last executing test programs: 21m22.715698842s ago: executing program 32 (id=443): personality(0x500006) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0x980929, 0x6}) r9 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) unshare(0x26020480) unshare(0xe000480) 20m26.115245062s ago: executing program 33 (id=703): syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) memfd_create(0x0, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 19m51.878317157s ago: executing program 34 (id=748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="24002d80080002000300000005000100000000000500040009000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x900}, 0x0) 19m51.771038697s ago: executing program 35 (id=746): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x2000c000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0x10}, &(0x7f0000000300)=""/43, 0x2b, &(0x7f0000000340)=""/13, &(0x7f00000003c0)=[r2], 0x1}, 0x58) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0xffffffffffffff6a, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="f5e30000", @ANYRES16=0x0, @ANYBLOB="040029bd700000dcdf25380000000c0099000c000000270000000c0058000e000000000000000c0058003b00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000040) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff02}, 0xff000000, r7}) copy_file_range(r4, &(0x7f00000004c0)=0x2, r5, &(0x7f0000000500)=0x100000000002, 0xde3a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x2) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 19m51.361210458s ago: executing program 36 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x8, 0x42, @mcast2, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10, 0x7800, 0x9, 0xf7}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @loopback}, @local, @mcast1, 0x1, 0xf, 0x5fdf, 0x0, 0x1, 0x0, r4}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004000090000000000ffffff0f03000000080002", @ANYRES32=r7], 0x1c}}, 0x0) 19m34.298432816s ago: executing program 37 (id=756): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x18, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x7}) 16m2.653132445s ago: executing program 38 (id=1086): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)={0x1}) dup(r0) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f0000002480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ed00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xc0}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) readahead(r3, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000200060000000e64bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xc92) 16m1.216911051s ago: executing program 39 (id=1092): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x30, @string={0x30, 0x3, "0d6624af4157702ffd87ed3e50161f988fbf081599f04b088bc85b744f5ffd6c11037cfd3f3ebed739290f6e3e4e"}}, &(0x7f0000000400)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x1, 'a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 15m53.492087266s ago: executing program 40 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 15m53.365479886s ago: executing program 41 (id=1090): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ppoll(&(0x7f0000000200)=[{r2, 0x8205}, {r5, 0x2580}], 0x2, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0xfff]}, 0x8) r7 = accept(r4, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) socket$inet_udp(0x2, 0x2, 0x0) 15m53.162230066s ago: executing program 42 (id=1091): socket$inet6(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x364, 0xd646, 0x7, 0xf, 0x120000, 0x40000000000001ff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x10003, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)="92c32d04a5b7fcddc7d46ef87ee7ae0596cee4ef0dbd18b287f67e930f40fd29c6d9e18c2d2208b4e2b1212258905910906328c32379eaea8929e8995f545631a0f82da9bf8c7dce3b910fae641b24410002ac7e107eec27293d1364753ca464814d921314adf61b345858b67fa15dbdd02ebadee7dfd491cb", 0x79}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000240)="32e239abb7036bf5be3a5c2101e1bcfe089fe93712461bcc6cada7cb4227055072862c0d4370fa5c1bc36ea02f2d6fe776b49b78d74c5f431c6a013b124904a6c81af00617a694842adb085efbc981b07d2ab5", 0x53}, {&(0x7f0000000300)="566c251dcf03c20072e0501b449e93922d0aabfb9be0315bfda8ca8bc77564862812958c50af95189d2c09caa0ae66c29f4d7e5e58de23490161797c0830a5f9f2e06cdf0aa8d3a9b3a268af172e55d6846da8593d4caa0a0c22824302aa", 0x5e}, {&(0x7f0000000380)="7393785ee216c1161e001dcaba6668861aff3b5fce80f13beb2fc8274a77bb5770d12ff55e563cb2478dba8566f9ef9cb9d9949c5b0d154fbb0880fd8846d98f6d6cd15c98d3ba40ff5741561fbd75fe1b87afd56e3ab5e6083b66a2", 0x5c}, {&(0x7f0000000440)="eddde24a", 0x4}, {&(0x7f00000004c0)}], 0x8}, 0xc081) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82041003d000100fb00030006001f0f07040000080700ee080400090009001001040007000c0006020400"], 0x46) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 14m24.366128536s ago: executing program 43 (id=1306): syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x3, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x795fe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x12, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900030073797a32000000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c0004802000018007000100727400001400028008000140000000150800024000000081"], 0xd8}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020400000400000000000000fddbdf2502000100000000000000fb030000000015d2efb728de109999cac2a43d16ca81ec1c04abb2d0971ee7dfc6887823e7429fbc4e027d9bbd20d37caeb685ecf08ede02a20d496674e77a2d4d99e44aa373631fa6afc7fbb2d854f3f4b0ae29d9aa7f73c59ee5df31e55264f17452959a0fe4966f868cebf0eadc47d35f68068434b1817d5544739bfb5b6004f653bca9ad322ed29d7392a7608fe54934611c9b0290a3897f4696da7a469a4e76ac39b9dcdf475d814895e5072ace66df35"], 0x20}, 0x1, 0x7}, 0x488d0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setns(r2, 0x24020000) syz_clone(0x1f2506000, 0x0, 0x16, 0x0, 0x0, 0x0) 13m54.447149744s ago: executing program 44 (id=1348): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x3, "abacd211119ca95c63377526d1c0f7e9faac3ca507558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"ffbced09556f058e1f9d6393a2bc78b54cc68dffb3b42986ace1b8ae9aa3d493", r4}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYRESHEX=r5], 0x6c}}, 0x840) 13m47.789433704s ago: executing program 45 (id=1353): io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xfffffffffffffffe}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "b49e016225be4279fbde4749573e7c17d3fff500", 0xb5315258}) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x321401, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8924, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) (async) ioctl$TUNSETSNDBUF(r10, 0x400454d4, 0x0) write$cgroup_subtree(r10, 0x0, 0x4a) (async) ftruncate(r9, 0x2007ffd) sendfile(r7, r8, 0x0, 0x1000a3) (async) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 13m23.388022498s ago: executing program 46 (id=1368): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x800000, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0x220d1}, [@IFLA_AF_SPEC={0xc, 0xc, 0x0, 0x0, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x8040) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) socket$key(0xf, 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000040)=0x80, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0xf0f003, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x7, 0xffff, 0x71808, r4, 0x4, '\x00', r6, r8, 0x3, 0x2, 0x2, 0x1, @void, @value, @value}, 0x50) lseek(0xffffffffffffffff, 0xae7e, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001680)={{}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 13m11.8834404s ago: executing program 47 (id=1371): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = msgget$private(0x0, 0x2) msgsnd(r5, &(0x7f0000000500)=ANY=[], 0xb1, 0x0) msgctl$IPC_RMID(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3, @ANYBLOB="5dd97ace", @ANYRES32=r8, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r10, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 8m38.037726396s ago: executing program 4 (id=2049): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x7}, 0x10) 8m38.037349729s ago: executing program 6 (id=2050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f000000, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8m38.024841154s ago: executing program 4 (id=2052): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000feff00000080000004330000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xabb2c7ad1bb3828c, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0xe1e6, 0x1400000, &(0x7f00000005c0)="ef7f0da2409e8e28cc8aa5f8bf93d935c98f8a8bc2ba495507659b4d0ae60a3cf2176b0cfa166e223627aae646d74cb3deb08e81302498c35fdcc9433641d2b4f5234a0f05250ae2cc070fbbc96052f49f8a9427"}) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r7 = fanotify_init(0x0, 0x400) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r7, 0x1, 0x40001019, r6, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460e00f6b7028000000000000002000300fffeffff61c1669a70d042d89915ab12652a00df020000000000004000000000000000030300000000000000000000040038000100040004000d000200000002000000030000000000000081000000000000000200000000000000b107000000000000040000000000000008ef000000000000cc613171b7f94d4bd4c720d062fcadbe9ad835a9664e856e6dbabf875f61a1c5c258216b6fca76b02324490e32ddf7ac8625ab760776f481531a0e760aa42a8a9f533be4d5202c7d089adff08efdf6d027"], 0xd8) read$FUSE(r6, &(0x7f0000003fc0)={0x2020}, 0x1d34) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/fscreate\x00') 8m36.644610303s ago: executing program 4 (id=2054): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x6, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x7e) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8, 0x23}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 8m36.611727347s ago: executing program 8 (id=2055): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x400000, 0x1}}, 0x3c) 8m36.225265882s ago: executing program 8 (id=2057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048004) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@multicast2, @dev, 0x0}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xfc, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={r8}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000000)={r12, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000080)={r13}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={r13}) 8m35.743408792s ago: executing program 6 (id=2058): syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x166640, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x950, &(0x7f0000000600)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 8m35.646146538s ago: executing program 8 (id=2059): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01001f00010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 8m35.062191079s ago: executing program 8 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x20, 0x72, 0x333, 0x8, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 8m34.96173386s ago: executing program 6 (id=2061): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f00000001c0)=0x2f, 0xb) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000003, 0x501) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="6a2378b87b4d2ffb792a959cae48f85ec927c86036d4457ec475c5397457cfd4fdbf01ca191f6e876df0feebae2d54", 0x2f}, {&(0x7f00000000c0)="90d12a4362e6afb2350710e8e651def070a32bb3ef76ea85b304ab639c4758f362d4c7bc6d40", 0x26}, {&(0x7f0000000200)="2bcb7f44643a4e005a8ff97c4f09255c069063f23aa860f7d465ccceb18bd8539bba44146d101399505719f5e7372c47f78eec207b27ab66465e954a885f860a52964150d0c785a6782e06b776c9dbf75b6053ac6ee563ba7bc249662dce8da921f1c5ff05c964919c03070daf02d51c0c629508f89ccf91b171b4ae3cd21b489ead41d6226e52d74de8d6f5ce8098dd95fa80233c125f3143c506e3de972a5b71822c6a8d98d54235ef0a8f2fbd77f8322b49ec58683e988ccde83da5a548eef76cbd4aee", 0xc5}, {&(0x7f0000000300)="b66a852587e5e51fd6e89bea0a46165697b47de47688a63d8dfd926a1c859863d2ca3d1b8ebd441861ad", 0x2a}, {&(0x7f0000000340)="413fcb148d26cbed280963d712a6747a67338647ae410ee3833bacca3d7809fc1ebbd0c22ce362ab5b933124058309e0c689cb7408e778a6a90a1c173957b6ba78faab725682f13b2ea7800b441e635b087c1e30a47db38ea95b7a78892311fb1384f333a3db6c0adb6225ed67d2c601715ee4f0", 0x74}, {&(0x7f00000003c0)="3e1975b69ca4eca8f63c9b4a3cc3961806afdd96c993394daff9253197070787ec0f29ae36c6b3cc2669712538383d28d02af7249cbfcca13e2f6005939fc681ac320c44009217b75f39a64f9b4ecfcdd5c7", 0x52}], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffc, 0x3bd}) socket(0x28, 0x1, 0x0) socket(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) creat(&(0x7f0000000280)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x1000000, 0x2c, @empty, @mcast2, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 8m34.190289162s ago: executing program 6 (id=2064): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000060e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 8m33.659717462s ago: executing program 8 (id=2066): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20c100, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r5, 0x40204706, 0x20000004) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r1, &(0x7f0000004d80), 0x493, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000900040004000180"], 0x18}}, 0x0) bind$netlink(r0, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r7, 0x6a, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r8, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffd) socket$inet_mptcp(0x2, 0x1, 0x106) 8m33.597993294s ago: executing program 6 (id=2067): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0xe4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e79, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x9c, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x5b, 0x6, "4092bf9ab93cd279792db9830681ed70a2a122de71334df6308bed1b1a2bbfc0334584f9786942ed5a7fdd8a4fb17cd390752c54a35e434449723b78835b06bec0ee1c5c3eace025371c0959d2b74802e6ddd6ae92de65"}, {0xc}, {0xc}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x804}, 0x408c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@index_off}]}) getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000440)=""/198, 0xc6) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='fscache_volume\x00', r2, 0x0, 0xfffffffffffffffc}, 0x41) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) 8m33.495019018s ago: executing program 4 (id=2068): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x202) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xe, 0x40, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x1, 0x0, 0x7}}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x80, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006640)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) mount(&(0x7f00000005c0)=@filename='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='vfat\x00', 0xa08002, &(0x7f0000000680)='@+}+\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @multicast1}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9ad6999908de7bcb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x9084}, 0x80) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x100, 0x6) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000fc0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="7f", 0x1}], 0x1}}], 0x2, 0x20040044) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) 8m29.306428901s ago: executing program 9 (id=2070): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d4000000000000000000fff5000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e6430"], 