecf61700eb02967d09bfd078ace6cea259952c0be90fab1ce841f1022d2da82f173c580d43effdb424b1729aa9fe40292c082043a7c901bc76426ef6e3de788db31e50f54458ca4e360bb803b48d5a4be50724c1f48b504b086d9dca3ae74eae76a1849d14a4074f389aba805b793f9662f072405026afc3ef108ede69dbd2c769886dfc75a9a2e093137d92b38e34a050eca73cd3067d56dfd58fedaff2857e720b09d676607a1e8eeeb06b26494cc2b844f5e856271732477f384af839e98889d5c9cc28651f6eb74029f839150f947d180e48776ef1c829509e12016c6d1b717713e6325751a944cd259b1b86b1f5e793cdb55a73784498be09c2cebdd70159c77abc7c64af2e2de1a860a3e9dd8646b7a6866e1891fcf97a2b3ea47c0c57c5fa9a94129c2e27940ab9fe996eb1813d21d48fb6dbc9b8071c50dc26b4ed21588211fc5edb1ca873c70b606678ae7de9c10d2d083f372421a3038c592a38aec69020862f4432ef9ae7f400ed53b44bb58e92b022ac8b62a6b459337af339dc3346a809b715f9974d21e606244d23cf4dcb0956f93c14047243172adc97a1fed868bc49fb57ecc123425a21e94dd5b9d1ff52bc45965a7be2f5ea8218750e2cc8f174fbd2c7811742f5f17fa1f954b8423c403fd2e4e96296e37e0bfe2edd52e8c3b921dac771c61524455b401017ab5f655eca76139557a4a87cc30210b052ae17a5ca8b634322657ea4d87e0da2392c470f8951ac0560a01b4d0befe632ee311d0b87af31465d6cf7854f5738cb5debfa1d7381c74f45eea08c06d4ddc9e811d1a33394a35efdb7121cdf5f1603343df8431c87718a5d4cf3b2e593508d8b63f0d1e82f9ebc40d4022ba06327cc8233f29c0995da512b318bfa212e9582cb880d9bd6a02050a014294ef321bb2c65e4638a4fd2c8c27fd9ac28c9e49cdae6dd9eb05dafb38a4a003a56dba826e386f5fd3ab0d54b92f53ec11c850927fc4c5b669c67505ce59306ad86460b480b711d4b31c512829b7037d1c45b5b84c0be40a038b5e975c57c860476318a22df2e4f90009c38481e519b9511e54dc59e89a6593bc53ae03224466513930c5ed3689793f00be192a58a919db9ad1267962c0ee60327ee710accb0da037610ef8aaff63f6582f691096fbdfb1996abc4443cd4ffe04fcad3608413044b978d86d3a18bdf86fdb70cf7e7bbb0e4db9d36176d0ba8a4cf81369fa84ee55466df70e6d4431a873000c19bb5caff30c01c7f7f928cde86bea5c401e525fb8a938fd016bffd5c9d52b279e867bc64f575b80eec74e7f66fe92aef613636e50c8f32831ab4b7eabbc89ce6d7bbfd03b6b005e0c5ba27268369f5083b2ded32c1f9e8cd73a1daee26cf03dbbf9c476fd0f14935244eb7b544f8db1c19d8a21de7e8a88f540e8949f721f20d7a47cfad3f52d93c11a796fbe9fbe415194193e5c70b33237f70790905816b856c252a30e72c081a8bac6a1c9fd2c372b9f870831d6ba6671fd8684f25e60cc7e3a1a02ed5f1a4fe426373bf61404a68571e93f35659b6c37f939233ca6663603b053c8fc74da84dd971b9319a1260fa2f5d66609962e93f7f33a40b22066b86a74fb38bf1444d025f27f14e922661471ef8ad503e97f8e7dd6b9c9a420885e519e085a1f26f7149b82881908021f601679f79c944549bcb431a7d2b12f75aa54cae39f9caafefc01e7eb589d2eb574937abbe18b419d7d27309acb330293456337cb9d753e08f7b890bbf76c4d6ef548bc3b5965302bc65ab08a2420527c1ad8be374cae7cc858376219d39a7a6d58c478a721678e789bcc317a4d1acbf47870a4802a07ac0332f7fdad7156065de511862c2a076e264138b98e7abd1a2555ef2e1ca44ee68f06725508891051f6bd24479a616606024841c8203744b999868b9f2b3b5e8a42f454d25fcddf8f5569594716a4022c3ac8ba67115b93d8bb50684b0fb100dabca7f6b7e29b723007776435829c6f21223d7a2556766d198c76ab6cce3b6e6da5c4d14a26b7cda1cebe6792ce4c1498fe644fb4408189e472efde923506ea4d18aa3284ec311fa942dfa5d8b939e509a10c69461993cc9d3ace2fef29afee8d0894764ffd82371d5ed363b5968447ad3c0962b86584cc97740d7bc3838ab1c1b0198ea830f122b200722d3c2c8815a2a5f90382e1c58f2348dbd38449e28c67ed85f66ea3e383b91c782a4e77ad4aa538db6d15ab90dd464318ded6fd293a1b0279852335e3c94bcce6f37950fb23d96f84465aeaa8fc2f71ce61a1416e579399c363bb37ded602fbea1ba5de87ab12bc7aeb5c62f026f648ab2babea2517c3ade2828109da58c010e6efef544088ba412ea57d3cd4fad3fd85b17e386ffc8a700664b2604c8a71c011e894ac03a109d9ddbe0b6d625d33d7d16fba5bcbc1ee1cdcfc6a475a23aff414e5b4f83e9d18e10f9e6dc49e518561ad53a110794d2ad9c7fee95a03b632b2acbebac42c996e1b856b2f18a2a3bf7cb0726c10b6aa3ec2d78bebd26e86ecf78b87736017cffa7d654b357be120985c553d11dbc932139ea6e1efdb7ef34598db568e66d42429e414b5903ad6e616ff7faff6ecedec529cf16b280c18dd4c3c8cd5192f625965e15c29104855364565a4a52ac5ff78eb31a6e7602e84226a87364708c2a9fdcf2f66f5dd0951aacb7b6c8f9bd0e534ae44b47799cdb8f683db5a3258d6f1943e04e59b11fbc6f57d16ff150c94a22717c1b483ad064c25f09022cc4ce09e76fed2b2ce84e9a50623f84cb013d00b8ee3fd2eaf1ed84df2b29d3119865f5df8fbb6d7440ec6da33deff5c60f466f91959c0d7c7800937cf59fdc6e2d53e809a6f6754ed545fc71c42a95d198df6329a3f32ecd091e7e643727ee34241b9244ea9a2118ccc6d5b52f8dbd61dbc7a4b65e8a4b0e937669a8a6377022df74ac0d2d42008edfa83a71c2e14c8cb7f3e54612cbe5b64b31371f445ea6235467b339b285bffaad0acd9af5159b84f58a3e0230a7e6f055a016a0737b893e0d1b2dba11de53529c825bea86a455bba90eb4f10ea5425d498c18c0bc643a5bb07491a8b6d89b1c92329aaff3a9cb9302f81100d97b78a09d1f5c512c26409796608b77c969c070f6e55037c97bef2c30ebb373110c2356e0663c0a7010d13f18f9b7b1d4a5de88b110efe433a5dc9dd03ac7621a6de39584de91e9b43c5ef4cb435eeb45b8865540355030acddeaf451a453a0b0a76cb064ea1e939dc5491f2c591973c741cf1f73ef4451a1b43ed9d9e0c7b126b869e7cd326900a470dc08a15fb176346f7431dadd6b820ec10cba33d7097ebac9c1ff147fe39d9cedad2828facd8c37cb22a8b7d55b63170f55ccf45fc25715d00e7eb7c3f32c5a7dce02bb07073daa170caa4813b2102648cf6a5bc9ae5ef3fc4c6240447190340469cea21650f79f5ff0ab60e6fa8a30a45f29ca7f4356c275ef4dad63b07f73cc672d26091db75eff3e19b51272b0b786609333f6580a3ad3c83673df3776d04cd05fa86b7b8066076b71377580d8b226d9daec174cf2a62ffd48259ca04821e949021b3f540b5268c794a5314de9cb143dafce0575c06750f0c125b507bf39bf0abfc25b9bc39ddbc4450f0f3a70c312905a5c2d11f7b39a3cb0fd08be6f8b74c5d74fdfb0477c942caac42ae596e0aa36db5f10e1571231ebfc327e5a6111eb2f2a0e1be0b0752018973500f1b7c832cf36078c24717f66983bb72649829af53389e89694bce146f8cb358d7922ba07dfa9da6fbd65b7f5159010b1bc6847967b9eeef7c6db90f48b1c1a7ab63481809111b2876c73c375064bdca8064ee8d6d7b3817db8f5dc82709c586afea5850f415ca7641b5e6f45ff93b9dbc2f62c40c47dbe61a069d88e3664c8dfc9be2b35f8896e6d5c8a35b864b50d50364d3cec828a4f7dcff3cb314c9f7ab03c93e1fd8c5bfa2c303d76cb0954b401927a000babc400497d3f3a37c1f7a685ecc12b28db4b9b75debccfb132a4bb3b19ba91a441a94403eef6ad8222edd1dcecf215580296020731cab55029a189561499d34faef21eadfc370f98872c2192aef73f0cdf80de61cc9157d1e08d7153a49f7d1151fb9f110febc34e760c1afb87eb36c9df1d6aa047cb655b3ec5fdae8e2d93861070f98bd5f1c53c26f07d7c43cb295440af75e87671a552e39f9bfe1853222eb8ba0c8013944ee61dbe21281b1d4e3ea3dc0353d4ded5db0128504b97491353120c63bea1c5656be047a77bebe93efbab10375cb0946624e076a93a6ffdc284f4aa9fcf54ebda3653d5abf7da76f19c165d0982d48279ba8ee9f33b2fb060491aa26517e39f2cb4d4ce7726b249f070aeefca6843a813026e45c6ddfccd1e0b8883a7170644c43b227a2a3c03cbd17b8f3dc0910685169ada487a72251eeb6e6a1dd5661294337cf4cee2d74fdfbe00ff6d07847e63880059bcd12951e8b649cca1dc6a355a7d2c26ef8cabd467b21d6bbe28b108b385ffff7304d96b03500c912efd2af7c45f81f5f2f0e3357ec7da616f81ead2f823a128696ec7dd65a6587e5ecb56a8fba1bdea28909da5e085e164b046310182fad711d4e46abaa61281c88c729810c615ce9636b5c96e4150e2fcec6c111469ba8b0c010963d4338fba8a8a080e384198e1410af15f7ee18e5396b721fc331860e072207da236b35dd94fa7dab288a114ea46e754f1d0b4bfa1a5b216706652e52c489e9a3a1cee8ab4fe5d416ac22c2649673715909c27f31684f6e103913bfd28e02fca507940b86405cebb8084d1c6532a5508b716070c67ba544a1593895f4cc1a8d075415feb69d50fb674c3a89b59f80032cdfa8d1181856817bb16f50bafd0e21aa656661bf3b6bfc207a7a645a8edc15ff1cb706b6292a3263ef5ad1479338f59058d08ce76dc801d8e11e280badd5a0c0dcf1c6285d95cc087e7f0dd823b6b7c353d22f1e7ed03c1461cc4c170e33cd06c45f17fe1af233cca638611449493d533f701d77163f6784202d995e17b797d4d2f0d87d05a00728e8fdda47c70ecf919a2a110371da3474580720e8eae934888cf84f1f1a5530baf815e7c16129732ec4af417c1be0970b845dbced563f00a86135bda35c525aa020f285116b00071858e6eacf7b124b635ff7b62410e8c27a4c76adcdec10f5180130e8c554d2d8038677650171a2f6c3da4c04e340b48df92cf41d08a499f680a2cd6ab099fcede2f8b1888aa052c7f2dffdb203e19fb1e2e6237e19b218740c89cce311ff168437500a6eec570780938c3291a19482656a8d53b19bde3d4148bf1a9f2ea67ae835df675662f27b5b6f5e2652d0471c81740acef306d9605b4ca09a2c4c0f3f8063b6fa5fe01109c5e348eb318074785771ab2cedc48d0f5e15b3a368ace5aea415aa2d566063f25571b7a218b9e95117aaf0a389284e763e448c88b49205392fe032ed206ca8e27fb1c65a72d125cc860913dabe714be1a2a85120066cad66d53dec9a30664bfdd33e25398199211b15fe0770cb243bee320e95e506be4617c3e5e6825342c769bc1da3127f8d34c922f60ed2727f5d9209fc28099ec86c29572fc7159f6ced79b0a2a2653100230a55f7a578e2f1d90f6301069ed04106de45b976f2aabe769ed17d59a53116b74fa2f598c0d1e9919ca8d9cc21265ebc218ab9808b094eebd9a48d8349cf3faeaaa7c8ddb07f6eb874f70cdfafe050de69c6e7da6c8d2f71d581d6c604f4bb29243e9d1bbcb0890b436cb43d1a33c4b96a08af4137135a8c8fe74034dcaf1581856f800771", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x0, 0x0, 0x79e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x400000, 0x0, 0x0, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000380)=""/183, 0xb7}], 0x1, 0x0, 0x0) 6.337483243s ago: executing program 0 (id=2094): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 6.240923284s ago: executing program 1 (id=2035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = inotify_init() read(r6, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) 4.972729172s ago: executing program 1 (id=2095): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8d", 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7b, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x100f) 4.73961212s ago: executing program 1 (id=2096): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x16a) io_setup(0x1, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) syz_io_uring_setup(0x33c9, &(0x7f00000035c0)={0x0, 0x1d83, 0x40, 0x1, 0xd8}, &(0x7f0000000100)=0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0x6d1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/165, 0xa5}], 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 4.737274793s ago: executing program 0 (id=2106): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='jbd2_update_log_tail\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x8, 0x16a4, r0, 0x40000}, 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0xb}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071101700000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xf, 0x2, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000013ff0095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=r3, 0x2b, 0x0, 0xb, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 4.678981282s ago: executing program 4 (id=2097): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "fa02c80a3a1e9d4b9aaf000000008d674f039b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"6739669f274d13b6915b00e4f5b53e0ca34dd02acecdc67c5e4c2662816800", r1, 0xffffffffffffffff}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"000c00816800df00", r3}) 4.440306266s ago: executing program 3 (id=2098): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@u}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x6, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r7, 0x205, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 2.544012795s ago: executing program 3 (id=2099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f80), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$pptp(0x18, 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f00000002c0)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 2.450569834s ago: executing program 4 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x80047453, &(0x7f0000005280)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) prctl$PR_SET_MM(0x3e, 0x0, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_MCE_KILL(0x43724f53, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) 200.35615ms ago: executing program 3 (id=2101): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) tkill(r0, 0x22) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030102000000fdffffffffffffff100800010001"], 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0) close(r6) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0, 0xa9, 0x0, &(0x7f0000000580)=""/169, 0x7f, 0x0, 0x5c, 0x4, &(0x7f0000000780)="0f6bc5fda0807aafeb3a0609698ffa2300be627b84f75ea36c79c9ba1af24a138f438c808cf3f6443f430110f55dece8f9bf7234343012a64f940420baf8b34c17e292ca29670e68f9172ce0d0e90cf2b8215ffd8ff2ef6e6b5ffa04", &(0x7f0000000500)="ee4da27e", 0x0, 0x0, 0xff}, 0x50) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 198.255855ms ago: executing program 1 (id=2102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) 83.235599ms ago: executing program 4 (id=2103): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) mkdir(0x0, 0x0) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r3, 0x0, 0x0, 0x0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000f80)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 0s ago: executing program 0 (id=2104): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): butes in process `syz.2.1750'. [ 821.966686][T11399] veth0_vlan: entered promiscuous mode [ 822.162272][T11399] veth1_vlan: entered promiscuous mode [ 822.439161][ T2479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.447002][ T2479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.502220][T11407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.730807][ T6311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.763858][ T6311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.765173][T11399] veth0_macvtap: entered promiscuous mode [ 822.845569][T11409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.922726][T11399] veth1_macvtap: entered promiscuous mode [ 823.134431][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.159779][ T5236] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 823.172173][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.236875][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.248321][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.273033][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.285941][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.300409][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.320150][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.348674][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.361005][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.406538][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.428731][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.447037][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.462598][T11407] veth0_vlan: entered promiscuous mode [ 823.522264][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.586815][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.642228][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.689560][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.733869][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.755899][T11481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27132 sclass=netlink_route_socket pid=11481 comm=syz.3.1753 [ 823.765864][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.786639][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.814580][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.848349][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.876730][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.890856][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.902196][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.926314][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.964999][T11407] veth1_vlan: entered promiscuous mode [ 