0x4b0}}, 0x0) 8m29.305130771s ago: executing program 6 (id=2071): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000240a4d59", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001b40)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)="d4b1e5", 0x3}, {&(0x7f0000000340)="ffa06b8d04a73d8db6fa589d57cabec19a7028a9be95a0789294c731a04c643d3478eefe5b45e17bc08d54ce29f7afe61cda1e75d671789b028775d432e05426be93d8b5505df0600885a914cdac968515eadcaa180e4e5d8888bf6021f5a2d3b97ef121fbf7d570951b72046fac0e10f5444956798488f3a5386abc34a3f102c1e9ada03177c6cdebbbdff32318cccc0219a3a16e3fdeb8d206e15ab50096f08ffdc268051b32a2833009209a3340dcd0cf7e1c1345a09416faec1c20819110eef33d19030f9e30", 0xc8}, {&(0x7f0000000440)="2037d072a0fcc032d0c53549360a28a6b6c85a241df046ca22c6ac245a50b6b72715c9b03d51f5a9c942e9409a58d1930d1096342ed2dc93dcb66937c5c0fc9207d8842ec191ed0609c22b67254bb13a43040233f6595dbee22713ea608d897e8562b28017afe7f0d222f9edca", 0x6d}, {&(0x7f0000000580)="44838d84337b8e976d91f2b207119f804941a3d87a2de0182e3d18ef0a41d21140528b5574ccc80c7edc4762bfb789f21ca795565d3d6de015662afad2080af14ba5875683080653af0751e93c189182d116a22089bc41adc517ecbf5327f20219d5bad9e1be93f1b68b1e243d94d4f93ca20e6988ad88bd65461c98f9ccca552e1adeeeee7d543c3f03945f01d04ada6fb56b05c27e7b60eccdb961554a3be789f2a0e0952c7ace3002891d217a84", 0xaf}, {&(0x7f00000006c0)="b1eb85ef31b9a04fc13d0949123cd2c7c73887cb9b526fc4971165a4a52afa6ac8c96ddb422a6d4bcf5f19c3d332d52fa4c8aa1f288120d0b23b731769f1d88102831965fa6d4c1a0c82e5b6fdb76adcabf1a547e178dc59847c497f6d9a68102604643c451a73aee2e4480be550666f526bd81a986d1cd57ba5a6059970690a114cefe5f472ca147cbff4537eba92690bd38bd62b6c3c5a47a6bb5f5dd81a43556e735e277b2a2080edebc38e65b4b16bc9df1d95f7fe23084dc8d8d006cfc66c40eecc9b3d0ac4d97badc553341b3244e222079eaab95c1c8d2d153ecec5db29efe432c6abb6c48c87043a", 0xec}, {&(0x7f00000007c0)="13a66ec7ac2c1b926394864c102a240ea40d66bd0170c29e4ae7ecf65890936811322700897e57c4812850745a12b1642071a886a996f70e934af6d827adeb0386289d2e7d34b21eb50751f5b9caccb966030f064df1e58fc20545c8931483d30c74be4517e7f4bea11f58a8d4a575eef658aaea556f5ca789168af2f8a0ba237eca0657a4", 0x85}, {&(0x7f0000000980)="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", 0x1000}], 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="24000000000000000100000010000000", @ANYRES16=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES16=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3a, &(0x7f0000000040)=0x7, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r5, 0x0, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='jbd2_update_log_tail\x00'}, 0x18) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r6, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x24b1cd8b) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0x4004) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006067c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x6000}, 0x4000) 8m28.922266818s ago: executing program 9 (id=2072): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="ff0100000000000000000100000004000480080002000100030008000100000000008000088014"], 0xc4}, 0x1, 0x0, 0x0, 0x8080}, 0x20044414) 8m28.887355145s ago: executing program 4 (id=2073): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x7}, 0x10) 8m28.131616785s ago: executing program 9 (id=2075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @empty}, 0x1c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000000}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000080)={0x8, [0x9e0, 0x6, 0x200000, 0x100000001, 0xbe, 0x9, 0xff, 0x8000]}) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, 0x0, 0xb5) socket$unix(0x1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x803, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$sndpcmc(&(0x7f0000002600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r8, 0xc0844123, 0x20000000) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x23b, 0x0, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r9, 0xc06c4124, 0x0) 8m28.078468973s ago: executing program 4 (id=2076): io_setup(0x1, &(0x7f0000000100)=0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xc000000, 0x3, 0x2, 0x4, 0x8, 0x2, 0x39]}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4, 0x400, 0xffffffff, 'pptp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r1 = syz_io_uring_setup(0x111, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00010000000000"], 0x2c}}, 0x4014080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt(r4, 0x9, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x22) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_destroy(r0) 8m27.662256429s ago: executing program 7 (id=2077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000500000000ff00004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008ba9ffffffffffffbf91000000000000b7020000010000108500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) 8m25.891305197s ago: executing program 8 (id=2078): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x6, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x7e) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8, 0x23}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 8m24.966960674s ago: executing program 7 (id=2079): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, 0x0, 0x0) 8m24.527358484s ago: executing program 7 (id=2080): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m23.814329387s ago: executing program 9 (id=2081): socket$alg(0x26, 0x5, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000019080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r3, &(0x7f0000000780)={0x2020}, 0xffffff6b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000002c150100000000000000000204000080"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) 8m23.646029579s ago: executing program 7 (id=2082): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x44) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x9324, 0x400, 0x2, 0xfffffdfb}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) read(r0, &(0x7f0000000100)=""/245, 0xfffffe83) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./bus/file0\x00', 0x59) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) r4 = dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x0) connect(r4, &(0x7f0000000200)=@llc={0x1a, 0x305, 0xc0, 0x6, 0x3, 0x1, @multicast}, 0x80) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="75d43e5ae605f91caaff283602c52ac9a39f6adc7d57e7720ded87556b366131883f4cc11c86480d5faf6f41912077fa01aa397867564926fd4c25e0d5108432805aa3ef4b9a80f6dfd0c4d373359f924748386ab9589c5e5874637caef4c41dee6e8b228da4bc9bb436675e470701519b07809626fb952a53952c8c861a294dc090383dbb3183cd7738719866f6673c3b1583bfd0734de60defa41f81b0", @ANYRES16=0x0, @ANYBLOB="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"], 0x410}}, 0x20040845) open(&(0x7f0000000180)='./bus\x00', 0x12000, 0x18a) listen(r5, 0x0) pidfd_getfd(r3, r0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 8m22.808579711s ago: executing program 7 (id=2083): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906e54a00000000000000000200ffff200007800c00018008000140e000000208000a000000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0xf500) 8m22.530269299s ago: executing program 9 (id=2084): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1fff}, 0x0) 8m22.378408764s ago: executing program 7 (id=2085): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='iso9660\x00', 0xc002, &(0x7f0000000280)='gre0\x00') syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=interleave=statc:']) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x2, 0x10a5, 0x3, 0x0, 0x0) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0xefff, 0x0, 0x0, 0x2}}, 0x0, 0xfffffffffffffecb, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$VIDIOC_G_EDID(r9, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x0, '\x00', &(0x7f0000000040)=0x1}) 8m22.015834111s ago: executing program 9 (id=2086): socket(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x17}, {0x0, 0x1}}}, 0x24}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000380)=""/73, 0x49}], 0x5}}], 0x2, 0x10002, 0x0) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000001c0)={r0, 0x2, 0xa}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x52}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r7, 0x12e, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000036c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x2) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="fe4a9da915358c"]) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) 6m53.055218244s ago: executing program 48 (id=2086): socket(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x17}, {0x0, 0x1}}}, 0x24}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000380)=""/73, 0x49}], 0x5}}], 0x2, 0x10002, 0x0) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000001c0)={r0, 0x2, 0xa}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x52}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r7, 0x12e, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000036c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x2) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="fe4a9da915358c"]) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) 6m35.064428757s ago: executing program 49 (id=2076): io_setup(0x1, &(0x7f0000000100)=0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xc000000, 0x3, 0x2, 0x4, 0x8, 0x2, 0x39]}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4, 0x400, 0xffffffff, 'pptp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r1 = syz_io_uring_setup(0x111, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00010000000000"], 0x2c}}, 0x4014080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt(r4, 0x9, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x22) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_destroy(r0) 6m34.094100262s ago: executing program 50 (id=2078): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x6, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x7e) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8, 0x23}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 6m33.960312144s ago: executing program 51 (id=2085): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='iso9660\x00', 0xc002, &(0x7f0000000280)='gre0\x00') syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=interleave=statc:']) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x2, 0x10a5, 0x3, 0x0, 0x0) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0xefff, 0x0, 0x0, 0x2}}, 0x0, 0xfffffffffffffecb, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$VIDIOC_G_EDID(r9, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x0, '\x00', &(0x7f0000000040)=0x1}) 6m33.832332424s ago: executing program 52 (id=2071): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000240a4d59", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001b40)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)="d4b1e5", 0x3}, {&(0x7f0000000340)="ffa06b8d04a73d8db6fa589d57cabec19a7028a9be95a0789294c731a04c643d3478eefe5b45e17bc08d54ce29f7afe61cda1e75d671789b028775d432e05426be93d8b5505df0600885a914cdac968515eadcaa180e4e5d8888bf6021f5a2d3b97ef121fbf7d570951b72046fac0e10f5444956798488f3a5386abc34a3f102c1e9ada03177c6cdebbbdff32318cccc0219a3a16e3fdeb8d206e15ab50096f08ffdc268051b32a2833009209a3340dcd0cf7e1c1345a09416faec1c20819110eef33d19030f9e30", 0xc8}, {&(0x7f0000000440)="2037d072a0fcc032d0c53549360a28a6b6c85a241df046ca22c6ac245a50b6b72715c9b03d51f5a9c942e9409a58d1930d1096342ed2dc93dcb66937c5c0fc9207d8842ec191ed0609c22b67254bb13a43040233f6595dbee22713ea608d897e8562b28017afe7f0d222f9edca", 0x6d}, {&(0x7f0000000580)="44838d84337b8e976d91f2b207119f804941a3d87a2de0182e3d18ef0a41d21140528b5574ccc80c7edc4762bfb789f21ca795565d3d6de015662afad2080af14ba5875683080653af0751e93c189182d116a22089bc41adc517ecbf5327f20219d5bad9e1be93f1b68b1e243d94d4f93ca20e6988ad88bd65461c98f9ccca552e1adeeeee7d543c3f03945f01d04ada6fb56b05c27e7b60eccdb961554a3be789f2a0e0952c7ace3002891d217a84", 0xaf}, {&(0x7f00000006c0)="b1eb85ef31b9a04fc13d0949123cd2c7c73887cb9b526fc4971165a4a52afa6ac8c96ddb422a6d4bcf5f19c3d332d52fa4c8aa1f288120d0b23b731769f1d88102831965fa6d4c1a0c82e5b6fdb76adcabf1a547e178dc59847c497f6d9a68102604643c451a73aee2e4480be550666f526bd81a986d1cd57ba5a6059970690a114cefe5f472ca147cbff4537eba92690bd38bd62b6c3c5a47a6bb5f5dd81a43556e735e277b2a2080edebc38e65b4b16bc9df1d95f7fe23084dc8d8d006cfc66c40eecc9b3d0ac4d97badc553341b3244e222079eaab95c1c8d2d153ecec5db29efe432c6abb6c48c87043a", 0xec}, {&(0x7f00000007c0)="13a66ec7ac2c1b926394864c102a240ea40d66bd0170c29e4ae7ecf65890936811322700897e57c4812850745a12b1642071a886a996f70e934af6d827adeb0386289d2e7d34b21eb50751f5b9caccb966030f064df1e58fc20545c8931483d30c74be4517e7f4bea11f58a8d4a575eef658aaea556f5ca789168af2f8a0ba237eca0657a4", 0x85}, {&(0x7f0000000980)="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", 0x1000}], 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="24000000000000000100000010000000", @ANYRES16=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES16=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3a, &(0x7f0000000040)=0x7, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r5, 0x0, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='jbd2_update_log_tail\x00'}, 0x18) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r6, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x24b1cd8b) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0x4004) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006067c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x6000}, 0x4000) 1m30.039645011s ago: executing program 0 (id=2935): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f00000000c0)='\x02', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(r1, &(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x6e, 0xc1, "52eb1bd21b5298f46774195d70b42d89c81a06a866688e07e90a0dd79ec5c0800f4113badc3503fbd4e016309adeda9da44221ed2470504383909d1986b12b", 0x2f}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newlink={0x54, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x54}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) futex(0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffc) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) connect(r2, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x7ca8e000) writev(r4, &(0x7f0000000080)=[{0x0}], 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)=',\'[-}\xcc)$!