823.981931][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 824.033085][T11399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.058803][T11399] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.067975][T11399] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.098314][T11399] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.143030][T11481] Bluetooth: MGMT ver 1.23 [ 824.573749][T11407] veth0_macvtap: entered promiscuous mode [ 824.692602][T11407] veth1_macvtap: entered promiscuous mode [ 824.898324][T11409] veth0_vlan: entered promiscuous mode [ 825.023498][ T4010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.032440][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.049785][ T4010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.067703][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.084663][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.095769][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.107630][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.118762][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.129274][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.140967][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.166059][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.177547][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.188277][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.200801][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.211512][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.222574][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.244316][T11407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.387461][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.420734][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.447687][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.509111][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.545219][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.358819][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.384542][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.410718][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.441188][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.499241][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.548502][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.743567][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.754754][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.765550][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.459774][ T29] audit: type=1400 audit(1723091819.980:1340): avc: denied { create } for pid=11501 comm="syz.2.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 827.478505][T11407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.505999][T11409] veth1_vlan: entered promiscuous mode [ 827.633682][T11407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.653627][T11407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.677225][T11407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.702374][T11407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.801976][ T4010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.829089][ T4010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.059853][T10054] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 828.105383][T11409] veth0_macvtap: entered promiscuous mode [ 828.170978][T11409] veth1_macvtap: entered promiscuous mode [ 828.253623][T10054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.265152][T10054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.277049][T10054] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 828.286821][T10054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.299493][T10054] usb 3-1: config 0 descriptor?? [ 828.375482][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.383931][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.426464][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.467963][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.500650][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.558626][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.599966][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.617090][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.630978][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.641860][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.663783][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.677759][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.688065][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.717823][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.732871][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.745807][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.761771][T10054] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 828.781264][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.796279][T10054] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 828.807861][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.860022][T11409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.872875][T11512] xt_HMARK: spi-set and port-set can't be combined [ 828.952565][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.981760][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.992349][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.003270][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.041538][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.075881][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.113012][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.144253][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.167994][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.192312][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.225924][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.255227][T10054] usb 3-1: USB disconnect, device number 19 [ 829.258388][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.278920][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.289932][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.300196][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.319919][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.373859][T11409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.629649][ T5392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.859803][T11409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.876454][ T5392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.908803][T11409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.930301][T11409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.968321][T11409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.707683][ T29] audit: type=1400 audit(1723091823.840:1341): avc: denied { write } for pid=11528 comm="syz.2.1764" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 830.897147][ T2479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.906924][ T2479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.418017][T11540] xt_hashlimit: overflow, try lower: 3/0 [ 831.782951][ T29] audit: type=1400 audit(1723091824.700:1342): avc: denied { map } for pid=11533 comm="syz.3.1766" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 832.456866][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.490707][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.799625][ T5236] Bluetooth: Unexpected start frame (len 16) [ 833.809647][ T5236] Bluetooth: Frame is too long (len 16, expected len 4) [ 834.438931][ T29] audit: type=1400 audit(1723091827.530:1343): avc: denied { ioctl } for pid=11555 comm="syz.3.1771" path="socket:[39672]" dev="sockfs" ino=39672 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 834.659019][ T5276] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 834.878847][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 835.010867][ T5276] usb 5-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 835.043654][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.093438][ T5276] usb 5-1: Product: syz [ 835.097637][ T5276] usb 5-1: Manufacturer: syz [ 835.149434][ T5276] usb 5-1: SerialNumber: syz [ 835.178871][ T5276] usb 5-1: config 0 descriptor?? [ 835.280303][ T5276] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 835.569318][ T5276] usb 5-1: qt2_attach - failed to power on unit: -71 [ 835.588122][ T5276] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 835.658506][ T5276] usb 5-1: USB disconnect, device number 18 [ 836.269548][T11575] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.626702][ T29] audit: type=1400 audit(1723091832.760:1344): avc: denied { read } for pid=11596 comm="syz.2.1783" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 839.650833][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.812963][ T29] audit: type=1400 audit(1723091832.760:1345): avc: denied { open } for pid=11596 comm="syz.2.1783" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 839.837768][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.075102][ T29] audit: type=1400 audit(1723091832.990:1346): avc: denied { create } for pid=11598 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 840.194833][ T29] audit: type=1400 audit(1723091833.010:1347): avc: denied { bind } for pid=11598 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 840.335420][ T29] audit: type=1400 audit(1723091833.290:1348): avc: denied { write } for pid=11591 comm="syz.3.1780" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 841.714450][ T29] audit: type=1400 audit(1723091834.800:1349): avc: denied { unmount } for pid=11407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 843.021366][ T29] audit: type=1326 audit(1723091836.160:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.1788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1609f779f9 code=0x0 [ 844.725422][T11637] fscrypt: Error allocating hmac(sha512): -2 [ 845.297089][T11655] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 845.307082][T11655] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 845.331956][T11655] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 845.345931][T11655] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 845.367150][T11656] syz.0.1798: attempt to access beyond end of device [ 845.367150][T11656] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 845.393002][T11656] F2FS-fs (loop0): Unable to read 1th superblock [ 845.408776][T11656] syz.0.1798: attempt to access beyond end of device [ 845.408776][T11656] loop0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 845.479953][ T29] audit: type=1400 audit(1723091838.620:1351): avc: denied { append } for pid=11646 comm="syz.2.1793" name="nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 845.503587][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.618756][T11656] F2FS-fs (loop0): Unable to read 2th superblock [ 845.726144][T11657] nvme_fabrics: missing parameter 'transport=%s' [ 845.740879][T11657] nvme_fabrics: missing parameter 'nqn=%s' [ 846.481864][ T29] audit: type=1400 audit(1723091839.620:1352): avc: denied { setopt } for pid=11658 comm="syz.4.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 847.484356][T11684] netlink: 'syz.2.1805': attribute type 15 has an invalid length. [ 847.644270][T11684] bond_slave_0: entered promiscuous mode [ 847.650082][T11684] bond_slave_1: entered promiscuous mode [ 847.728968][T11690] bond0: entered promiscuous mode [ 847.829521][ T29] audit: type=1400 audit(1723091840.960:1353): avc: denied { bind } for pid=11682 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 847.868344][ T29] audit: type=1400 audit(1723091840.960:1354): avc: denied { getopt } for pid=11682 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 848.309418][T11684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.329985][T11684] bond_slave_0: left promiscuous mode [ 848.352554][T11684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.367190][T11684] bond_slave_1: left promiscuous mode [ 848.384728][T11684] bond0 (unregistering): Released all slaves [ 848.430654][T11693] netlink: 'syz.1.1808': attribute type 16 has an invalid length. [ 848.438517][T11693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1808'. [ 848.457292][T11693] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.754022][T11702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 849.605798][ T29] audit: type=1400 audit(1723091842.740:1355): avc: denied { watch watch_reads } for pid=11707 comm="syz.2.1815" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 851.631296][ T5236] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 851.631578][ T5236] Bluetooth: hci8: Injecting HCI hardware error event [ 851.695337][ T9255] Bluetooth: hci8: hardware error 0x00 [ 855.192430][ T29] audit: type=1400 audit(1723091848.330:1356): avc: denied { connect } for pid=11731 comm="syz.2.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 857.636276][ T9255] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 858.297010][ T29] audit: type=1400 audit(1723091849.270:1357): avc: denied { bind } for pid=11735 comm="syz.2.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 859.031424][T11757] syz.2.1833: attempt to access beyond end of device [ 859.031424][T11757] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 859.295323][ T29] audit: type=1400 audit(1723091852.420:1358): avc: denied { connect } for pid=11762 comm="syz.2.