\x00', &(0x7f0000000240)='$\x00\xc1\"\x00\xfa%\x1a\xc3\xd1w\x14\xf3\xe4r\xdc\xd2\xf7\xa7\xf7\xd9\'7\xce\xdb\xcc\xecF\xf4\xaeJ\x01\xaf\xf3\xb3\x14\xc2\xca\xd9\x1cTUzQ\xc4\t', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x800}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) 1m27.286603979s ago: executing program 0 (id=2941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x9000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1m25.87456254s ago: executing program 0 (id=2943): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x800, 0x0, 0x2}, 0x20) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) tkill(r1, 0xf) ptrace(0x4207, r1) 1m25.779021812s ago: executing program 2 (id=2945): io_setup(0x1, &(0x7f0000000100)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'netdevsim0\x00', 'vcan0\x00', {}, {0xff}, 0x29, 0x2, 0xf4bad0a9417c91a7}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xc000000, 0x3, 0x2, 0x1, 0x8, 0x2, 0x39]}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xd, 0x4, 0x400, 0xffffffff, 'pptp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt(r2, 0x9, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r4, &(0x7f00000002c0)=""/4096, 0x1000) 1m23.309259193s ago: executing program 3 (id=2949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x4000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 1m22.834654088s ago: executing program 0 (id=2950): unshare(0x20020000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffb) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus\x00', 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) dup2(r1, r2) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0x0, {0x4, 0x6, 0xfffffffd}}}}]}, 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x4, 0x1, 0xac, 0x9, 0x30, @local, @loopback, 0x7, 0x7808, 0x2, 0x8c4}}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd70000200000018000000050005000000000008000700ffffffff08000700089f000005000600000000003c0001801400020076657468315f6d6163767461700000001400020076657468305f746f5f62726964676500080003000100000008000100", @ANYRES32=r7, @ANYBLOB="28000000000000008030ffef7dd6f742ca49c187181ca559366851747a5a43e6880670d9d14004bee1825a66373ae41ad6f9f5722f1eb7863e3f99c971879e062f22"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4040050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010051000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) 1m22.782642063s ago: executing program 3 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3f, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 1m22.599111674s ago: executing program 2 (id=2952): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1840f30c74013bbc0000000109c6f84b94000000000904000001a76d6c5e2948745be10200bbb7f11ccfbfcabe2a07699442e1dbc9193fdb6dae687c97d00b59fd937dc8a08179eb27b0a76bcc38dd83827268a4049db2afceaede73c389be9d9713285a1dca49e6d5738a02c90a6174fbd799b25117ea85f7cb319ede13f458f941ebce58e793c6e068ffdef07dcbd071b9b7afb2ccec52abac9d46e77320f7903b7ece5334790953a64f49cb8a7b326f3ef19f9c1d256cdde7a055d70226bd28d76b254f85465f0097f0c7c7b0e670c24d254c3c3011a337f3394f95e330737a"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1m22.089980753s ago: executing program 3 (id=2953): syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) io_destroy(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000005c0)=0x1, 0x4) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000001580)="3186", 0x2}], 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0x10f) 1m21.239562151s ago: executing program 0 (id=2954): pipe(&(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x9, 0x32000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000015c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x0, 0x800}, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 1m20.33535946s ago: executing program 3 (id=2955): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x2) socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffff000, 0x0, 0x400}, 0x0, &(0x7f0000000380)={0x3ff, 0x6}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m19.77338714s ago: executing program 0 (id=2958): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x2f8c, &(0x7f0000000180)={0x0, 0xb0e6, 0x4, 0x1, 0x3d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000e15a45c8de218bf962a185122c9d0067719b2378b91aa46ea44437b4feff6b06e0632565e7ef3d3d0246f0f55e54525d2f6579ffde4a980ca327c989917eb55980b94cb56077ca98063f444f860b2f3d1a3065a7b9137dd10c954a459f30e94a92340cfc61f4d57b1cfc2a2e5aa53f2d22f1a41f62d76d7564e59286183e72c4ff00e9f2962c0686970568add4ef79fb2ad1cce4d5ce7a2265f24ebc0f07d5e9a7cb6944d2bba5dda6a0213ce57ad5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000833000/0x3000)=nil, 0x3000}) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x42000000) 1m19.00633502s ago: executing program 2 (id=2959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) 1m18.181705904s ago: executing program 3 (id=2960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 1m17.066418033s ago: executing program 2 (id=2961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r1, 0x4000, r1}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_selinux(r2, &(0x7f0000000040), &(0x7f00000000c0)='unconfined\x00', 0xb, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 1m15.532572632s ago: executing program 3 (id=2962): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x541b, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x100) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000ffa100000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r10, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad991709"], 0x2c}}, 0x0) 1m15.346198915s ago: executing program 2 (id=2963): syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000186dd60f91e2e00383c00fe880000000000000000000000000001ff02000000000000000000000000000167000000000000004e2100000401907800716a0100cc1978bfea6d397a22f47c03ede36a57180aecd805bd6e90c2c85be9a93a117ded01ce"], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d090000010100000000090400000000343dfb1553dcd11edaacf99f079b2cda286e3c80cb6f1a0413890b686df253807ced7c1f44dc37181e1a8e7d2c9c82d6993247f2d11543d0953f2b5569bf63acef1cf45cda231ac7cfc422dd0388581c522460d922cbe12f2bda91f2"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40}, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r3, 0x0, 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000042c0)={0x5}) 1m11.258642787s ago: executing program 2 (id=2970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xc000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1m9.189783118s ago: executing program 1 (id=2973): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000f8000001294", 0x2e}], 0x1}, 0x0) 1m3.308803562s ago: executing program 53 (id=2958): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x2f8c, &(0x7f0000000180)={0x0, 0xb0e6, 0x4, 0x1, 0x3d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000e15a45c8de218bf962a185122c9d0067719b2378b91aa46ea44437b4feff6b06e0632565e7ef3d3d0246f0f55e54525d2f6579ffde4a980ca327c989917eb55980b94cb56077ca98063f444f860b2f3d1a3065a7b9137dd10c954a459f30e94a92340cfc61f4d57b1cfc2a2e5aa53f2d22f1a41f62d76d7564e59286183e72c4ff00e9f2962c0686970568add4ef79fb2ad1cce4d5ce7a2265f24ebc0f07d5e9a7cb6944d2bba5dda6a0213ce57ad5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000833000/0x3000)=nil, 0x3000}) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x42000000) 59.301787127s ago: executing program 54 (id=2962): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x541b, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x100) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000ffa100000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r10, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad991709"], 0x2c}}, 0x0) 54.206948811s ago: executing program 55 (id=2970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xc000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 53.957591251s ago: executing program 1 (id=2979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2020}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x50}}, 0x0) 53.215311738s ago: executing program 1 (id=2980): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x4) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r3, 0xaf5, 0x0) 52.473897748s ago: executing program 1 (id=2981): pipe(&(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x9, 0x32000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000015c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 50.404984573s ago: executing program 1 (id=2982): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x199) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffff07], 0x0, 0x0, 0x0}, 0x1e8) 49.16602447s ago: executing program 1 (id=2984): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f040000800700000003000000040000800000000000000000000400040000000000"], 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000180)='./file1\x00', 0x8) close(r4) read$FUSE(r4, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) read$hidraw(r3, &(0x7f0000000380)=""/33, 0x21) write$FUSE_INIT(r4, &(0x7f00000002c0)={0x55, 0x0, r5, {0x7, 0x1f, 0x0, 0x108b, 0x0, 0x8, 0x2}}, 0x50) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x9, 0x2000, 0x80, 0x5, 0xfffff6f5, 0x7fffffff, 0x0, 0x0, 0x40, 0x127d}}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r3, 0x0) 33.11681825s ago: executing program 5 (id=2993): socket$inet(0x2, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) creat(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000340)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x54}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000ff0f00000400000005010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xe, &(0x7f0000000480)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x2, 0x6, 0x7, 0x5, 0x101}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r5, 0x1, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 33.036892245s ago: executing program 56 (id=2984): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f040000800700000003000000040000800000000000000000000400040000000000"], 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000180)='./file1\x00', 0x8) close(r4) read$FUSE(r4, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) read$hidraw(r3, &(0x7f0000000380)=""/33, 0x21) write$FUSE_INIT(r4, &(0x7f00000002c0)={0x55, 0x0, r5, {0x7, 0x1f, 0x0, 0x108b, 0x0, 0x8, 0x2}}, 0x50) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x9, 0x2000, 0x80, 0x5, 0xfffff6f5, 0x7fffffff, 0x0, 0x0, 0x40, 0x127d}}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r3, 0x0) 29.257322975s ago: executing program 5 (id=2995): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) rt_tgsigqueueinfo(r1, r1, 0x2e, &(0x7f0000000040)={0x10, 0x9, 0x5}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) close(r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x168, 0x9, 0x0, 0xa, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00'}, 0x6000000, 0x228, 0x248, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x0, 0x0, 0x54, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ecn={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "82514666efa69cf2c138e4411e7a0f420d7c9f5c73c76826f7e208dfcd40"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 26.651682428s ago: executing program 5 (id=2996): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)='*', 0x1) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000340)=0x7) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{0x0}], 0x1) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 25.422143195s ago: executing program 5 (id=2997): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x174) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1d], 0x0, 0x0, 0x0}, 0x1e8) 24.373381793s ago: executing program 5 (id=2998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000280)=0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(0xffffffffffffffff, 0x1003ff, 0x4) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 16.935283774s ago: executing program 5 (id=2999): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000000200), 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000bba70000000080ffffffffffff00"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000400)=0xb83c) mount(0x0, 0x0, 0x0, 0x100000, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r7, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0xb) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0xc0a85320, &(0x7f00000000c0)={0x1080}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x80, &(0x7f0000000080)=0x1, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x12}) 0s ago: executing program 57 (id=2999): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000000200), 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000bba70000000080ffffffffffff00"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000400)=0xb83c) mount(0x0, 0x0, 0x0, 0x100000, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r7, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0xb) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0xc0a85320, &(0x7f00000000c0)={0x1080}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x80, &(0x7f0000000080)=0x1, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x12}) kernel console output (not intermixed with test programs): llbacks suppressed [ 1334.489216][ T29] audit: type=1400 audit(1735632947.668:18979): avc: denied { create } for pid=15854 comm="syz.0.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1334.594924][ T29] audit: type=1400 audit(1735632947.677:18980): avc: denied { ioctl } for pid=15853 comm="syz.2.2791" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1334.720362][ T29] audit: type=1400 audit(1735632947.724:18981): avc: denied { create } for pid=15854 comm="syz.0.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1334.782263][ T29] audit: type=1400 audit(1735632947.734:18982): avc: denied { ioctl } for pid=15854 comm="syz.0.2792" path="socket:[65809]" dev="sockfs" ino=65809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1334.848574][ T29] audit: type=1400 audit(1735632947.762:18983): avc: denied { bind } for pid=15854 comm="syz.0.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1334.870096][ T29] audit: type=1400 audit(1735632947.762:18984): avc: denied { ioctl } for pid=15853 comm="syz.2.2791" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1334.910073][ T29] audit: type=1400 audit(1735632947.883:18985): avc: denied { create } for pid=15854 comm="syz.0.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1334.913269][T15860] vlan1: entered promiscuous mode [ 1334.930220][ T29] audit: type=1400 audit(1735632947.949:18986): avc: denied { bind } for pid=15854 comm="syz.0.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1334.957465][ T29] audit: type=1400 audit(1735632947.977:18987): avc: denied { create } for pid=15859 comm="syz.5.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1334.979737][ T29] audit: type=1400 audit(1735632948.005:18988): avc: denied { ioctl } for pid=15859 comm="syz.5.2793" path="socket:[65811]" dev="sockfs" ino=65811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1335.103905][T15859] vlan1: left promiscuous mode [ 1336.851580][T13484] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1336.891812][T15885] xt_hashlimit: invalid rate [ 1337.012090][T13484] usb 6-1: Using ep0 maxpacket: 32 [ 1337.025608][T13484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.037453][T13484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.056736][T13484] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1337.076278][T13484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.097825][T13484] usb 6-1: config 0 descriptor?? [ 1338.489911][T13484] usbhid 6-1:0.0: can't add hid device: -71 [ 1338.495935][T13484] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1338.510227][T13484] usb 6-1: USB disconnect, device number 35 [ 1338.678712][T15897] FAULT_INJECTION: forcing a failure. [ 1338.678712][T15897] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.702672][T15897] CPU: 0 UID: 0 PID: 15897 Comm: syz.2.2803 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1338.711964][T15898] loop9: detected capacity change from 0 to 7 [ 1338.713438][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1338.729546][T15897] Call Trace: [ 1338.732822][T15897] [ 1338.733248][T15898] Dev loop9: unable to read RDB block 7 [ 1338.735738][T15897] dump_stack_lvl+0x16c/0x1f0 [ 1338.741273][T15898] loop9: unable to read partition table [ 1338.745898][T15897] should_fail_ex+0x497/0x5b0 [ 1338.745937][T15897] should_failslab+0xc2/0x120 [ 1338.745960][T15897] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1338.767091][T15898] loop9: partition table beyond EOD, [ 1338.767164][T15897] ? sidtab_sid2str_get+0x17a/0x680 [ 1338.777724][T15897] kmemdup_noprof+0x29/0x60 [ 1338.782201][T15897] sidtab_sid2str_get+0x17a/0x680 [ 1338.787202][T15897] sidtab_entry_to_string+0x33/0x110 [ 1338.792467][T15897] security_sid_to_context_core+0x35c/0x640 [ 1338.798343][T15897] avc_audit_post_callback+0x1ac/0x8c0 [ 1338.803777][T15897] ? audit_log_format+0xe9/0x130 [ 1338.808687][T15897] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1338.814641][T15897] ? skb_put+0x138/0x1b0 [ 1338.818859][T15897] ? audit_log_n_string+0x253/0x540 [ 1338.824031][T15897] ? audit_log_n_untrustedstring+0xf2/0x100 [ 1338.829899][T15897] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1338.835850][T15897] common_lsm_audit+0x33f/0x2250 [ 1338.840772][T15897] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1338.846735][T15897] ? __pfx_common_lsm_audit+0x10/0x10 [ 1338.852082][T15897] ? avc_denied+0x138/0x180 [ 1338.856559][T15897] ? avc_denied+0x141/0x180 [ 1338.861054][T15897] ? slow_avc_audit+0x17d/0x210 [ 1338.865901][T15897] slow_avc_audit+0x17d/0x210 [ 1338.870555][T15897] ? __pfx_slow_avc_audit+0x10/0x10 [ 1338.875727][T15897] ? __pfx_mark_lock+0x10/0x10 [ 1338.880468][T15897] avc_has_perm+0x18d/0x1c0 [ 1338.884946][T15897] ? __pfx_avc_has_perm+0x10/0x10 [ 1338.889944][T15897] ? __pfx___lock_acquire+0x10/0x10 [ 1338.895116][T15897] sock_has_perm+0x253/0x2f0 [ 1338.899680][T15897] ? __pfx_sock_has_perm+0x10/0x10 [ 1338.904766][T15897] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1338.911500][T15897] ? import_ubuf+0x1b6/0x220 [ 1338.916074][T15897] security_socket_sendmsg+0x9b/0x240 [ 1338.921421][T15897] ____sys_sendmsg+0x7ec/0xc90 [ 1338.926161][T15897] ? copy_msghdr_from_user+0x10b/0x160 [ 1338.931597][T15897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1338.936862][T15897] ___sys_sendmsg+0x135/0x1e0 [ 1338.941513][T15897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1338.946687][T15897] ? __pfx_lock_release+0x10/0x10 [ 1338.951688][T15897] ? trace_lock_acquire+0x14e/0x1f0 [ 1338.956866][T15897] ? __fget_files+0x206/0x3a0 [ 1338.961527][T15897] __sys_sendmsg+0x16e/0x220 [ 1338.966088][T15897] ? __pfx___sys_sendmsg+0x10/0x10 [ 1338.971190][T15897] do_syscall_64+0xcd/0x250 [ 1338.975669][T15897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.981537][T15897] RIP: 0033:0x7fdb0cf85d29 [ 1338.985933][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.005521][T15897] RSP: 002b:00007fdb0de2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.013907][T15897] RAX: ffffffffffffffda RBX: 00007fdb0d175fa0 RCX: 00007fdb0cf85d29 [ 1339.021852][T15897] RDX: 0000000020044414 RSI: 0000000020000580 RDI: 0000000000000005 [ 1339.029796][T15897] RBP: 00007fdb0de2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.037739][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.045681][T15897] R13: 0000000000000000 R14: 00007fdb0d175fa0 R15: 00007ffdc036b648 [ 1339.053633][T15897] [ 1339.066006][T15898] truncated [ 1339.082993][T15898] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1339.084700][T15897] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2803'. [ 1339.834801][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 1339.834816][ T29] audit: type=1400 audit(1735632952.673:19155): avc: denied { read open } for pid=15904 comm="syz.2.2806" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1340.058284][ T29] audit: type=1400 audit(1735632952.851:19156): avc: denied { unmount } for pid=13436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1340.090330][ T29] audit: type=1400 audit(1735632952.860:19157): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1340.115593][ T29] audit: type=1400 audit(1735632952.907:19158): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1340.141451][ T29] audit: type=1400 audit(1735632952.935:19159): avc: denied { create } for pid=15908 comm="syz.0.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1340.159143][T15909] loop9: detected capacity change from 0 to 7 [ 1340.162273][ T29] audit: type=1400 audit(1735632952.935:19160): avc: denied { create } for pid=15908 comm="syz.0.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1340.188519][ T29] audit: type=1400 audit(1735632952.963:19161): avc: denied { create } for pid=15908 comm="syz.0.2807" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1340.210277][ T29] audit: type=1400 audit(1735632952.963:19162): avc: denied { map } for pid=15908 comm="syz.0.2807" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1340.235604][ T29] audit: type=1400 audit(1735632952.963:19163): avc: denied { read write } for pid=15908 comm="syz.0.2807" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1340.261321][ T29] audit: type=1400 audit(1735632952.963:19164): avc: denied { map } for pid=15908 comm="syz.0.2807" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1340.519865][T15909] Dev loop9: unable to read RDB block 7 [ 1340.744213][T15909] loop9: unable to read partition table [ 1340.749998][T15909] loop9: partition table beyond EOD, truncated [ 1340.756270][T15909] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1343.252986][T15938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:17) already exists on: ipvlan2 [ 1343.262925][T15938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.278189][T15938] batman_adv: batadv0: Adding interface: ipvlan2 [ 1343.284931][T15938] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.310573][T15938] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1344.797328][T15953] tmpfs: Bad value for 'mpol' [ 1344.832936][T15953] Bluetooth: MGMT ver 1.23 [ 1345.145927][T15947] xt_hashlimit: invalid rate [ 1345.499127][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 1345.499162][ T29] audit: type=1400 audit(1735632957.763:19324): avc: denied { prog_load } for pid=15955 comm="syz.0.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1345.832708][ T29] audit: type=1400 audit(1735632957.772:19325): avc: denied { bpf } for pid=15955 comm="syz.0.2819" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1345.937394][ T29] audit: type=1400 audit(1735632957.772:19326): avc: denied { perfmon } for pid=15955 comm="syz.0.2819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1345.962971][ T29] audit: type=1400 audit(1735632957.781:19327): avc: denied { perfmon } for pid=15955 comm="syz.0.2819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.086056][T15960] bio_check_eod: 2 callbacks suppressed [ 1346.086074][T15960] syz.2.2820: attempt to access beyond end of device [ 1346.086074][T15960] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1346.166731][ T29] audit: type=1400 audit(1735632957.791:19328): avc: denied { perfmon } for pid=15955 comm="syz.0.2819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.246341][ T29] audit: type=1400 audit(1735632957.791:19329): avc: denied { perfmon } for pid=15955 comm="syz.0.2819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.338006][ T29] audit: type=1400 audit(1735632957.800:19330): avc: denied { perfmon } for pid=15955 comm="syz.0.2819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.423765][ T29] audit: type=1400 audit(1735632957.800:19331): avc: denied { bpf } for pid=15955 comm="syz.0.2819" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.460865][ T29] audit: type=1400 audit(1735632957.819:19332): avc: denied { bpf } for pid=15955 comm="syz.0.2819" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.494316][ T29] audit: type=1400 audit(1735632957.819:19333): avc: denied { prog_run } for pid=15955 comm="syz.0.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1346.987902][T12342] Bluetooth: hci3: unexpected event 0x3e length: 268 > 260 [ 1346.987922][T12342] Bluetooth: hci3: unexpected subevent 0x02 length: 267 > 260 [ 1347.005209][T12342] Bluetooth: hci3: Dropping invalid advertising data [ 1347.012497][T12342] Bluetooth: hci3: unknown advertising packet type: 0x14 [ 1347.012522][T12342] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1351.040260][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 1351.040275][ T29] audit: type=1400 audit(1735632963.142:19460): avc: denied { read write } for pid=13436 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.071214][ T29] audit: type=1400 audit(1735632963.142:19461): avc: denied { read write open } for pid=13436 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.096836][ T29] audit: type=1400 audit(1735632963.142:19462): avc: denied { ioctl } for pid=13436 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.122892][ T29] audit: type=1400 audit(1735632963.152:19463): avc: denied { map_create } for pid=15996 comm="syz.1.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1351.142360][ T29] audit: type=1400 audit(1735632963.152:19464): avc: denied { create } for pid=15994 comm="syz.0.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1351.162532][ T29] audit: type=1400 audit(1735632963.189:19465): avc: denied { write } for pid=15994 comm="syz.0.2830" path="socket:[66096]" dev="sockfs" ino=66096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1351.186456][ T29] audit: type=1400 audit(1735632963.189:19466): avc: denied { write } for pid=15994 comm="syz.0.2830" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1351.207171][ T29] audit: type=1400 audit(1735632963.208:19467): avc: denied { read write } for pid=15994 comm="syz.0.2830" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1351.230932][ T29] audit: type=1400 audit(1735632963.208:19468): avc: denied { read write open } for pid=15994 comm="syz.0.2830" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1351.255581][ T29] audit: type=1400 audit(1735632963.208:19469): avc: denied { ioctl } for pid=15994 comm="syz.0.2830" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1352.035541][T10964] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1352.190113][T10964] usb 3-1: device descriptor read/64, error -71 [ 1352.250867][T16006] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2834'. [ 1352.446667][T10964] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1352.585793][T10964] usb 3-1: device descriptor read/64, error -71 [ 1352.723078][T10964] usb usb3-port1: attempt power cycle [ 1354.915709][T10964] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1355.140219][T10964] usb 3-1: device not accepting address 48, error -71 [ 1355.441879][T16032] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2843'. [ 1355.543224][T16033] team0: entered promiscuous mode [ 1355.590204][T16033] team_slave_0: entered promiscuous mode [ 1355.601190][T16033] team_slave_1: entered promiscuous mode [ 1355.672644][T16033] batadv_slave_1: entered promiscuous mode [ 1356.786269][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 1356.786286][ T29] audit: type=1400 audit(1735632968.503:19683): avc: denied { read } for pid=16043 comm="syz.1.2844" dev="nsfs" ino=4026534334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1357.236281][ T29] audit: type=1400 audit(1735632968.503:19684): avc: denied { read open } for pid=16043 comm="syz.1.2844" path="net:[4026534334]" dev="nsfs" ino=4026534334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1357.519875][ T29] audit: type=1400 audit(1735632968.503:19685): avc: denied { create } for pid=16043 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1357.935717][ T29] audit: type=1400 audit(1735632968.531:19686): avc: denied { mounton } for pid=16025 comm="syz.2.2840" path="/156/file0" dev="tmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1357.960624][ T29] audit: type=1400 audit(1735632968.531:19687): avc: denied { mount } for pid=16025 comm="syz.2.2840" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1357.982635][ T29] audit: type=1400 audit(1735632969.036:19688): avc: denied { create } for pid=16043 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.003316][ T29] audit: type=1400 audit(1735632969.074:19689): avc: denied { write } for pid=16043 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.024021][ T29] audit: type=1400 audit(1735632969.120:19690): avc: denied { read } for pid=16043 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.044701][ T29] audit: type=1400 audit(1735632969.177:19691): avc: denied { read } for pid=16043 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.065494][ T29] audit: type=1400 audit(1735632969.448:19692): avc: denied { write } for pid=16043 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.455754][T16057] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2847'. [ 1359.125180][T16060] xt_hashlimit: invalid rate [ 1359.543988][T10964] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1359.863128][T10964] usb 3-1: Using ep0 maxpacket: 16 [ 1359.966604][T10964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.976798][T10964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1360.010820][T10964] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1360.043131][T10964] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1360.106185][T10964] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1360.122050][T10964] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1360.132930][T10964] usb 3-1: Manufacturer: syz [ 1360.180675][T10964] usb 3-1: config 0 descriptor?? [ 1360.655570][T16079] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1360.671045][T16081] tmpfs: Unknown parameter 'indo64' [ 1360.682825][T16081] tmpfs: Unknown parameter 'indo64' [ 1360.694570][T16083] devpts: called with bogus options [ 1360.938667][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2858'. [ 1361.130150][T16095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1361.137433][T16095] IPv6: NLM_F_CREATE should be set when creating new route [ 1361.144641][T16095] IPv6: NLM_F_CREATE should be set when creating new route [ 1362.157962][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 1362.157978][ T29] audit: type=1400 audit(1735632973.555:19922): avc: denied { prog_load } for pid=16102 comm="syz.5.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1362.230302][ T29] audit: type=1400 audit(1735632973.583:19923): avc: denied { bpf } for pid=16102 comm="syz.5.2863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1362.251983][ T29] audit: type=1400 audit(1735632973.583:19924): avc: denied { perfmon } for pid=16102 comm="syz.5.2863" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1362.273116][ T29] audit: type=1400 audit(1735632973.583:19925): avc: denied { perfmon } for pid=16102 comm="syz.5.2863" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1362.297675][ T29] audit: type=1400 audit(1735632973.583:19926): avc: denied { perfmon } for pid=16102 comm="syz.5.2863" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1362.318882][ T29] audit: type=1400 audit(1735632973.583:19927): avc: denied { perfmon } for pid=16102 comm="syz.5.2863" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1362.355146][ T29] audit: type=1400 audit(1735632973.583:19928): avc: denied { bpf } for pid=16102 comm="syz.5.2863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1362.395170][ T29] audit: type=1400 audit(1735632973.583:19929): avc: denied { bpf } for pid=16102 comm="syz.5.2863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1362.416610][ T29] audit: type=1400 audit(1735632973.592:19930): avc: denied { prog_run } for pid=16102 comm="syz.5.