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 859.390514][ T29] audit: type=1400 audit(1723091852.520:1359): avc: denied { mount } for pid=11766 comm="syz.3.1838" name="/" dev="pstore" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 859.594770][ T29] audit: type=1400 audit(1723091852.730:1360): avc: denied { bind } for pid=11770 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 859.946039][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 859.959488][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 859.975065][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 859.984483][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 859.994751][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 860.007049][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 860.668203][T11787] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.680367][T11787] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.690334][T11787] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.699457][T11787] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.719290][T11787] vxlan0: entered promiscuous mode [ 861.169331][ T6323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.255160][T11774] chnl_net:caif_netlink_parms(): no params data found [ 861.491790][ T6323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.054842][ T29] audit: type=1400 audit(1723091855.190:1361): avc: denied { write } for pid=11803 comm="syz.4.1846" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 862.251537][ T9255] Bluetooth: hci1: command tx timeout [ 862.280841][ T6323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.260348][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 863.367818][ T6323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.585882][T11774] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.616016][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.653717][T11774] bridge_slave_0: entered allmulticast mode [ 863.683635][T11774] bridge_slave_0: entered promiscuous mode [ 863.723843][T11774] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.743557][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.768011][T11774] bridge_slave_1: entered allmulticast mode [ 863.777047][T11774] bridge_slave_1: entered promiscuous mode [ 864.092055][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.480958][ T9255] Bluetooth: hci1: command tx timeout [ 864.588033][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.874054][T11774] team0: Port device team_slave_0 added [ 864.932642][T11774] team0: Port device team_slave_1 added [ 865.008537][ T6323] bridge_slave_1: left allmulticast mode [ 865.014348][ T6323] bridge_slave_1: left promiscuous mode [ 865.039815][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.050896][ T6323] bridge_slave_0: left promiscuous mode [ 865.056621][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.926099][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.943147][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.965534][ T6323] bond0 (unregistering): Released all slaves [ 866.062641][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.070177][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.119746][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.144824][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.163618][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.190889][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.460748][T11774] hsr_slave_0: entered promiscuous mode [ 866.475105][T11774] hsr_slave_1: entered promiscuous mode [ 866.488045][T11774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.496706][T11774] Cannot create hsr debugfs directory [ 866.542105][ T6323] hsr_slave_0: left promiscuous mode [ 866.562496][ T6323] hsr_slave_1: left promiscuous mode [ 866.569607][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.577087][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.589019][ T5236] Bluetooth: hci1: command tx timeout [ 866.593776][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.604589][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.658443][ T6323] veth1_macvtap: left promiscuous mode [ 866.664483][ T6323] veth0_macvtap: left promiscuous mode [ 866.670532][ T6323] veth1_vlan: left promiscuous mode [ 866.675918][ T6323] veth0_vlan: left promiscuous mode [ 867.934731][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 868.040630][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 868.687574][ T5236] Bluetooth: hci1: command tx timeout [ 870.355415][T11774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 870.382749][T11774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 870.430903][T11774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 870.444472][T11774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 870.677580][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.685638][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.723975][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.787483][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.822359][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.829716][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.857325][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.864484][ T5353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.286686][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.406250][T11774] veth0_vlan: entered promiscuous mode [ 871.432815][T11774] veth1_vlan: entered promiscuous mode [ 871.546900][T11774] veth0_macvtap: entered promiscuous mode [ 871.576143][T11774] veth1_macvtap: entered promiscuous mode [ 871.620693][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.632101][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.646253][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.657007][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.667204][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.679749][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.689722][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.701692][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.712427][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.730550][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.754443][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.765092][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.776948][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.788010][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.801167][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.811744][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.825709][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.864862][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.885675][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.896078][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.906844][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.917015][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.930157][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.945822][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.957809][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.975453][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.986458][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.996880][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.007671][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.018762][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.033915][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.053747][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.064499][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.079671][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.115216][T11774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.127460][T11774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.136753][T11774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.148627][T11774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.356186][T11720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.365582][T11720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.495661][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.522055][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.193074][ T29] audit: type=1400 audit(1723091866.300:1362): avc: denied { validate_trans } for pid=11836 comm="syz.2.1867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 879.774007][ T29] audit: type=1326 audit(1723091872.910:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 879.865130][T11870] netlink: 'syz.3.1864': attribute type 32 has an invalid length. [ 880.929337][T11876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1865'. [ 880.951669][ T29] audit: type=1326 audit(1723091872.910:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 881.076082][ T29] audit: type=1326 audit(1723091872.910:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f468d9764df code=0x7ffc0000 [ 881.171802][ T29] audit: type=1326 audit(1723091872.910:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 881.233160][ T5353] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 881.279610][ T29] audit: type=1326 audit(1723091872.910:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 881.382030][ T29] audit: type=1326 audit(1723091872.910:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 881.573340][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 881.630750][ T5353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.984217][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.014651][ T5353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.053504][ T29] audit: type=1326 audit(1723091872.910:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 882.342272][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 882.358810][ T5353] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 882.367899][ T5353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.399236][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 882.457775][ T29] audit: type=1326 audit(1723091872.910:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 882.500901][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.511167][ T5353] usb 2-1: config 0 descriptor?? [ 882.554374][ T9] usb 4-1: config 0 descriptor?? [ 882.606489][T11880] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 882.620053][ T5353] usb 2-1: can't set config #0, error -71 [ 882.647277][ T5353] usb 2-1: USB disconnect, device number 18 [ 882.758703][ T29] audit: type=1326 audit(1723091872.910:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 882.889172][ T29] audit: type=1326 audit(1723091872.940:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f468d9779f9 code=0x7ffc0000 [ 884.097369][ T9] appletouch 4-1:0.0: Geyser mode initialized. [ 884.121427][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 885.744946][ T9255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 885.762569][ T9255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 885.778779][ T9255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 885.806659][ T9255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 885.815756][ T9255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 885.823468][ T9255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 885.886056][T10054] usb 4-1: USB disconnect, device number 24 [ 886.103420][T10054] appletouch 4-1:0.0: input: appletouch disconnected [ 886.305956][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 886.306015][ T29] audit: type=1400 audit(1723091879.440:1402): avc: denied { read } for pid=11920 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 886.643219][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.660703][ T29] audit: type=1400 audit(1723091880.800:1403): avc: denied { wake_alarm } for pid=11932 comm="syz.2.1885" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 887.864372][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1886'. [ 887.878959][ T9255] Bluetooth: hci4: command tx timeout [ 888.875749][ T29] audit: type=1400 audit(1723091882.010:1404): avc: denied { write } for pid=9 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42071 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 888.933337][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.311411][T11946] ptrace attach of "./syz-executor exec"[11401] was attempted by ""[11946] [ 889.519107][ T5353] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 889.978254][ T9255] Bluetooth: hci4: command tx timeout [ 890.053554][ T5353] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 890.129889][ T5353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.134564][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.155848][ T5353] usb 5-1: Product: syz [ 890.181240][ T5353] usb 5-1: Manufacturer: syz [ 890.185898][ T5353] usb 5-1: SerialNumber: syz [ 890.237142][ T5353] usb 5-1: config 0 descriptor?? [ 890.267621][ T5353] usb 5-1: selecting invalid altsetting 1 [ 890.298751][ T5353] flexcop_usb: set interface failed. [ 890.358386][ T5353] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 890.641153][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.115255][ T5277] usb 5-1: USB disconnect, device number 19 [ 891.326908][T11965] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 891.377493][T11916] chnl_net:caif_netlink_parms(): no params data found [ 891.626099][ T62] bridge_slave_1: left allmulticast mode [ 891.712564][ T62] bridge_slave_1: left promiscuous mode [ 891.723677][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.738216][ T62] bridge_slave_0: left allmulticast mode [ 891.753406][ T62] bridge_slave_0: left promiscuous mode [ 891.766609][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.029284][ T9255] Bluetooth: hci4: command tx timeout [ 892.203169][T11972] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 892.211608][T11972] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1896'. [ 892.238206][T11972] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 892.720363][ T2635] IPVS: starting estimator thread 0... [ 896.999372][T11977] IPVS: using max 19 ests per chain, 45600 per kthread [ 897.299392][ T9255] Bluetooth: hci4: command tx timeout [ 900.235238][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.272881][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.301105][ T62] bond0 (unregistering): Released all slaves [ 900.790658][T11916] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.804978][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.822938][T11916] bridge_slave_0: entered allmulticast mode [ 900.862565][T11916] bridge_slave_0: entered promiscuous mode [ 901.096078][T11916] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.106135][T11916] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.993726][T11916] bridge_slave_1: entered allmulticast mode [ 902.005480][T11916] bridge_slave_1: entered promiscuous mode [ 902.274768][T11916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.299208][T11916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.405513][ T62] hsr_slave_0: left promiscuous mode [ 902.414034][ T62] hsr_slave_1: left promiscuous mode [ 902.426396][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.445851][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.464968][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.535252][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.638820][ T5278] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 902.657807][ T62] veth1_macvtap: left promiscuous mode [ 902.695286][ T62] veth0_macvtap: left promiscuous mode [ 902.723735][ T62] veth1_vlan: left promiscuous mode [ 902.744281][ T62] veth0_vlan: left promiscuous mode [ 902.847182][ T29] audit: type=1400 audit(1723091895.980:1405): avc: denied { listen } for pid=12043 comm="syz.2.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 902.914327][ T5278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.958949][ T5278] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 902.993434][ T5278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 903.048371][ T5278] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 903.085262][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.126153][T12040] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 903.141721][T12045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12045 comm=syz.2.1915 [ 903.153797][ T5278] hub 4-1:1.0: bad descriptor, ignoring hub [ 903.179769][ T5278] hub 4-1:1.0: probe with driver hub failed with error -5 [ 903.212710][ T5278] cdc_wdm 4-1:1.0: skipping garbage [ 903.234957][ T5278] cdc_wdm 4-1:1.0: skipping garbage [ 903.258965][ T5278] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 903.273577][ T5278] cdc_wdm 4-1:1.0: Unknown control protocol [ 904.103985][ T5278] usb 4-1: USB disconnect, device number 25 [ 904.809348][ T5278] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 905.192518][ T5278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.236218][ T5278] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 905.263804][ T5278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 905.292767][ T29] audit: type=1400 audit(1723091898.420:1406): avc: denied { getopt } for pid=12054 comm="syz.1.