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1362.461996][ T29] audit: type=1400 audit(1735632973.620:19931): avc: denied { read write } for pid=13432 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1362.532295][T10964] usb 3-1: USB disconnect, device number 50 [ 1363.791631][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 1363.827440][T16105] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2864'. [ 1364.199908][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2868'. [ 1364.835338][T10964] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1365.030465][T10964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.045792][T10964] usb 6-1: config 0 has no interfaces? [ 1365.060874][T10964] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1365.086100][T10964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.122501][T10964] usb 6-1: config 0 descriptor?? [ 1365.501490][ T5819] usb 6-1: USB disconnect, device number 36 [ 1366.020451][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1366.111867][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 1366.237588][T16156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.331521][ T5920] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1366.502609][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 1366.527722][ T5920] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1366.547785][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.580303][ T5920] usb 3-1: config 0 descriptor?? [ 1366.596567][ T5920] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1366.688561][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2885'. [ 1366.697806][T16163] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2885'. [ 1366.883030][T12342] Bluetooth: hci3: unexpected event 0x3e length: 268 > 260 [ 1366.883059][T12342] Bluetooth: hci3: unexpected subevent 0x02 length: 267 > 260 [ 1366.898220][T12342] Bluetooth: hci3: Dropping invalid advertising data [ 1366.904932][T12342] Bluetooth: hci3: unknown advertising packet type: 0x14 [ 1366.904956][T12342] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1367.154186][ T5920] gspca_nw80x: reg_r err -71 [ 1367.159132][ T5920] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 1367.171621][ T5920] usb 3-1: USB disconnect, device number 51 [ 1367.529663][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 1367.529679][ T29] audit: type=1400 audit(1735632978.588:20301): avc: denied { create } for pid=16168 comm="syz.3.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1367.555713][ T29] audit: type=1400 audit(1735632978.588:20302): avc: denied { ioctl } for pid=16168 comm="syz.3.2888" path="socket:[67127]" dev="sockfs" ino=67127 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1367.612668][ T29] audit: type=1400 audit(1735632978.588:20303): avc: denied { watch } for pid=16168 comm="syz.3.2888" path="/158" dev="tmpfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1367.636814][ T29] audit: type=1400 audit(1735632978.588:20304): avc: denied { create } for pid=16168 comm="syz.3.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1367.657893][ T29] audit: type=1400 audit(1735632978.654:20305): avc: denied { read write } for pid=13436 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1367.682800][ T29] audit: type=1400 audit(1735632978.654:20306): avc: denied { read write open } for pid=13436 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1367.740526][ T29] audit: type=1400 audit(1735632978.654:20307): avc: denied { ioctl } for pid=13436 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1367.817152][ T29] audit: type=1400 audit(1735632978.700:20308): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1367.881284][ T29] audit: type=1400 audit(1735632978.700:20309): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1367.935233][ T29] audit: type=1400 audit(1735632978.700:20310): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1368.207567][ T5819] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1368.774541][T16178] lo speed is unknown, defaulting to 1000 [ 1368.849691][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1368.875312][ T5819] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1368.919990][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.770298][ T5819] usb 6-1: config 0 descriptor?? [ 1369.806353][ T5819] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1370.498237][T13499] kernel read not supported for file /529/net/igmp (pid: 13499 comm: kworker/1:0) [ 1371.305064][T16217] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1372.293149][ T5819] usb 6-1: USB disconnect, device number 37 [ 1372.379905][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1372.907281][T16231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.931709][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 1372.931725][ T29] audit: type=1400 audit(1735632983.584:20568): avc: denied { read write } for pid=13433 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1373.229061][ T29] audit: type=1400 audit(1735632983.584:20569): avc: denied { read write open } for pid=13433 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1373.271973][ T29] audit: type=1400 audit(1735632983.584:20570): avc: denied { ioctl } for pid=13433 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1373.297938][ T29] audit: type=1400 audit(1735632983.678:20571): avc: denied { read } for pid=16239 comm="syz.5.2904" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1373.320854][ T29] audit: type=1400 audit(1735632983.678:20572): avc: denied { read open } for pid=16239 comm="syz.5.2904" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1373.320885][ T29] audit: type=1400 audit(1735632983.678:20573): avc: denied { ioctl } for pid=16239 comm="syz.5.2904" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1373.320914][ T29] audit: type=1400 audit(1735632983.687:20574): avc: denied { execmem } for pid=16239 comm="syz.5.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1373.320942][ T29] audit: type=1400 audit(1735632983.790:20575): avc: denied { ioctl } for pid=16239 comm="syz.5.2904" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1373.320973][ T29] audit: type=1400 audit(1735632983.855:20576): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1373.321007][ T29] audit: type=1400 audit(1735632983.855:20577): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.116441][T16257] trusted_key: encrypted_key: master key parameter is missing [ 1375.542510][T16265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1376.338422][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.344802][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1378.282640][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 1378.282658][ T29] audit: type=1400 audit(1735632988.645:20723): avc: denied { read } for pid=16286 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1378.377356][ T29] audit: type=1400 audit(1735632988.720:20724): avc: denied { read } for pid=16286 comm="syz.2.2919" dev="nsfs" ino=4026534123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1378.419717][ T29] audit: type=1400 audit(1735632988.758:20725): avc: denied { read open } for pid=16286 comm="syz.2.2919" path="net:[4026534123]" dev="nsfs" ino=4026534123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1378.492836][ T29] audit: type=1400 audit(1735632988.758:20726): avc: denied { create } for pid=16286 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1378.557158][ T29] audit: type=1400 audit(1735632988.767:20727): avc: denied { getopt } for pid=16286 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1378.626098][ T29] audit: type=1400 audit(1735632988.870:20728): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1378.707827][ T29] audit: type=1400 audit(1735632988.870:20729): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1378.786366][ T29] audit: type=1400 audit(1735632988.870:20730): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1378.929089][ T29] audit: type=1400 audit(1735632989.244:20731): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.003975][ T29] audit: type=1400 audit(1735632989.272:20732): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1384.052763][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 1384.052778][ T29] audit: type=1400 audit(1735632994.034:20800): avc: denied { read } for pid=16315 comm="syz.0.2926" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1384.401828][ T29] audit: type=1400 audit(1735632994.034:20801): avc: denied { read open } for pid=16315 comm="syz.0.2926" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1384.742341][ T29] audit: type=1400 audit(1735632994.670:20802): avc: denied { read } for pid=16318 comm="syz.0.2927" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1384.887917][ T29] audit: type=1400 audit(1735632994.689:20803): avc: denied { read open } for pid=16318 comm="syz.0.2927" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1385.420336][ T29] audit: type=1400 audit(1735632995.307:20804): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1385.616591][ T29] audit: type=1400 audit(1735632995.391:20805): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1385.785142][ T29] audit: type=1400 audit(1735632995.391:20806): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1386.025510][ T29] audit: type=1400 audit(1735632995.438:20807): avc: denied { read write } for pid=13436 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1386.484019][ T29] audit: type=1400 audit(1735632995.438:20808): avc: denied { read write open } for pid=13436 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1386.630279][T16323] lo speed is unknown, defaulting to 1000 [ 1386.789986][ T29] audit: type=1400 audit(1735632995.438:20809): avc: denied { ioctl } for pid=13436 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1388.599463][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1389.796633][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 1389.796648][ T29] audit: type=1400 audit(1735632999.414:20931): avc: denied { map_create } for pid=16349 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1390.021472][ T29] audit: type=1400 audit(1735632999.526:20932): avc: denied { read append } for pid=16346 comm="syz.1.2936" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1390.266320][ T29] audit: type=1400 audit(1735632999.526:20933): avc: denied { read open } for pid=16346 comm="syz.1.2936" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1390.481218][ T29] audit: type=1400 audit(1735632999.526:20934): avc: denied { prog_load } for pid=16349 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1390.911869][ T29] audit: type=1400 audit(1735632999.526:20935): avc: denied { bpf } for pid=16349 comm="syz.2.2938" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1391.035881][ T29] audit: type=1400 audit(1735632999.545:20936): avc: denied { perfmon } for pid=16349 comm="syz.2.2938" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1391.449766][T16352] ip6gretap0: entered promiscuous mode [ 1391.530046][T16352] vlan2: entered promiscuous mode [ 1391.667467][T16352] ip6gretap0: left promiscuous mode [ 1391.695570][ T29] audit: type=1400 audit(1735632999.545:20937): avc: denied { map_read map_write } for pid=16349 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1391.825095][ T29] audit: type=1400 audit(1735632999.545:20938): avc: denied { create } for pid=16346 comm="syz.1.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1391.923477][ T29] audit: type=1400 audit(1735632999.582:20939): avc: denied { prog_load } for pid=16349 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1392.067921][ T29] audit: type=1400 audit(1735632999.601:20940): avc: denied { bpf } for pid=16349 comm="syz.2.2938" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1395.203488][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 1395.203504][ T29] audit: type=1400 audit(1735633004.475:21079): avc: denied { create } for pid=16389 comm="syz.5.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1395.588980][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 1395.633453][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 1395.918201][ T9953] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1396.078486][ T9953] usb 3-1: device descriptor read/64, error -71 [ 1396.144212][T16401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16401 comm=syz.0.2950 [ 1396.345942][ T9953] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1396.495381][ T9953] usb 3-1: device descriptor read/64, error -71 [ 1396.614528][ T9953] usb usb3-port1: attempt power cycle [ 1396.889397][T12342] Bluetooth: hci3: unexpected event 0x3e length: 268 > 260 [ 1396.889427][T12342] Bluetooth: hci3: unexpected subevent 0x02 length: 267 > 260 [ 1396.904428][T12342] Bluetooth: hci3: Dropping invalid advertising data [ 1396.914058][T12342] Bluetooth: hci3: unknown advertising packet type: 0x14 [ 1396.914086][T12342] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1397.006622][T16407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1397.013312][T16407] audit: audit_lost=878 audit_rate_limit=0 audit_backlog_limit=64 [ 1397.021278][ T9953] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1397.030221][T16407] audit: backlog limit exceeded [ 1397.038549][T16407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1397.045244][T16407] audit: audit_lost=879 audit_rate_limit=0 audit_backlog_limit=64 [ 1397.054330][T16407] audit: backlog limit exceeded [ 1397.060864][T16400] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1397.070769][T16400] audit: audit_lost=880 audit_rate_limit=0 audit_backlog_limit=64 [ 1397.084068][T16407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1397.093454][ T9953] usb 3-1: device descriptor read/8, error -71 [ 1397.600165][ T9953] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1397.679359][ T9953] usb 3-1: device descriptor read/8, error -71 [ 1397.822449][ T9953] usb usb3-port1: unable to enumerate USB device [ 1398.986584][T16421] lo speed is unknown, defaulting to 1000 [ 1401.668517][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 1401.668535][ T29] audit: type=1400 audit(1735633009.433:21217): avc: denied { execmem } for pid=16413 comm="syz.1.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1401.753839][ T29] audit: type=1400 audit(1735633009.658:21218): avc: denied { read write } for pid=13433 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1401.857357][ T29] audit: type=1400 audit(1735633009.658:21219): avc: denied { read write open } for pid=13433 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1402.160886][T16433] SELinux: Context unconfined is not valid (left unmapped). [ 1402.267065][ T29] audit: type=1400 audit(1735633009.686:21220): avc: denied { ioctl } for pid=13433 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1402.343654][ T29] audit: type=1400 audit(1735633009.733:21221): avc: denied { create } for pid=16413 comm="syz.1.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1402.694842][ T29] audit: type=1400 audit(1735633009.742:21222): avc: denied { setopt } for pid=16413 comm="syz.1.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1402.801951][ T29] audit: type=1400 audit(1735633009.742:21223): avc: denied { setopt } for pid=16413 comm="syz.1.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1402.907813][ T29] audit: type=1400 audit(1735633009.742:21224): avc: denied { bind } for pid=16413 comm="syz.1.