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 905.298844][ T5278] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 905.354685][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.397729][ T5278] usb 4-1: can't set config #1, error -71 [ 905.411636][ T5278] usb 4-1: USB disconnect, device number 26 [ 905.611135][ T29] audit: type=1400 audit(1723091898.720:1407): avc: denied { getopt } for pid=12059 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 905.750410][T12064] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 906.239077][ T5277] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 906.410889][ T62] team0 (unregistering): Port device team_slave_1 removed [ 906.461755][ T5277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 906.485563][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.517457][ T5277] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 906.531223][ T62] team0 (unregistering): Port device team_slave_0 removed [ 906.539786][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 906.570209][ T5277] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 906.592227][ T5277] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 906.602908][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.612847][ T5277] usb 4-1: Product: syz [ 906.617573][ T5277] usb 4-1: Manufacturer: syz [ 906.623239][ T5277] usb 4-1: SerialNumber: syz [ 906.639453][ T5277] usb 4-1: config 0 descriptor?? [ 906.649849][T12069] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 906.673573][ C1] usb 4-1: NFC: Urb failure (status -71) [ 906.682318][ T5277] usb 4-1: NFC: Unable to get FW version [ 906.689001][ T5277] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 906.919077][ T5277] usb 4-1: USB disconnect, device number 27 [ 908.810908][T11916] team0: Port device team_slave_0 added [ 909.241246][T11916] team0: Port device team_slave_1 added [ 909.300092][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'. [ 909.338694][T12075] tap0: tun_chr_ioctl cmd 1074025677 [ 909.344276][T12075] tap0: linktype set to 270 [ 910.201687][T11916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.429374][T10026] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 910.524758][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.989075][T11916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.034188][T12092] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1928'. [ 911.072140][T11916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.079437][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.138885][T10026] usb 4-1: Using ep0 maxpacket: 32 [ 911.159585][ T29] audit: type=1400 audit(1723091904.290:1408): avc: denied { setopt } for pid=12091 comm="syz.4.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 911.198098][T11916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.240028][T10026] usb 4-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 911.265040][T10026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.293177][T10026] usb 4-1: Product: syz [ 911.310653][T10026] usb 4-1: Manufacturer: syz [ 911.315290][T10026] usb 4-1: SerialNumber: syz [ 911.359496][ T29] audit: type=1400 audit(1723091904.500:1409): avc: denied { bind } for pid=12097 comm="syz.1.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 911.384527][T12098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.390679][T10026] usb 4-1: config 0 descriptor?? [ 911.474814][T10026] usb-storage 4-1:0.0: USB Mass Storage device detected [ 911.539595][T11916] hsr_slave_0: entered promiscuous mode [ 911.553801][ T29] audit: type=1400 audit(1723091904.686:1410): avc: denied { shutdown } for pid=12091 comm="syz.4.1929" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 911.611467][T11916] hsr_slave_1: entered promiscuous mode [ 911.631897][T11916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.641381][T11916] Cannot create hsr debugfs directory [ 911.862095][ T29] audit: type=1400 audit(1723091904.986:1411): avc: denied { shutdown } for pid=12091 comm="syz.4.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 912.142248][T10026] usb 4-1: USB disconnect, device number 28 [ 912.400634][ T29] audit: type=1400 audit(1723091905.486:1412): avc: denied { ioctl } for pid=12109 comm="syz.1.1935" path="socket:[41590]" dev="sockfs" ino=41590 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 912.618864][ T29] audit: type=1400 audit(1723091905.666:1413): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=40840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 913.484826][ T29] audit: type=1400 audit(1723091906.616:1414): avc: denied { read } for pid=12129 comm="syz.2.1938" path="socket:[41608]" dev="sockfs" ino=41608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 913.711094][ T5228] Bluetooth: hci0: command 0x0406 tx timeout [ 913.711543][ T4607] Bluetooth: hci9: command 0x0406 tx timeout [ 913.856766][T11916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.886405][T11916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.902963][T11916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 913.921348][T11916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 914.156303][T11916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.208068][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.226510][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.233762][T10026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.277503][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.284669][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.310927][ T29] audit: type=1400 audit(1723091907.446:1415): avc: denied { egress } for pid=5353 comm="kworker/0:7" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 914.370460][T11916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 914.379632][ T29] audit: type=1400 audit(1723091907.446:1416): avc: denied { sendto } for pid=5353 comm="kworker/0:7" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 914.679761][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.811704][T11916] veth0_vlan: entered promiscuous mode [ 914.843251][T11916] veth1_vlan: entered promiscuous mode [ 914.908443][T11916] veth0_macvtap: entered promiscuous mode [ 914.930361][T11916] veth1_macvtap: entered promiscuous mode [ 914.979452][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.993428][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.004457][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.015113][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.026346][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.036979][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.055443][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.066087][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.080008][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.090647][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.101520][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.112728][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.123002][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.134573][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.145007][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.164779][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.182841][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.198321][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.211371][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.222343][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.233699][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.245251][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.255985][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.269510][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.280146][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.292763][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.304836][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.321621][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.332664][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.342965][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.355248][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.369455][T11916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.380060][T11916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.396980][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.425686][T11916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.437055][T11916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.447459][T11916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.456818][T11916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.688357][ T5392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.722848][ T5392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.803552][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.813265][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.055217][T12138] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 916.864365][T12138] PKCS7: Only support pkcs7_signedData type [ 917.689230][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'. [ 919.157602][ T29] audit: type=1400 audit(1723091912.246:1417): avc: denied { listen } for pid=12168 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 919.271170][ T29] audit: type=1400 audit(1723091912.246:1418): avc: denied { accept } for pid=12168 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 919.406250][ T29] audit: type=1400 audit(1723091912.396:1419): avc: denied { read } for pid=12165 comm="syz.4.1944" lport=45554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 919.709952][ T2635] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 919.795343][ T29] audit: type=1400 audit(1723091912.906:1420): avc: denied { ioctl } for pid=12178 comm="syz.2.1953" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 919.806483][T12182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1953'. [ 919.990085][ T2635] usb 2-1: Using ep0 maxpacket: 32 [ 920.017072][ T2635] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 920.056824][ T2635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.136430][ T2635] usb 2-1: config 0 descriptor?? [ 921.204183][ T2635] gspca_main: sq930x-2.14.0 probing 041e:403c [ 921.351643][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 923.128794][ T2635] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 923.135166][ T2635] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 923.271492][ T2635] usb 2-1: USB disconnect, device number 19 [ 923.278007][T12212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1961'. [ 923.325402][ T29] audit: type=1400 audit(1723091916.456:1421): avc: denied { create } for pid=12206 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 923.412161][ T29] audit: type=1400 audit(1723091916.496:1422): avc: denied { write } for pid=12206 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 923.594875][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 924.389581][ T941] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 924.689245][ T941] usb 5-1: Using ep0 maxpacket: 8 [ 924.740447][ T941] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.109217][ T941] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 925.169564][ T941] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42157, setting to 1024 [ 925.212398][ T941] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 925.230591][ T941] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.244543][ T941] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 925.268707][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.469748][ T5353] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 925.518889][ T941] usb 5-1: GET_CAPABILITIES returned 0 [ 925.529400][ T941] usbtmc 5-1:16.0: can't read capabilities [ 925.682342][ T5353] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.732859][T12237] overlayfs: missing 'lowerdir' [ 925.769114][ T5353] usb 4-1: config 0 has no interfaces? [ 925.831997][ T5353] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 925.891698][ T941] usb 5-1: USB disconnect, device number 20 [ 925.911131][ T5353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.143916][ T5353] usb 4-1: config 0 descriptor?? [ 926.584642][ T9255] Bluetooth: hci1: unexpected event 0x08 length: 78 > 4 [ 928.756618][T12268] netlink: 'syz.4.1977': attribute type 29 has an invalid length. [ 929.458215][ T8364] usb 4-1: USB disconnect, device number 29 [ 930.056466][ T29] audit: type=1400 audit(1723091923.176:1423): avc: denied { mount } for pid=12273 comm="syz.0.1978" name="/" dev="ramfs" ino=43433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 931.556414][ T29] audit: type=1400 audit(1723091924.686:1424): avc: denied { bind } for pid=12277 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.578096][ T29] audit: type=1400 audit(1723091924.716:1425): avc: denied { name_bind } for pid=12277 comm="syz.1.1981" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 931.624002][ T29] audit: type=1400 audit(1723091924.716:1426): avc: denied { node_bind } for pid=12277 comm="syz.1.1981" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 931.712360][ T29] audit: type=1400 audit(1723091924.716:1427): avc: denied { read } for pid=12277 comm="syz.1.1981" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.886645][ T29] audit: type=1400 audit(1723091925.006:1428): avc: denied { unmount } for pid=11916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 932.115174][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.122116][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.013601][T12294] syzkaller0: entered promiscuous mode [ 935.098681][T12294] syzkaller0: entered allmulticast mode [ 935.156868][ T29] audit: type=1400 audit(1723091928.286:1429): avc: denied { relabelfrom } for pid=12293 comm="syz.4.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 935.199894][T12313] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value [ 935.211153][ T29] audit: type=1400 audit(1723091928.316:1430): avc: denied { relabelto } for pid=12293 comm="syz.4.