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1403.015718][ T29] audit: type=1400 audit(1735633009.752:21225): avc: denied { name_bind } for pid=16413 comm="syz.1.2956" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1403.133315][ T29] audit: type=1400 audit(1735633009.752:21226): avc: denied { node_bind } for pid=16413 comm="syz.1.2956" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1404.212901][T12342] Bluetooth: hci1: unexpected event 0x3e length: 268 > 260 [ 1404.212932][T12342] Bluetooth: hci1: unexpected subevent 0x02 length: 267 > 260 [ 1404.284866][T16449] ALSA: seq fatal error: cannot create timer (-16) [ 1404.376213][ T9953] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1404.554785][ T9953] usb 3-1: Using ep0 maxpacket: 8 [ 1404.617528][ T9953] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1404.641169][ T9953] usb 3-1: can't read configurations, error -61 [ 1404.825693][ T9953] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1405.324499][ T9953] usb 3-1: Using ep0 maxpacket: 8 [ 1405.367621][ T9953] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1405.386021][ T9953] usb 3-1: can't read configurations, error -61 [ 1405.404929][ T9953] usb usb3-port1: attempt power cycle [ 1405.789230][ T9953] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1405.854975][ T9953] usb 3-1: Using ep0 maxpacket: 8 [ 1405.947047][ T9953] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1405.970470][ T9953] usb 3-1: can't read configurations, error -61 [ 1406.141948][ T9953] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1406.483114][ T9953] usb 3-1: device descriptor read/8, error -71 [ 1406.661652][ T9953] usb usb3-port1: unable to enumerate USB device [ 1407.058577][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 1407.058593][ T29] audit: type=1400 audit(1735633015.561:21429): avc: denied { create } for pid=16465 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1407.355283][ T29] audit: type=1400 audit(1735633015.617:21430): avc: denied { create } for pid=16465 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1407.419494][ T29] audit: type=1400 audit(1735633015.617:21431): avc: denied { write } for pid=16465 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1407.482276][ T29] audit: type=1400 audit(1735633015.617:21432): avc: denied { read } for pid=16465 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1407.635004][ T29] audit: type=1400 audit(1735633015.636:21433): avc: denied { read } for pid=16465 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1407.750039][ T29] audit: type=1400 audit(1735633015.646:21434): avc: denied { prog_load } for pid=16466 comm="syz.1.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1407.837915][ T29] audit: type=1400 audit(1735633015.655:21435): avc: denied { bpf } for pid=16466 comm="syz.1.2971" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.253143][ T29] audit: type=1400 audit(1735633015.655:21436): avc: denied { perfmon } for pid=16466 comm="syz.1.2971" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.286570][ T29] audit: type=1400 audit(1735633015.655:21437): avc: denied { perfmon } for pid=16466 comm="syz.1.2971" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.663566][ T29] audit: type=1400 audit(1735633015.655:21438): avc: denied { perfmon } for pid=16466 comm="syz.1.2971" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1409.235918][T16479] netlink: 'syz.1.2973': attribute type 10 has an invalid length. [ 1412.955055][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1412.955072][ T29] audit: type=1400 audit(1735633021.072:21473): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1413.052645][ T29] audit: type=1400 audit(1735633021.128:21474): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1413.145041][ T29] audit: type=1400 audit(1735633021.128:21475): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1413.302493][ T29] audit: type=1400 audit(1735633021.409:21476): avc: denied { read } for pid=16480 comm="syz.5.2974" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1413.343959][ T29] audit: type=1400 audit(1735633021.409:21477): avc: denied { read open } for pid=16480 comm="syz.5.2974" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1414.713303][ T29] audit: type=1400 audit(1735633022.718:21478): avc: denied { execmem } for pid=16483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1415.167542][ T29] audit: type=1400 audit(1735633023.149:21479): avc: denied { create } for pid=16484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1415.234297][ T9693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1415.244855][ T9693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1415.252805][ T9693] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1415.262563][ T9693] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1415.271098][ T9693] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1415.279302][ T9693] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1415.306223][ T29] audit: type=1400 audit(1735633023.186:21480): avc: denied { read write } for pid=16484 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1415.393343][ T29] audit: type=1400 audit(1735633023.186:21481): avc: denied { read write open } for pid=16484 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1415.472443][ T29] audit: type=1400 audit(1735633023.270:21482): avc: denied { ioctl } for pid=16484 comm="syz-executor" path="socket:[69219]" dev="sockfs" ino=69219 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1415.497915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.563428][T12342] Bluetooth: hci5: command tx timeout [ 1418.899252][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1418.899268][ T29] audit: type=1400 audit(1735633026.638:21487): avc: denied { execmem } for pid=16486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1419.412493][ T29] audit: type=1400 audit(1735633027.115:21488): avc: denied { create } for pid=16487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1419.432750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.470794][ T9693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1419.485735][ T9693] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1419.494179][ T9693] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1419.503209][ T9693] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1419.510643][ T9693] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1419.518805][ T9693] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1419.556098][ T29] audit: type=1400 audit(1735633027.115:21489): avc: denied { read write } for pid=16487 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1419.636836][ T29] audit: type=1400 audit(1735633027.153:21490): avc: denied { read write open } for pid=16487 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1419.694506][ T29] audit: type=1400 audit(1735633027.172:21491): avc: denied { ioctl } for pid=16487 comm="syz-executor" path="socket:[69244]" dev="sockfs" ino=69244 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1419.720137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.740626][ T29] audit: type=1400 audit(1735633027.228:21492): avc: denied { ioctl } for pid=16487 comm="syz-executor" path="socket:[69244]" dev="sockfs" ino=69244 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1419.777358][ T29] audit: type=1400 audit(1735633027.256:21493): avc: denied { read } for pid=16487 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1419.809050][ T9693] Bluetooth: hci5: command tx timeout [ 1419.826459][ T29] audit: type=1400 audit(1735633027.256:21494): avc: denied { read open } for pid=16487 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1419.861138][ T29] audit: type=1400 audit(1735633027.284:21495): avc: denied { mounton } for pid=16487 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1421.753200][ T9693] Bluetooth: hci6: command tx timeout [ 1422.014317][ T9693] Bluetooth: hci5: command tx timeout [ 1423.384571][T16441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:17) already exists on: ipvlan2 [ 1423.394493][T16441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.406735][T16441] batman_adv: batadv0: Adding interface: ipvlan3 [ 1423.413114][T16441] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.438442][T16441] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 1423.664024][T16479] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1423.912402][ T29] audit: type=1400 audit(1735633031.316:21496): avc: denied { execmem } for pid=16489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1424.094010][ T9693] Bluetooth: hci6: command tx timeout [ 1424.233175][ T9693] Bluetooth: hci5: command tx timeout [ 1424.304457][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1424.304471][ T29] audit: type=1400 audit(1735633031.690:21507): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1424.553716][ T29] audit: type=1400 audit(1735633031.728:21508): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1424.973386][T16484] lo speed is unknown, defaulting to 1000 [ 1424.996536][T16495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16495 comm=syz.5.2978 [ 1425.121005][ T29] audit: type=1400 audit(1735633031.737:21509): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.194978][ T29] audit: type=1400 audit(1735633032.074:21510): avc: denied { read write } for pid=13432 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.334192][ T29] audit: type=1400 audit(1735633032.102:21511): avc: denied { read write open } for pid=13432 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.396377][ T29] audit: type=1400 audit(1735633032.102:21512): avc: denied { ioctl } for pid=13432 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.428116][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1425.441780][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.533691][ T29] audit: type=1400 audit(1735633032.626:21513): avc: denied { prog_load } for pid=16492 comm="syz.5.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1425.558293][ T29] audit: type=1400 audit(1735633032.626:21514): avc: denied { bpf } for pid=16492 comm="syz.5.2978" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1425.600710][ T29] audit: type=1400 audit(1735633032.626:21515): avc: denied { perfmon } for pid=16492 comm="syz.5.2978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1425.633022][ T29] audit: type=1400 audit(1735633032.645:21516): avc: denied { create } for pid=16499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1425.814712][T16487] lo speed is unknown, defaulting to 1000 [ 1425.879982][T12342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.898842][T12342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.908318][T12342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.916038][T12342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.925152][T12342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1425.934432][T12342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.996689][ T9893] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1426.110084][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.135509][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.181080][ T9893] usb 6-1: Using ep0 maxpacket: 32 [ 1426.212372][ T9893] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1426.220466][ T9893] usb 6-1: config 0 has no interface number 0 [ 1426.295963][T12342] Bluetooth: hci6: command tx timeout [ 1426.323998][ T9893] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1426.349262][ T9893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.366292][ T9893] usb 6-1: Product: syz [ 1426.370488][ T9893] usb 6-1: Manufacturer: syz [ 1426.375256][ T9893] usb 6-1: SerialNumber: syz [ 1426.385633][ T9893] usb 6-1: config 0 descriptor?? [ 1426.818116][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.871918][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.922236][T16493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.937387][ T9893] radio-si470x 6-1:0.35: this is not a si470x device. [ 1426.948857][T16493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.981861][ T9893] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1427.047946][ T9893] usb 6-1: USB disconnect, device number 38 [ 1427.179828][T16499] lo speed is unknown, defaulting to 1000 [ 1428.166726][T12342] Bluetooth: hci2: command tx timeout [ 1428.508715][T12342] Bluetooth: hci6: command tx timeout [ 1429.817057][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 1429.817073][ T29] audit: type=1400 audit(1735633036.854:21610): avc: denied { create } for pid=16513 comm="syz.1.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1429.972591][ T29] audit: type=1400 audit(1735633036.901:21611): avc: denied { bind } for pid=16513 comm="syz.1.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1430.076160][ T29] audit: type=1400 audit(1735633036.911:21612): avc: denied { setopt } for pid=16513 comm="syz.1.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1430.173850][ T29] audit: type=1400 audit(1735633036.920:21613): avc: denied { mounton } for pid=16513 comm="syz.1.2984" path="/180/bus" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1430.237887][ T29] audit: type=1400 audit(1735633036.948:21614): avc: denied { unlink } for pid=16513 comm="syz.1.2984" name="#1d" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1430.271615][ T29] audit: type=1400 audit(1735633036.967:21615): avc: denied { mount } for pid=16513 comm="syz.1.2984" name="/" dev="overlay" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1430.389853][T12342] Bluetooth: hci2: command tx timeout [ 1431.362449][ T29] audit: type=1400 audit(1735633038.295:21616): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1431.431352][ T29] audit: type=1400 audit(1735633038.295:21617): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1431.523003][ T29] audit: type=1400 audit(1735633038.295:21618): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1431.675613][ T29] audit: type=1400 audit(1735633038.595:21619): avc: denied { read } for pid=16520 comm="syz.5.2985" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1432.613051][T12342] Bluetooth: hci2: command tx timeout [ 1433.414826][ T9893] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1433.625326][ T9893] usb 6-1: descriptor type invalid, skip [ 1433.666150][ T9893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.687185][ T9893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1433.737080][ T9893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1433.757662][ T9893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.765658][ T9893] usb 6-1: Product: syz [ 1433.781761][ T9893] usb 6-1: Manufacturer: syz [ 1433.786366][ T9893] usb 6-1: SerialNumber: syz [ 1434.544588][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.600278][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.842468][T12342] Bluetooth: hci2: command tx timeout [ 1435.239165][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1435.239181][ T29] audit: type=1400 audit(1735633041.925:21682): avc: denied { write } for pid=16525 comm="syz.5.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1435.329877][ T29] audit: type=1400 audit(1735633041.972:21683): avc: denied { read } for pid=16525 comm="syz.5.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1435.394602][ T29] audit: type=1400 audit(1735633041.972:21684): avc: denied { read } for pid=16525 comm="syz.5.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1438.369371][ T9893] usb 6-1: unknown interface protocol 0x1, assuming v1 [ 1438.406476][ T9893] usb 6-1: cannot find UAC_HEADER [ 1438.499233][ T29] audit: type=1400 audit(1735633044.975:21685): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1438.564499][ T9893] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1438.602053][ T29] audit: type=1400 audit(1735633045.013:21686): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1438.645487][ T9893] usb 6-1: USB disconnect, device number 39 [ 1438.705710][ T29] audit: type=1400 audit(1735633045.013:21687): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1438.836088][ T29] audit: type=1400 audit(1735633045.293:21688): avc: denied { create } for pid=16529 comm="syz.5.