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 935.299815][ T29] audit: type=1400 audit(1723091928.336:1431): avc: denied { ioctl } for pid=12311 comm="syz.1.1991" path="socket:[41965]" dev="sockfs" ino=41965 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 935.774465][T12272] syz.3.1980 (12272): drop_caches: 1 [ 936.079617][ T62] syzkaller0: tun_net_xmit 48 [ 936.222795][ T5276] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 936.479425][ T5276] usb 4-1: config 0 has no interfaces? [ 936.484958][ T5276] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 936.585922][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.644707][ T5276] usb 4-1: config 0 descriptor?? [ 937.840920][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 937.983502][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 937.999669][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 938.047066][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 938.056716][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 938.066458][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 939.132106][T10026] usb 4-1: USB disconnect, device number 30 [ 940.115713][ T5236] Bluetooth: hci5: command tx timeout [ 942.205756][ T5236] Bluetooth: hci5: command tx timeout [ 944.271631][ T5236] Bluetooth: hci5: command tx timeout [ 944.829285][ T5353] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 945.018729][ T5353] usb 2-1: Using ep0 maxpacket: 16 [ 945.031361][ T5353] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 945.048987][ T5353] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 945.064167][ T5353] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.075890][ T5353] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.091044][ T5353] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 945.100960][ T5353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.116381][ T5353] usb 2-1: Product: syz [ 945.137967][ T5353] usb 2-1: Manufacturer: syz [ 945.152879][ T5353] usb 2-1: SerialNumber: syz [ 945.254847][T12364] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 945.351569][T12335] chnl_net:caif_netlink_parms(): no params data found [ 945.482290][ T5353] usb 2-1: USB disconnect, device number 20 [ 945.635451][ T9255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 945.648740][ T9255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 945.657132][ T9255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 945.675233][ T9255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 945.683172][ T9255] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 945.699514][ T9255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 946.203127][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.349686][ T9255] Bluetooth: hci5: command tx timeout [ 946.565960][T12371] block nbd3: NBD_DISCONNECT [ 946.745074][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.809526][T12371] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2013'. [ 946.819632][T12371] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 947.022066][T12335] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.038761][T12335] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.073019][T12335] bridge_slave_0: entered allmulticast mode [ 947.096664][T12335] bridge_slave_0: entered promiscuous mode [ 947.226951][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.254742][T12335] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.269948][T12335] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.310374][ T5276] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 947.318952][T12335] bridge_slave_1: entered allmulticast mode [ 947.326946][T12335] bridge_slave_1: entered promiscuous mode [ 947.537916][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.540698][ T5276] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 947.588649][ T5276] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 947.673801][ T5276] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 947.697502][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.740426][T12335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.784453][T12335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.797783][ T9255] Bluetooth: hci6: command tx timeout [ 947.799252][ T5276] usb 2-1: Product: syz [ 947.811347][ T5276] usb 2-1: Manufacturer: syz [ 947.826871][ T5276] usb 2-1: SerialNumber: syz [ 947.880925][ T5276] usb 2-1: config 0 descriptor?? [ 947.920695][T12381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 947.939617][T12381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 947.972195][T12335] team0: Port device team_slave_0 added [ 948.044089][ T5276] option 2-1:0.0: GSM modem (1-port) converter detected [ 948.044276][T12335] team0: Port device team_slave_1 added [ 948.188223][ T5276] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 948.294409][T10054] usb 2-1: USB disconnect, device number 21 [ 948.316627][T10054] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 948.328150][T10054] option 2-1:0.0: device disconnected [ 948.377805][T12335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.384984][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.413510][T12335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.433495][ T62] bridge_slave_1: left allmulticast mode [ 948.446458][ T62] bridge_slave_1: left promiscuous mode [ 948.453625][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.464643][ T62] bridge_slave_0: left allmulticast mode [ 948.478674][ T62] bridge_slave_0: left promiscuous mode [ 948.485210][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.825117][ T29] audit: type=1400 audit(1723091941.946:1432): avc: denied { mounton } for pid=12384 comm="syz.0.2016" path="/24/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 949.134389][ T29] audit: type=1400 audit(1723091942.256:1433): avc: denied { setattr } for pid=12384 comm="syz.0.2016" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 949.870317][ T9255] Bluetooth: hci6: command tx timeout [ 950.017383][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.079625][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.115527][ T62] bond0 (unregistering): Released all slaves [ 950.145739][T12335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.154383][T12396] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 950.162362][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.284724][T12335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.348159][T12391] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 950.388807][T12389] lo speed is unknown, defaulting to 1000 [ 950.446513][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 950.457674][T12391] lo: entered promiscuous mode [ 950.471004][T12391] lo: entered allmulticast mode [ 950.604222][T12367] chnl_net:caif_netlink_parms(): no params data found [ 950.678358][T12389] lo speed is unknown, defaulting to 1000 [ 950.828089][T12389] lo speed is unknown, defaulting to 1000 [ 950.880177][T12335] hsr_slave_0: entered promiscuous mode [ 950.910950][T12335] hsr_slave_1: entered promiscuous mode [ 950.944673][T12335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 950.955028][T12335] Cannot create hsr debugfs directory [ 951.045123][ T62] hsr_slave_0: left promiscuous mode [ 951.076729][ T62] hsr_slave_1: left promiscuous mode [ 951.120567][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.156464][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.167801][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.188409][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.314444][ T62] veth1_macvtap: left promiscuous mode [ 951.340207][ T62] veth0_macvtap: left promiscuous mode [ 951.359094][ T62] veth1_vlan: left promiscuous mode [ 951.364407][ T62] veth0_vlan: left promiscuous mode [ 951.953336][ T9255] Bluetooth: hci6: command tx timeout [ 952.061473][T12389] infiniband syz0: set down [ 952.067454][T12389] infiniband syz0: added lo [ 952.076960][T12389] syz0: rxe_create_cq: returned err = -12 [ 952.085108][T12389] infiniband syz0: Couldn't create ib_mad CQ [ 952.092677][T12389] infiniband syz0: Couldn't open port 1 [ 952.193042][T12389] RDS/IB: syz0: added [ 952.197102][T12389] smc: adding ib device syz0 with port count 1 [ 952.216646][T12389] smc: ib device syz0 port 1 has pnetid [ 953.235260][ T62] team0 (unregistering): Port device team_slave_1 removed [ 953.838448][ T62] team0 (unregistering): Port device team_slave_0 removed [ 954.029420][ T9255] Bluetooth: hci6: command tx timeout [ 955.448771][ T5278] lo speed is unknown, defaulting to 1000 [ 955.489026][T12399] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 955.518783][T10054] lo speed is unknown, defaulting to 1000 [ 955.585835][ T29] audit: type=1326 audit(1723091948.716:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e187779f9 code=0x7ffc0000 [ 955.745463][ T29] audit: type=1326 audit(1723091948.746:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e187779f9 code=0x7ffc0000 [ 955.871666][ T29] audit: type=1326 audit(1723091948.746:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e187779f9 code=0x7ffc0000 [ 955.990898][ T29] audit: type=1326 audit(1723091948.746:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e187779f9 code=0x7ffc0000 [ 956.067928][ T29] audit: type=1326 audit(1723091948.746:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e187779f9 code=0x7ffc0000 [ 956.130264][ T29] audit: type=1326 audit(1723091948.746:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f5e187779f9 code=0x7ffc0000 [ 956.181596][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.182871][T12389] lo speed is unknown, defaulting to 1000 [ 956.215650][T12367] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.235013][ T29] audit: type=1326 audit(1723091948.746:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e187779f9 code=0x7ffc0000 [ 956.289403][T12367] bridge_slave_0: entered allmulticast mode [ 956.297224][T12367] bridge_slave_0: entered promiscuous mode [ 956.428248][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.448718][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.499496][T12367] bridge_slave_1: entered allmulticast mode [ 956.539375][T12367] bridge_slave_1: entered promiscuous mode [ 956.912537][T12367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.981349][T12389] lo speed is unknown, defaulting to 1000 [ 957.043534][T12367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.104088][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 957.117754][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 957.131035][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 957.174069][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 957.185443][ T5236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 957.203444][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 957.525290][T12367] team0: Port device team_slave_0 added [ 957.539995][T12367] team0: Port device team_slave_1 added [ 957.553136][T12389] lo speed is unknown, defaulting to 1000 [ 957.706065][T12367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.834838][T12367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.941945][T12367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.985142][T12367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.996167][T12367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.042089][T12367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.180743][T12335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.196713][T12335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.371514][T12389] lo speed is unknown, defaulting to 1000 [ 958.587460][T12335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.638783][T12335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.857725][T12335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.868694][T12335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.026547][T12367] hsr_slave_0: entered promiscuous mode [ 959.044507][T12367] hsr_slave_1: entered promiscuous mode [ 959.073119][T12367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.102789][T12367] Cannot create hsr debugfs directory [ 959.193891][T12335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.229829][T12335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.259098][T12413] lo speed is unknown, defaulting to 1000 [ 959.309073][ T5236] Bluetooth: hci7: command tx timeout [ 959.666476][T12389] lo speed is unknown, defaulting to 1000 [ 960.290586][T12422] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 960.371944][T12389] lo speed is unknown, defaulting to 1000 [ 960.383307][T12413] chnl_net:caif_netlink_parms(): no params data found [ 960.817074][T12413] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.838793][T12413] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.850093][T12413] bridge_slave_0: entered allmulticast mode [ 960.868980][T12413] bridge_slave_0: entered promiscuous mode [ 960.878815][T12389] lo speed is unknown, defaulting to 1000 [ 960.879917][T12413] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.919326][T12413] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.949225][T12413] bridge_slave_1: entered allmulticast mode [ 960.967074][T12413] bridge_slave_1: entered promiscuous mode [ 961.091272][T12413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.177977][T12413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.329754][T12413] team0: Port device team_slave_0 added [ 961.377440][T12413] team0: Port device team_slave_1 added [ 961.388908][ T5236] Bluetooth: hci7: command tx timeout [ 961.526935][T12389] lo speed is unknown, defaulting to 1000 [ 961.547350][T12413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.568386][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.639796][T12413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.694602][T12413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.726567][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.817320][T12413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.071141][T12413] hsr_slave_0: entered promiscuous mode [ 962.097343][T12413] hsr_slave_1: entered promiscuous mode [ 962.125950][T12413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.153519][T12413] Cannot create hsr debugfs directory [ 962.161699][T12367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 962.184231][T12367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 962.278622][T12389] lo speed is unknown, defaulting to 1000 [ 962.321026][T12367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 962.430547][T12367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 962.599710][T12335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.627467][T12335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.737647][T12335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.895702][T12335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 963.166391][T12413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.470573][ T5236] Bluetooth: hci7: command tx timeout [ 963.527065][T12413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.641933][T12389] lo speed is unknown, defaulting to 1000 [ 