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1438.904693][ T29] audit: type=1400 audit(1735633045.331:21689): avc: denied { create } for pid=16529 comm="syz.5.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1438.967324][ T29] audit: type=1400 audit(1735633045.340:21690): avc: denied { write } for pid=16529 comm="syz.5.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1439.030688][ T29] audit: type=1400 audit(1735633045.340:21691): avc: denied { read } for pid=16529 comm="syz.5.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1440.408828][T16542] IPVS: length: 198 != 24 [ 1440.933918][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1440.933933][ T29] audit: type=1400 audit(1735633047.258:21735): avc: denied { sys_module } for pid=16538 comm="syz.5.2990" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1441.018342][ T29] audit: type=1400 audit(1735633047.286:21736): avc: denied { module_request } for pid=16538 comm="syz.5.2990" kmod="vxcan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1441.151915][ T29] audit: type=1400 audit(1735633047.454:21737): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1441.252260][ T29] audit: type=1400 audit(1735633047.501:21738): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1441.360944][ T29] audit: type=1400 audit(1735633047.501:21739): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1441.548206][ T29] audit: type=1400 audit(1735633047.829:21740): avc: denied { read write } for pid=16545 comm="syz.5.2991" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1441.632244][ T29] audit: type=1400 audit(1735633047.857:21741): avc: denied { read write open } for pid=16545 comm="syz.5.2991" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1441.709260][ T29] audit: type=1400 audit(1735633047.857:21742): avc: denied { ioctl } for pid=16545 comm="syz.5.2991" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1441.784205][ T29] audit: type=1400 audit(1735633047.857:21743): avc: denied { ioctl } for pid=16545 comm="syz.5.2991" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1441.826799][ T9893] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1441.877321][ T29] audit: type=1400 audit(1735633047.875:21744): avc: denied { ioctl } for pid=16545 comm="syz.5.2991" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1441.937901][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1441.944193][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1442.024521][ T9893] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 1442.047036][ T9893] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1442.089461][ T9893] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1442.115623][ T9893] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 1442.136832][ T9893] usb 6-1: Manufacturer: syz [ 1442.517789][T16546] fuse: Unknown parameter 'roo0000000000' [ 1442.813883][ T9893] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1442.832442][ T9893] usb 6-1: USB disconnect, device number 40 [ 1445.863151][ T9693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1445.874206][ T9693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1445.885000][ T9693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1445.892681][ T9693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1445.900177][ T9693] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1445.909525][ T9693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1448.090718][ T9693] Bluetooth: hci3: command tx timeout [ 1448.811107][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 1448.811124][ T29] audit: type=1400 audit(1735633054.621:21819): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1448.907549][ T29] audit: type=1400 audit(1735633054.658:21820): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1448.977726][ T29] audit: type=1400 audit(1735633054.677:21821): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1449.174305][ T29] audit: type=1400 audit(1735633054.967:21822): avc: denied { read } for pid=16558 comm="syz.5.2995" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1449.221221][ T29] audit: type=1400 audit(1735633054.995:21823): avc: denied { read open } for pid=16558 comm="syz.5.2995" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1449.864262][ T29] audit: type=1400 audit(1735633055.603:21824): avc: denied { create } for pid=16558 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1450.278231][ T29] audit: type=1400 audit(1735633055.996:21825): avc: denied { write } for pid=16558 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1450.331182][ T9693] Bluetooth: hci3: command tx timeout [ 1450.420720][ T29] audit: type=1400 audit(1735633056.024:21826): avc: denied { create } for pid=16558 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1450.585029][ T29] audit: type=1400 audit(1735633056.118:21827): avc: denied { write } for pid=16558 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1450.793949][ T29] audit: type=1400 audit(1735633056.118:21828): avc: denied { read } for pid=16558 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1452.537275][ T9693] Bluetooth: hci3: command tx timeout [ 1454.324790][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1454.324808][ T29] audit: type=1400 audit(1735633059.710:21858): avc: denied { prog_load } for pid=16568 comm="syz.5.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1454.404575][ T29] audit: type=1400 audit(1735633059.710:21859): avc: denied { bpf } for pid=16568 comm="syz.5.2998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1454.460400][ T29] audit: type=1400 audit(1735633059.729:21860): avc: denied { perfmon } for pid=16568 comm="syz.5.2998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1454.501272][ T29] audit: type=1400 audit(1735633059.729:21861): avc: denied { prog_load } for pid=16568 comm="syz.5.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1454.544203][ T29] audit: type=1400 audit(1735633059.738:21862): avc: denied { bpf } for pid=16568 comm="syz.5.2998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1454.592764][ T29] audit: type=1400 audit(1735633059.738:21863): avc: denied { perfmon } for pid=16568 comm="syz.5.2998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1454.653280][ T29] audit: type=1400 audit(1735633059.738:21864): avc: denied { perfmon } for pid=16568 comm="syz.5.2998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1454.715434][ T29] audit: type=1400 audit(1735633059.747:21865): avc: denied { perfmon } for pid=16568 comm="syz.5.2998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1454.765406][ T9693] Bluetooth: hci3: command tx timeout [ 1454.787413][ T29] audit: type=1400 audit(1735633059.747:21866): avc: denied { perfmon } for pid=16568 comm="syz.5.2998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1454.849371][ T29] audit: type=1400 audit(1735633059.747:21867): avc: denied { perfmon } for pid=16568 comm="syz.5.2998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1459.396392][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.418666][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.341892][T16554] lo speed is unknown, defaulting to 1000 [ 1460.807132][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1460.807150][ T29] audit: type=1400 audit(1735633065.726:21872): avc: denied { read write } for pid=13431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1460.838217][ T29] audit: type=1400 audit(1735633065.726:21873): avc: denied { read write open } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1460.863742][ T29] audit: type=1400 audit(1735633065.726:21874): avc: denied { ioctl } for pid=13431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1461.014755][ T29] audit: type=1400 audit(1735633066.044:21875): avc: denied { write } for pid=16576 comm="syz.5.2999" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.077591][ T29] audit: type=1400 audit(1735633066.081:21876): avc: denied { write open } for pid=16576 comm="syz.5.2999" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.147591][ T29] audit: type=1400 audit(1735633066.128:21877): avc: denied { create } for pid=16576 comm="syz.5.2999" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1461.189005][ T29] audit: type=1400 audit(1735633066.128:21878): avc: denied { map } for pid=16576 comm="syz.5.2999" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1461.269613][ T29] audit: type=1400 audit(1735633066.128:21879): avc: denied { read write } for pid=16576 comm="syz.5.2999" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1461.311644][ T29] audit: type=1400 audit(1735633066.128:21880): avc: denied { map } for pid=16576 comm="syz.5.2999" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1461.397053][ T29] audit: type=1400 audit(1735633066.147:21881): avc: denied { read write } for pid=16576 comm="syz.5.2999" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1478.174117][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1478.174134][ T29] audit: type=1400 audit(1735633082.088:21887): avc: denied { execmem } for pid=16579 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1479.415248][ T29] audit: type=1400 audit(1735633083.258:21888): avc: denied { execmem } for pid=16580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1479.907895][ T29] audit: type=1400 audit(1735633083.716:21889): avc: denied { create } for pid=16581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1479.984820][ T29] audit: type=1400 audit(1735633083.744:21890): avc: denied { read write } for pid=16581 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1480.092067][ T29] audit: type=1400 audit(1735633083.772:21891): avc: denied { read write open } for pid=16581 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1480.457997][ T29] audit: type=1400 audit(1735633084.231:21892): avc: denied { ioctl } for pid=16581 comm="syz-executor" path="socket:[69786]" dev="sockfs" ino=69786 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1480.564415][T12342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1480.575826][T12342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1480.584064][T12342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1480.591985][T12342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1480.599487][T12342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1480.606976][T12342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1480.670353][ T29] audit: type=1400 audit(1735633084.371:21893): avc: denied { ioctl } for pid=16581 comm="syz-executor" path="socket:[69786]" dev="sockfs" ino=69786 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1480.695983][ T29] audit: type=1400 audit(1735633084.381:21894): avc: denied { read } for pid=16581 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1480.717581][ T29] audit: type=1400 audit(1735633084.381:21895): avc: denied { read open } for pid=16581 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1480.741719][ T29] audit: type=1400 audit(1735633084.390:21896): avc: denied { mounton } for pid=16581 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1480.820513][T12342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1480.831800][T12342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1480.839648][T12342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1480.847452][T12342] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1480.854932][T12342] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1480.909318][T12342] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1482.808189][ T9693] Bluetooth: hci4: command tx timeout [ 1483.150237][ T9693] Bluetooth: hci7: command tx timeout [ 1483.531703][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1483.531718][ T29] audit: type=1400 audit(1735633087.103:21905): avc: denied { execmem } for pid=16585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1483.980804][ T29] audit: type=1400 audit(1735633087.524:21906): avc: denied { create } for pid=16586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1484.024127][T12342] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1484.036477][T12342] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1484.046732][T12342] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1484.055712][T12342] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1484.063303][T12342] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1484.076570][T12342] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1484.157302][ T29] audit: type=1400 audit(1735633087.552:21907): avc: denied { read write } for pid=16586 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1484.181804][ T29] audit: type=1400 audit(1735633087.552:21908): avc: denied { read write open } for pid=16586 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1484.206883][ T29] audit: type=1400 audit(1735633087.590:21909): avc: denied { ioctl } for pid=16586 comm="syz-executor" path="socket:[69829]" dev="sockfs" ino=69829 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1484.232524][ T29] audit: type=1400 audit(1735633087.627:21910): avc: denied { ioctl } for pid=16586 comm="syz-executor" path="socket:[69829]" dev="sockfs" ino=69829 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1484.291147][ T29] audit: type=1400 audit(1735633087.646:21911): avc: denied { read } for pid=16586 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1484.325747][ T29] audit: type=1400 audit(1735633087.646:21912): avc: denied { read open } for pid=16586 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1484.362950][ T29] audit: type=1400 audit(1735633087.655:21913): avc: denied { mounton } for pid=16586 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1485.031377][T12342] Bluetooth: hci4: command tx timeout [ 1485.373760][T12342] Bluetooth: hci7: command tx timeout [ 1486.313952][T12342] Bluetooth: hci8: command tx timeout [ 1487.254549][T12342] Bluetooth: hci4: command tx timeout [ 1487.596816][T12342] Bluetooth: hci7: command tx timeout [ 1488.537244][T12342] Bluetooth: hci8: command tx timeout [ 1488.579904][ T29] audit: type=1400 audit(1735633091.828:21914): avc: denied { execmem } for pid=16588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1489.111964][ T29] audit: type=1400 audit(1735633092.323:21915): avc: denied { create } for pid=16589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1489.160046][ T9693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1489.172598][ T9693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1489.180564][ T9693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1489.189805][ T9693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1489.197460][ T9693] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1489.204744][ T9693] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1489.253655][ T29] audit: type=1400 audit(1735633092.361:21916): avc: denied { read write } for pid=16589 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1489.328145][ T29] audit: type=1400 audit(1735633092.361:21917): avc: denied { read write open } for pid=16589 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1489.395178][ T29] audit: type=1400 audit(1735633092.436:21918): avc: denied { ioctl } for pid=16589 comm="syz-executor" path="socket:[69853]" dev="sockfs" ino=69853 