963.722008][T12413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.805119][T12367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.891322][T12413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.105495][T12367] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.243417][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.250572][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.385324][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.392637][T10026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.710960][T12335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.010413][T12335] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.053370][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.060531][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.093881][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.101164][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.261476][T12426] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:19: corrupted in-inode xattr: bad magic number in in-inode xattr [ 965.326037][ T5392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.360445][T12427] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 965.428932][T12413] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 965.549633][ T5236] Bluetooth: hci7: command tx timeout [ 965.583582][ T5392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.609957][T12428] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 965.634010][T12413] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 965.635269][T12429] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 965.689438][T12413] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 965.862579][ T5392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.908092][T12413] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 966.072132][ T5392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.115789][T12367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.126406][T12430] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 966.248013][T12431] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 966.385362][T12432] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 966.470031][T12433] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 966.493213][T12434] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 966.554111][ T5392] bridge_slave_1: left allmulticast mode [ 966.571770][ T5392] bridge_slave_1: left promiscuous mode [ 966.577569][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.635290][ T5392] bridge_slave_0: left allmulticast mode [ 966.644601][T12435] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 966.668721][ T5392] bridge_slave_0: left promiscuous mode [ 966.674634][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.784964][ T5392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.829697][ T5392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.858312][ T5392] bond0 (unregistering): Released all slaves [ 967.921488][T12413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.991741][T12436] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 968.248507][T12335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.293784][T12413] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.746103][ T29] audit: type=1400 audit(1723091961.866:1441): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=10.128.0.169 src=44126 daddr=10.128.0.27 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 968.808493][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.815737][ T8364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.876683][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.883956][ T8364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.994315][ T5392] hsr_slave_0: left promiscuous mode [ 969.008112][ T5392] hsr_slave_1: left promiscuous mode [ 969.036124][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.059133][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.069617][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.077066][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.107839][ T5392] veth1_macvtap: left promiscuous mode [ 969.122301][ T5392] veth0_macvtap: left promiscuous mode [ 969.127932][ T5392] veth1_vlan: left promiscuous mode [ 969.153164][ T5392] veth0_vlan: left promiscuous mode [ 970.738918][ T5392] team0 (unregistering): Port device team_slave_1 removed [ 970.932211][ T5392] team0 (unregistering): Port device team_slave_0 removed [ 972.523695][ T6323] smc: removing ib device syz0 [ 972.592978][T12335] veth0_vlan: entered promiscuous mode [ 972.990151][T12335] veth1_vlan: entered promiscuous mode [ 973.073616][T12367] veth0_vlan: entered promiscuous mode [ 973.189976][T12367] veth1_vlan: entered promiscuous mode [ 973.224281][T12335] veth0_macvtap: entered promiscuous mode [ 973.326249][T12335] veth1_macvtap: entered promiscuous mode [ 973.344588][T12440] EXT4-fs error: 3 callbacks suppressed [ 973.344601][T12440] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 973.461076][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.499484][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.558966][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.601715][T12441] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 973.607078][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.689977][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.715919][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.739233][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.751545][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.774920][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.816174][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.830954][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.865209][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.896312][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.918703][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.997873][T12335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.185126][T12442] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 974.210157][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.237775][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.253078][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.264227][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.277544][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.288838][T12443] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 974.321143][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.346722][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.372773][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.394316][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.458819][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.479039][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.510329][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.539252][T12335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.584220][T12335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.637830][T12335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.673249][T12367] veth0_macvtap: entered promiscuous mode [ 974.850506][T12335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.909239][T12335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.917953][T12335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.964475][T12335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.134837][T12413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.165084][T12367] veth1_macvtap: entered promiscuous mode [ 975.618439][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.749789][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.832592][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.867634][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.938649][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.021124][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.069384][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.099612][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.168671][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.189660][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.218660][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.325317][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.378666][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.440001][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.465609][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.488157][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.504811][T12367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.023114][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.059836][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.077846][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.090173][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.129191][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.160636][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.197380][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.210310][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.229740][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.246861][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.257384][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.276598][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.295330][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.308144][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.338686][T12367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.349835][T12367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.374147][T12367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.456312][T12367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.476686][T12367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.490956][T12367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.503766][T12367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.533440][T12413] veth0_vlan: entered promiscuous mode [ 977.635852][ T6323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.645783][ T6323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.665457][T12413] veth1_vlan: entered promiscuous mode [ 977.810334][ T6323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.843451][ T6323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.947407][T12413] veth0_macvtap: entered promiscuous mode [ 977.972178][ T6323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.022209][ T6323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.199027][T12413] veth1_macvtap: entered promiscuous mode [ 978.221870][ T6323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.296089][ T6323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.409892][ T5392] bridge_slave_1: left allmulticast mode [ 978.425983][ T5392] bridge_slave_1: left promiscuous mode [ 978.459677][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.467275][T12446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1999'. [ 978.522556][ T5392] bridge_slave_0: left allmulticast mode [ 978.528271][ T5392] bridge_slave_0: left promiscuous mode [ 978.580714][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.903515][ T9255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 978.918349][ T9255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 978.952927][ T9255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 978.986124][ T9255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 978.995924][ T9255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 979.005311][ T9255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.477537][T12462] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2028'. [ 981.813530][ T5236] Bluetooth: hci1: command tx timeout [ 982.934897][T12479] binder: 12476:12479 ioctl 4018620d 0 returned -22 [ 983.826802][T12472] block nbd0: NBD_DISCONNECT [ 983.869723][ T5236] Bluetooth: hci1: command tx timeout [ 983.883646][T12472] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2031'. [ 983.907276][T12472] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 984.739671][ T5392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.770018][ T5392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.807032][ T5392] bond0 (unregistering): Released all slaves [ 984.901936][ T29] audit: type=1400 audit(1723091978.026:1442): avc: denied { getopt } for pid=12483 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 985.139824][ T29] audit: type=1400 audit(1723091978.256:1443): avc: denied { setopt } for pid=12482 comm="syz.4.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 985.219472][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.311943][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.399933][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.456544][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.496661][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.538711][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.597878][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.713264][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.765003][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.786046][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.878205][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.924845][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.939654][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.950417][ T5236] Bluetooth: hci1: command tx timeout [ 985.989218][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.080021][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.189480][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.212559][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.213835][ T29] audit: type=1400 audit(1723091979.346:1444): avc: denied { lock } for pid=12490 comm="syz.2.2039" path="socket:[46879]" dev="sockfs" ino=46879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 986.292509][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.341543][T12413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.572983][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.614797][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.646573][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.688175][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.748898][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.787759][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.829888][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.859052][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.892415][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.124610][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.135692][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.153101][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.163943][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.175198][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.187528][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.211645][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.349599][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.360267][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.375344][T12413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.395771][T12493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2040'. [ 987.409552][T12493] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 987.525716][T12413] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.586052][T12413] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.597245][T12413] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.611308][T12413] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.069094][ T5236] Bluetooth: hci1: command tx timeout [ 988.602199][T12508] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 988.618973][T12509] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:17: corrupted in-inode xattr: bad magic number in in-inode xattr [ 988.663035][ T29] audit: type=1400 audit(1723091981.796:1445): avc: denied { execute } for pid=12511 comm="syz.4.2046" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=46956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 988.908053][ T5392] hsr_slave_0: left promiscuous mode [ 988.916324][ T5392] hsr_slave_1: left promiscuous mode [ 988.936516][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.961652][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.992677][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.008970][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.139514][ T5392] veth0_macvtap: left promiscuous mode [ 989.155462][ T5392] veth1_vlan: left promiscuous mode [ 989.170798][ T5392] veth0_vlan: left promiscuous mode [ 989.602084][ T29] audit: type=1400 audit(1723091982.616:1446): avc: denied { setopt } for pid=12517 comm="syz.2.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 990.301543][ T29] audit: type=1400 audit(1723091983.426:1447): avc: denied { execute } for pid=12519 comm="syz.4.2049" path="/dev/adsp1" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 990.836641][ T29] audit: type=1400 audit(1723091983.966:1448): avc: denied { mount } for pid=12524 comm="syz.2.2051" name="/" dev="hugetlbfs" ino=47000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 990.953209][ T29] audit: type=1400 audit(1723091984.086:1449): avc: denied { unmount } for pid=12335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 991.527872][ T29] audit: type=1400 audit(1723091984.566:1450): avc: denied { ioctl } for pid=12528 comm="syz.2.2052" path="socket:[47013]" dev="sockfs" ino=47013 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 992.720053][T12535] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 992.801164][ T29] audit: type=1400 audit(1723091985.246:1451): avc: denied { write } for pid=12526 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 993.288708][ T941] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 993.486273][ T5392] team0 (unregistering): Port device team_slave_1 removed [ 993.502087][ T941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 993.533274][ T941] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 993.556471][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.567442][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.577641][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.631814][ T941] usb 3-1: config 0 descriptor?? [ 993.642966][ T941] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 993.682570][ T5392] team0 (unregistering): Port device team_slave_0 removed [ 994.040520][ T941] usb 3-1: USB disconnect, device number 20 [ 996.005598][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.015667][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.279404][ T29] audit: type=1400 audit(1723091989.416:1452): avc: denied { ioctl } for pid=12543 comm="syz.0.2055" path="socket:[44384]" dev="sockfs" ino=44384 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 996.351565][T12546] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:22: corrupted in-inode xattr: bad magic number in in-inode xattr [ 996.511637][T12550] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:22: corrupted in-inode xattr: bad magic number in in-inode xattr [ 996.755543][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 996.795669][ T6332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.851621][ T6332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.946453][T12558] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 997.036347][ T4010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.055349][T12452] chnl_net:caif_netlink_parms(): no params data found [ 997.068340][ T4010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.315394][ T5392] IPVS: stop unused estimator thread 0... [ 1000.559439][T12580] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1000.754818][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1000.804062][ T29] audit: type=1400 audit(1723091993.936:1453): avc: denied { watch } for pid=12582 comm="syz.2.2064" path="/14" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1000.881530][ T29] audit: type=1400 audit(1723091993.936:1454): avc: denied { watch_sb } for pid=12582 comm="syz.2.2064" path="/14" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1000.993044][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.008956][T12452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.039335][T12452] bridge_slave_0: entered allmulticast mode [ 1001.075905][T12452] bridge_slave_0: entered promiscuous mode [ 1001.218297][T12587] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2064'. [ 1001.228123][T12587] unsupported nlmsg_type 40 [ 1002.189996][T12452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.237745][T12452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.271790][T12452] bridge_slave_1: entered allmulticast mode [ 1002.307571][T12452] bridge_slave_1: entered promiscuous mode [ 1002.396724][T12596] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1002.451454][ T29] audit: type=1326 audit(1723091995.586:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12588 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e187779f9 code=0x7fc00000 [ 1002.492414][T12452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.531997][T12452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.555780][T12598] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:17: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1002.585347][ T5277] IPVS: starting estimator thread 0... [ 1002.698804][T12599] IPVS: using max 31 ests per chain, 74400 per kthread [ 1002.743971][T12452] team0: Port device team_slave_0 added [ 1002.791656][T12452] team0: Port device team_slave_1 added [ 1002.928244][T12452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.009047][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.035403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.052453][ T941] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1003.062497][ T29] audit: type=1326 audit(1723091996.186:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12588 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e187779f9 code=0x7fc00000 [ 1003.133380][T12452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.251474][T12452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.288797][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.409611][ T941] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 1003.437368][T12452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.449208][ T941] usb 4-1: config 0 has no interface number 0 [ 1003.487312][ T941] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1003.508232][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.518445][ T941] usb 4-1: Product: syz [ 1004.545389][ T941] usb 4-1: Manufacturer: syz [ 1004.569129][ T941] usb 4-1: SerialNumber: syz [ 1004.575989][ T941] usb 4-1: config 0 descriptor?? [ 1004.739778][T12611] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1005.060510][T12452] hsr_slave_0: entered promiscuous mode [ 1005.114891][T12452] hsr_slave_1: entered promiscuous mode [ 1005.177489][T12452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1005.202113][T12452] Cannot create hsr debugfs directory [ 1005.217727][T10026] usb 4-1: USB disconnect, device number 31 [ 1009.199225][T12626] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1010.904612][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e9d3c00: rx timeout, send abort [ 1011.229348][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 1011.413044][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e9d3c00: abort rx timeout. Force session deactivation [ 1011.520444][T12452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1011.542239][T12452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1011.557255][T12452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1011.576963][T12452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1011.851597][T12452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.891091][T12452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.913949][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.921137][T10026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.965690][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.972959][T10026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.131070][T12644] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1012.297516][T12650] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1012.382951][T12651] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1012.511370][T12654] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1012.608811][ T941] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1012.677355][T12452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.806047][ T941] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 1012.852386][ T941] usb 4-1: config 0 has no interface number 0 [ 1012.939640][ T941] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.969204][ T941] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.981011][T12452] veth0_vlan: entered promiscuous mode [ 1013.015103][ T941] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1013.033138][T12452] veth1_vlan: entered promiscuous mode [ 1013.057301][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.103144][ T941] usb 4-1: config 0 descriptor?? [ 1013.237960][T12452] veth0_macvtap: entered promiscuous mode [ 1013.371926][T12452] veth1_macvtap: entered promiscuous mode [ 1013.590531][T12665] ax25_connect(): syz.0.2088 uses autobind, please contact jreuter@yaina.de [ 1014.362386][ T941] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 1014.362416][ T941] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 1014.362436][ T941] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 1014.362455][ T941] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 1014.362474][ T941] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 1014.362492][ T941] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 1014.362510][ T941] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 1014.367677][ T941] logitech-djreceiver 0003:046D:C71B.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input32 [ 1014.378611][ T29] audit: type=1400 audit(1723092006.726:1457): avc: denied { connect } for pid=12661 comm="syz.0.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1014.488291][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488319][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.488332][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488348][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.488361][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488378][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.488391][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488407][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.488420][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488437][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.488450][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488466][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.488478][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488494][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.488507][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.488523][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.498467][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.498486][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.522510][T12452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.538196][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538220][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538230][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538245][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538261][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538276][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538291][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538301][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538309][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538318][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538329][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538339][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538350][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538360][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538369][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538378][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.538388][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.538398][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.541525][T12452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.566068][T12452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.566101][T12452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.566123][T12452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.566143][T12452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.702333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.179278][ T5278] usb 4-1: USB disconnect, device number 32 [ 1015.305396][T12452] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 1015.483308][T12452] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 1015.490971][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.490996][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.545012][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.545037][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.048553][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1127.048588][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12715/1:b..l [ 1127.049570][ C0] rcu: (detected by 0, t=10502 jiffies, g=85553, q=769 ncpus=2) [ 1127.049585][ C0] task:syz.4.2103 state:R running task stack:28752 pid:12715 tgid:12715 ppid:12367 flags:0x00000002 [ 1127.049621][ C0] Call Trace: [ 1127.049627][ C0] [ 1127.049634][ C0] __schedule+0xe37/0x5490 [ 1127.049708][ C0] ? __pfx___schedule+0x10/0x10 [ 1127.049723][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1127.049742][ C0] ? mark_held_locks+0x9f/0xe0 [ 1127.049758][ C0] preempt_schedule_irq+0x51/0x90 [ 1127.049775][ C0] irqentry_exit+0x36/0x90 [ 1127.049805][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1127.049849][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1127.049872][ C0] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 94 5d 79 7e 65 8b 05 95 5d 79 7e a9 00 01 [ 1127.049886][ C0] RSP: 0018:ffffc9000382f960 EFLAGS: 00000286 [ 1127.049899][ C0] RAX: 1ffff11002fe4858 RBX: 0000000000000000 RCX: dffffc0000000000 [ 1127.049909][ C0] RDX: ffff888022451e00 RSI: ffffffff8b0015ca RDI: 0000000000000005 [ 1127.049919][ C0] RBP: ffff888017f24418 R08: 0000000000000005 R09: 0000000000000300 [ 1127.049929][ C0] R10: 0000000000000300 R11: 0000000000000000 R12: ffff888017f242c0 [ 1127.049939][ C0] R13: 00000092d5026000 R14: 000000000000000f R15: ffffffffffffffff [ 1127.049950][ C0] ? mt_validate+0x296a/0x4390 [ 1127.049986][ C0] mt_validate+0x2993/0x4390 [ 1127.050002][ C0] ? __pfx_mt_validate+0x10/0x10 [ 1127.050016][ C0] ? mas_destroy+0x1fa/0x960 [ 1127.050030][ C0] ? rcu_is_watching+0x12/0xc0 [ 1127.050049][ C0] validate_mm+0x9c/0x4b0 [ 1127.050066][ C0] ? __pfx_validate_mm+0x10/0x10 [ 1127.050082][ C0] ? vma_set_page_prot+0xb1/0x120 [ 1127.050100][ C0] mmap_region+0x13c0/0x2760 [ 1127.050121][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1127.050143][ C0] ? security_mmap_addr+0x8e/0xb0 [ 1127.050158][ C0] ? __get_unmapped_area+0x271/0x3a0 [ 1127.050175][ C0] do_mmap+0xbfb/0xfb0 [ 1127.050194][ C0] ? security_mmap_file+0x192/0x1d0 [ 1127.050207][ C0] vm_mmap_pgoff+0x1ba/0x360 [ 1127.050227][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1127.050250][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 1127.050265][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 1127.050279][ C0] ksys_mmap_pgoff+0x7d/0x5d0 [ 1127.050297][ C0] __x64_sys_mmap+0x125/0x190 [ 1127.050311][ C0] do_syscall_64+0xcd/0x250 [ 1127.050342][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.050361][ C0] RIP: 0033:0x7f6a5c177a33 [ 1127.050375][ C0] RSP: 002b:00007ffd31e8d808 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1127.050389][ C0] RAX: ffffffffffffffda RBX: 00007f6a5a4006c0 RCX: 00007f6a5c177a33 [ 1127.050399][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1127.050408][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1127.050418][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffd31e8d960 [ 1127.050427][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1127.050439][ C0] [ 1127.050447][ C0] rcu: rcu_preempt kthread starved for 10223 jiffies! g85553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1127.050464][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1127.050471][ C0] rcu: RCU grace-period kthread stack dump: [ 1127.050475][ C0] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1127.050504][ C0] Call Trace: [ 1127.050508][ C0] [ 1127.050514][ C0] __schedule+0xe37/0x5490 [ 1127.050529][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1127.050547][ C0] ? __pfx___schedule+0x10/0x10 [ 1127.050561][ C0] ? schedule+0x298/0x350 [ 1127.050576][ C0] ? __pfx_lock_release+0x10/0x10 [ 1127.050591][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1127.050608][ C0] ? lock_acquire+0x1b1/0x560 [ 1127.050624][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 1127.050641][ C0] schedule+0xe7/0x350 [ 1127.050656][ C0] schedule_timeout+0x136/0x2a0 [ 1127.050683][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1127.050703][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1127.050718][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1127.050733][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 1127.050752][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1127.050768][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1127.050782][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1127.050796][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1127.050812][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1127.050827][ C0] rcu_gp_kthread+0x271/0x380 [ 1127.050842][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1127.050857][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1127.050872][ C0] ? __kthread_parkme+0x148/0x220 [ 1127.050894][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1127.050908][ C0] kthread+0x2c1/0x3a0 [ 1127.050920][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1127.050935][ C0] ? __pfx_kthread+0x10/0x10 [ 1127.050947][ C0] ret_from_fork+0x45/0x80 [ 1127.050967][ C0] ? __pfx_kthread+0x10/0x10 [ 1127.050980][ C0] ret_from_fork_asm+0x1a/0x30 [ 1127.051002][ C0] [ 1127.051007][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1127.051016][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1127.051057][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1168.268783][ T30] INFO: task kworker/u8:10:5392 blocked for more than 143 seconds. [ 1168.268824][ T30] Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 1168.268847][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.268857][ T30] task:kworker/u8:10 state:D stack:23296 pid:5392 tgid:5392 ppid:2 flags:0x00004000 [ 1168.268908][ T30] Workqueue: events_unbound flush_to_ldisc [ 1168.268949][ T30] Call Trace: [ 1168.268958][ T30] [ 1168.268970][ T30] __schedule+0xe37/0x5490 [ 1168.269000][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1168.269028][ T30] ? __pfx___schedule+0x10/0x10 [ 1168.269052][ T30] ? schedule+0x298/0x350 [ 1168.269075][ T30] ? __pfx_lock_release+0x10/0x10 [ 1168.269102][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1168.269129][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1168.269159][ T30] schedule+0xe7/0x350 [ 1168.269200][ T30] schedule_preempt_disabled+0x13/0x30 [ 1168.269229][ T30] __mutex_lock+0x5b8/0x9c0 [ 1168.269259][ T30] ? commit_echoes+0x4c/0x210 [ 1168.269284][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1168.269312][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1168.269343][ T30] ? commit_echoes+0x4c/0x210 [ 1168.269367][ T30] commit_echoes+0x4c/0x210 [ 1168.269393][ T30] n_tty_receive_char+0x3d8/0x600 [ 1168.269422][ T30] n_tty_receive_buf_standard+0x6aa/0x3180 [ 1168.269453][ T30] ? down_read+0xc9/0x330 [ 1168.269494][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1168.269523][ T30] n_tty_receive_buf_common+0x8ed/0x1980 [ 1168.269556][ T30] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1168.269585][ T30] tty_ldisc_receive_buf+0xa2/0x190 [ 1168.269618][ T30] tty_port_default_receive_buf+0x70/0xb0 [ 1168.269655][ T30] flush_to_ldisc+0x264/0x780 [ 1168.269698][ T30] process_one_work+0x9c5/0x1b40 [ 1168.269732][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1168.269776][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1168.269808][ T30] ? assign_work+0x1a0/0x250 [ 1168.269836][ T30] worker_thread+0x6c8/0xf20 [ 1168.269869][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1168.269898][ T30] kthread+0x2c1/0x3a0 [ 1168.269920][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.269947][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.269970][ T30] ret_from_fork+0x45/0x80 [ 1168.270004][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.270026][ T30] ret_from_fork_asm+0x1a/0x30 [ 1168.270068][ T30] [ 1168.270114][ T30] [ 1168.270114][ T30] Showing all locks held in the system: [ 1168.270126][ T30] 3 locks held by kworker/0:1/9: [ 1168.270144][ T30] 1 lock held by khungtaskd/30: [ 1168.270159][ T30] #0: ffffffff8ddb5ca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1168.270255][ T30] 3 locks held by kworker/u8:6/1100: [ 1168.270290][ T30] 2 locks held by syslogd/4651: [ 1168.270306][ T30] 1 lock held by klogd/4658: [ 1168.270322][ T30] 2 locks held by getty/4975: [ 1168.270337][ T30] #0: ffff88802b7b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1168.270416][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1168.270493][ T30] 3 locks held by kworker/0:5/5278: [ 1168.270510][ T30] 6 locks held by kworker/u8:10/5392: [ 1168.270525][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1168.270604][ T30] #1: ffffc900033efd80 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1168.270673][ T30] #2: ffff8880158a10b8 (&buf->lock){+.+.}-{3:3}, at: flush_to_ldisc+0x31/0x780 [ 1168.270743][ T30] #3: ffff8880206c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1168.270810][ T30] #4: ffff8880206c72e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_receive_buf_common+0x85/0x1980 [ 1168.270883][ T30] #5: ffffc90002ed9380 (&ldata->output_lock){+.+.}-{3:3}, at: commit_echoes+0x4c/0x210 [ 1168.270951][ T30] 3 locks held by kworker/u8:0/11720: [ 1168.270967][ T30] 5 locks held by syz-executor/11916: [ 1168.270985][ T30] 3 locks held by syz-executor/12413: [ 1168.271003][ T30] 6 locks held by syz.2.2089/12660: [ 1168.271019][ T30] 1 lock held by syz.1.2102/12713: [ 1168.271034][ T30] #0: ffffffff8ddc1438 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 1168.271107][ T30] 1 lock held by vhost-12717/12718: [ 1168.271122][ T30] 2 locks held by syz.4.2103/12715: [ 1168.271138][ T30] [ 1168.271144][ T30] ============================================= [ 1168.271144][ T30] [ 1168.271156][ T30] NMI backtrace for cpu 1 [ 1168.271168][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 1168.271196][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1168.271210][ T30] Call Trace: [ 1168.271220][ T30] [ 1168.271228][ T30] dump_stack_lvl+0x116/0x1f0 [ 1168.271315][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1168.271343][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1168.271376][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1168.271406][ T30] watchdog+0xf4e/0x1280 [ 1168.271438][ T30] ? __pfx_watchdog+0x10/0x10 [ 1168.271466][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1168.271498][ T30] ? __kthread_parkme+0x148/0x220 [ 1168.271531][ T30] ? __pfx_watchdog+0x10/0x10 [ 1168.271560][ T30] kthread+0x2c1/0x3a0 [ 1168.271580][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.271605][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.271626][ T30] ret_from_fork+0x45/0x80 [ 1168.271658][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.271679][ T30] ret_from_fork_asm+0x1a/0x30 [ 1168.271713][ T30] [ 1168.271722][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1168.271751][ C0] NMI backtrace for cpu 0 [ 1168.271763][ C0] CPU: 0 UID: 0 PID: 12718 Comm: vhost-12717 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 1168.271791][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1168.271804][ C0] RIP: 0010:check_preemption_disabled+0x2d/0xe0 [ 1168.271838][ C0] Code: 53 48 83 ec 08 65 8b 1d 6d ec f1 74 65 8b 05 62 ec f1 74 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c <58> f6 c4 02 74 ea 65 48 8b 05 35 ec f1 74 f6 40 2f 04 48 89 fd 74 [ 1168.271860][ C0] RSP: 0000:ffffc9000354fa58 EFLAGS: 00000046 [ 1168.271878][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 1168.271892][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc7c0 RDI: ffffffff8bb08880 [ 1168.271908][ C0] RBP: ffffffff8ddb5be0 R08: ffffffff88763d42 R09: 0000000000000001 [ 1168.271923][ C0] R10: ffffc9000354fc88 R11: 0000000000000000 R12: ffff88801f54da00 [ 1168.271939][ C0] R13: 00000000ffffffff R14: 00000000ffffffff R15: 0000000000000000 [ 1168.271954][ C0] FS: 00007f04250d46c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1168.271977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.271993][ C0] CR2: 0000000000000000 CR3: 000000007726e000 CR4: 00000000003506f0 [ 1168.272007][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1168.272021][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.272036][ C0] Call Trace: [ 1168.272043][ C0] [ 1168.272050][ C0] ? show_regs+0x8c/0xa0 [ 1168.272084][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1168.272112][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1168.272143][ C0] ? nmi_handle+0x1a9/0x5c0 [ 1168.272164][ C0] ? check_preemption_disabled+0x2d/0xe0 [ 1168.272192][ C0] ? default_do_nmi+0x6a/0x160 [ 1168.272226][ C0] ? exc_nmi+0x170/0x1e0 [ 1168.272261][ C0] ? end_repeat_nmi+0xf/0x53 [ 1168.272296][ C0] ? vhost_vsock_handle_tx_kick+0xd2/0xbe0 [ 1168.272320][ C0] ? check_preemption_disabled+0x2d/0xe0 [ 1168.272348][ C0] ? check_preemption_disabled+0x2d/0xe0 [ 1168.272378][ C0] ? check_preemption_disabled+0x2d/0xe0 [ 1168.272407][ C0] [ 1168.272414][ C0] [ 1168.272421][ C0] lock_is_held_type+0x67/0x150 [ 1168.272448][ C0] __might_resched+0x4ca/0x5e0 [ 1168.272478][ C0] ? vhost_vsock_handle_tx_kick+0x12c/0xbe0 [ 1168.272501][ C0] ? __pfx___might_resched+0x10/0x10 [ 1168.272533][ C0] __mutex_lock+0xe2/0x9c0 [ 1168.272561][ C0] ? vhost_vsock_handle_tx_kick+0xd2/0xbe0 [ 1168.272584][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1168.272613][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1168.272641][ C0] ? vhost_vsock_handle_tx_kick+0xd2/0xbe0 [ 1168.272663][ C0] vhost_vsock_handle_tx_kick+0xd2/0xbe0 [ 1168.272687][ C0] ? kcov_remote_start+0x372/0x6e0 [ 1168.272717][ C0] ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10 [ 1168.272740][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1168.272773][ C0] ? kcov_remote_start+0x3d1/0x6e0 [ 1168.272802][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1168.272829][ C0] vhost_run_work_list+0x182/0x210 [ 1168.272860][ C0] ? __pfx_vhost_run_work_list+0x10/0x10 [ 1168.272892][ C0] vhost_task_fn+0x158/0x420 [ 1168.272918][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 1168.272944][ C0] ? ret_from_fork+0x23/0x80 [ 1168.272977][ C0] ? __pfx_lock_release+0x10/0x10 [ 1168.273003][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1168.273034][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1168.273066][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 1168.273093][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 1168.273118][ C0] ret_from_fork+0x45/0x80 [ 1168.273150][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 1168.273176][ C0] ret_from_fork_asm+0x1a/0x30 [ 1168.273212][ C0] [ 1168.273749][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1168.273762][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 1168.273789][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1168.273802][ T30] Call Trace: [ 1168.273810][ T30] [ 1168.273819][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1168.273852][ T30] panic+0x6f5/0x7a0 [ 1168.273878][ T30] ? __pfx_panic+0x10/0x10 [ 1168.273902][ T30] ? __pfx__printk+0x10/0x10 [ 1168.273928][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1168.273959][ T30] ? __irq_work_queue_local+0x136/0x440 [ 1168.273988][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1168.274018][ T30] ? irq_work_queue+0x2a/0x80 [ 1168.274044][ T30] ? watchdog+0xd8a/0x1280 [ 1168.274072][ T30] ? watchdog+0xd7d/0x1280 [ 1168.274101][ T30] watchdog+0xd9b/0x1280 [ 1168.274130][ T30] ? __pfx_watchdog+0x10/0x10 [ 1168.274158][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1168.274184][ T30] ? __kthread_parkme+0x148/0x220 [ 1168.274216][ T30] ? __pfx_watchdog+0x10/0x10 [ 1168.274243][ T30] kthread+0x2c1/0x3a0 [ 1168.274264][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.274288][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.274309][ T30] ret_from_fork+0x45/0x80 [ 1168.274339][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.274360][ T30] ret_from_fork_asm+0x1a/0x30 [ 1168.274392][ T30] [ 1168.274724][ T30] Kernel Offset: disabled