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1489.446940][ T29] audit: type=1400 audit(1735633092.436:21919): avc: denied { ioctl } for pid=16589 comm="syz-executor" path="socket:[69853]" dev="sockfs" ino=69853 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1489.477800][T12342] Bluetooth: hci4: command tx timeout [ 1489.483226][ T29] audit: type=1400 audit(1735633092.445:21920): avc: denied { read } for pid=16589 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1489.517838][ T29] audit: type=1400 audit(1735633092.445:21921): avc: denied { read open } for pid=16589 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1489.557203][ T29] audit: type=1400 audit(1735633092.511:21922): avc: denied { mounton } for pid=16589 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1489.820089][T12342] Bluetooth: hci7: command tx timeout [ 1490.760514][T12342] Bluetooth: hci8: command tx timeout [ 1491.444824][T12342] Bluetooth: hci1: command tx timeout [ 1492.983844][T12342] Bluetooth: hci8: command tx timeout [ 1493.668140][T12342] Bluetooth: hci1: command tx timeout [ 1495.891642][T12342] Bluetooth: hci1: command tx timeout [ 1498.114678][T12342] Bluetooth: hci1: command tx timeout [ 1507.608725][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1507.615034][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.732800][ T29] audit: type=1400 audit(1735633111.614:21923): avc: denied { execmem } for pid=16591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1511.023682][ T29] audit: type=1400 audit(1735633112.821:21924): avc: denied { create } for pid=16592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1511.083912][ T29] audit: type=1400 audit(1735633112.868:21925): avc: denied { read write } for pid=16592 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1511.164409][ T29] audit: type=1400 audit(1735633112.877:21926): avc: denied { read write open } for pid=16592 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1511.440069][ T9693] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1511.458714][ T9693] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1511.476198][ T9693] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1511.487237][ T29] audit: type=1400 audit(1735633113.242:21927): avc: denied { ioctl } for pid=16592 comm="syz-executor" path="socket:[69877]" dev="sockfs" ino=69877 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1511.564982][ T9693] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1511.750268][ T9693] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1511.781735][ T9693] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1511.805228][ T29] audit: type=1400 audit(1735633113.551:21928): avc: denied { ioctl } for pid=16592 comm="syz-executor" path="socket:[69877]" dev="sockfs" ino=69877 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1511.927010][ T29] audit: type=1400 audit(1735633113.598:21929): avc: denied { read } for pid=16592 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1511.956448][ T29] audit: type=1400 audit(1735633113.598:21930): avc: denied { read open } for pid=16592 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1511.980862][ T29] audit: type=1400 audit(1735633113.607:21931): avc: denied { mounton } for pid=16592 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1514.019550][T12342] Bluetooth: hci9: command tx timeout [ 1516.242957][T12342] Bluetooth: hci9: command tx timeout [ 1518.466256][T12342] Bluetooth: hci9: command tx timeout [ 1520.689353][T12342] Bluetooth: hci9: command tx timeout [ 1543.328519][ T29] audit: type=1400 audit(1735633143.049:21932): avc: denied { execmem } for pid=16594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1544.115009][ T29] audit: type=1400 audit(1735633143.788:21933): avc: denied { execmem } for pid=16595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1545.244817][ T29] audit: type=1400 audit(1735633144.845:21934): avc: denied { create } for pid=16596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1545.337920][ T29] audit: type=1400 audit(1735633144.892:21935): avc: denied { read write } for pid=16596 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1545.423425][ T29] audit: type=1400 audit(1735633144.920:21936): avc: denied { read write open } for pid=16596 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1545.845280][ T29] audit: type=1400 audit(1735633145.407:21937): avc: denied { ioctl } for pid=16596 comm="syz-executor" path="socket:[69938]" dev="sockfs" ino=69938 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1545.949395][ T9693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1545.960778][ T9693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1545.968723][ T9693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1545.976287][ T9693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1545.983715][ T9693] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1545.991467][ T9693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1546.002143][ T29] audit: type=1400 audit(1735633145.556:21938): avc: denied { ioctl } for pid=16596 comm="syz-executor" path="socket:[69938]" dev="sockfs" ino=69938 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1546.064736][ T29] audit: type=1400 audit(1735633145.584:21939): avc: denied { read } for pid=16596 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1546.159870][ T29] audit: type=1400 audit(1735633145.584:21940): avc: denied { read open } for pid=16596 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1546.219252][ T9693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1546.230515][ T9693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1546.238570][ T9693] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1546.246611][ T9693] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1546.254023][ T9693] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1546.261348][ T9693] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1546.319563][ T29] audit: type=1400 audit(1735633145.594:21941): avc: denied { mounton } for pid=16596 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1548.224300][ T9693] Bluetooth: hci0: command tx timeout [ 1548.481410][ T9693] Bluetooth: hci5: command tx timeout [ 1548.682083][T12342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1548.703751][T12342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1548.711888][T12342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1548.722657][T12342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1548.731257][T12342] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1548.738686][T12342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1548.748976][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1548.748989][ T29] audit: type=1400 audit(1735633148.129:21955): avc: denied { ioctl } for pid=16601 comm="syz-executor" path="socket:[69981]" dev="sockfs" ino=69981 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1548.864731][ T29] audit: type=1400 audit(1735633148.166:21956): avc: denied { read } for pid=16601 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1548.887743][ T29] audit: type=1400 audit(1735633148.166:21957): avc: denied { read open } for pid=16601 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1548.911985][ T29] audit: type=1400 audit(1735633148.194:21958): avc: denied { mounton } for pid=16601 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1550.447274][ T9693] Bluetooth: hci0: command tx timeout [ 1550.705949][ T9693] Bluetooth: hci5: command tx timeout [ 1550.960368][ T9693] Bluetooth: hci6: command tx timeout [ 1552.681220][ T9693] Bluetooth: hci0: command tx timeout [ 1552.932976][ T9693] Bluetooth: hci5: command tx timeout [ 1553.183666][ T9693] Bluetooth: hci6: command tx timeout [ 1553.448443][ T29] audit: type=1400 audit(1735633152.517:21959): avc: denied { execmem } for pid=16603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1554.126089][ T29] audit: type=1400 audit(1735633153.144:21960): avc: denied { create } for pid=16604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1554.287926][T12342] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1554.298674][T12342] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1554.310873][T12342] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1554.318679][T12342] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1554.326439][T12342] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1554.334748][T12342] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1554.370032][ T29] audit: type=1400 audit(1735633153.190:21961): avc: denied { read write } for pid=16604 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1554.558561][ T29] audit: type=1400 audit(1735633153.228:21962): avc: denied { read write open } for pid=16604 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1554.893774][T12342] Bluetooth: hci0: command tx timeout [ 1555.032760][ T29] audit: type=1400 audit(1735633153.303:21963): avc: denied { ioctl } for pid=16604 comm="syz-executor" path="socket:[70032]" dev="sockfs" ino=70032 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1555.093742][ T29] audit: type=1400 audit(1735633153.368:21964): avc: denied { ioctl } for pid=16604 comm="syz-executor" path="socket:[70032]" dev="sockfs" ino=70032 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1555.222390][T12342] Bluetooth: hci5: command tx timeout [ 1555.393394][ T29] audit: type=1400 audit(1735633153.434:21965): avc: denied { read } for pid=16604 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1555.428445][T12342] Bluetooth: hci6: command tx timeout [ 1555.452659][T16604] lo speed is unknown, defaulting to 1000 [ 1555.610041][ T29] audit: type=1400 audit(1735633153.434:21966): avc: denied { read open } for pid=16604 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1555.635862][ T29] audit: type=1400 audit(1735633153.471:21967): avc: denied { mounton } for pid=16604 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1556.604230][T12342] Bluetooth: hci10: command tx timeout [ 1557.630351][T12342] Bluetooth: hci6: command tx timeout [ 1558.832090][T12342] Bluetooth: hci10: command tx timeout [ 1559.090549][T12342] Bluetooth: hci2: command 0x0406 tx timeout [ 1561.050701][ T9693] Bluetooth: hci10: command tx timeout [ 1563.273927][ T9693] Bluetooth: hci10: command tx timeout [ 1573.281140][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1573.287457][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1574.946219][ T29] audit: type=1400 audit(1735633172.622:21968): avc: denied { execmem } for pid=16607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1576.177209][ T29] audit: type=1400 audit(1735633173.782:21969): avc: denied { create } for pid=16608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1576.249639][ T29] audit: type=1400 audit(1735633173.838:21970): avc: denied { read write } for pid=16608 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1576.319333][ T29] audit: type=1400 audit(1735633173.838:21971): avc: denied { read write open } for pid=16608 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1576.584601][T12342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1576.614670][T12342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1576.641076][T12342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1576.656236][ T29] audit: type=1400 audit(1735633174.231:21972): avc: denied { ioctl } for pid=16608 comm="syz-executor" path="socket:[70083]" dev="sockfs" ino=70083 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1576.730811][T12342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1576.761883][T12342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1576.775512][T12342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1576.844484][ T29] audit: type=1400 audit(1735633174.390:21973): avc: denied { ioctl } for pid=16608 comm="syz-executor" path="socket:[70083]" dev="sockfs" ino=70083 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1577.041306][ T29] audit: type=1400 audit(1735633174.586:21974): avc: denied { read } for pid=16608 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1577.073237][ T29] audit: type=1400 audit(1735633174.614:21975): avc: denied { read open } for pid=16608 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1577.268940][ T29] audit: type=1400 audit(1735633174.802:21976): avc: denied { mounton } for pid=16608 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1579.093560][T12342] Bluetooth: hci1: command tx timeout [ 1580.979712][T12342] Bluetooth: hci3: command 0x0406 tx timeout [ 1581.316834][T12342] Bluetooth: hci1: command tx timeout [ 1583.540351][T12342] Bluetooth: hci1: command tx timeout [ 1585.763389][T12342] Bluetooth: hci1: command tx timeout [ 1608.022273][ T29] audit: type=1400 audit(1735633203.579:21977): avc: denied { execmem } for pid=16610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1609.261929][ T29] audit: type=1400 audit(1735633204.739:21978): avc: denied { execmem } for pid=16611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1610.080620][ T29] audit: type=1400 audit(1735633205.497:21979): avc: denied { create } for pid=16612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1610.157617][ T29] audit: type=1400 audit(1735633205.544:21980): avc: denied { read write } for pid=16612 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1610.262393][ T29] audit: type=1400 audit(1735633205.553:21981): avc: denied { read write open } for pid=16612 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1611.047704][ T29] audit: type=1400 audit(1735633206.404:21982): avc: denied { ioctl } for pid=16612 comm="syz-executor" path="socket:[70112]" dev="sockfs" ino=70112 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1611.077949][T12342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1611.088414][T12342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1611.257385][T12342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1611.267599][T12342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1611.275098][T12342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1611.282411][T12342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1611.394070][ T29] audit: type=1400 audit(1735633206.722:21983): avc: denied { ioctl } for pid=16612 comm="syz-executor" path="socket:[70112]" dev="sockfs" ino=70112 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1611.493162][ T29] audit: type=1400 audit(1735633206.760:21984): avc: denied { read } for pid=16612 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1611.641249][ T29] audit: type=1400 audit(1735633206.760:21985): avc: denied { read open } for pid=16612 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1611.744422][ T29] audit: type=1400 audit(1735633206.844:21986): avc: denied { mounton } for pid=16612 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1611.780968][T12342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1611.801576][T12342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1611.811001][T12342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1611.835804][T12342] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1611.845233][T12342] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1611.852413][T12342] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1613.640597][T12342] Bluetooth: hci4: command tx timeout [ 1613.786780][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1613.786796][ T29] audit: type=1400 audit(1735633208.968:21996): avc: denied { create } for pid=16617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1613.861924][ T29] audit: type=1400 audit(1735633209.005:21997): avc: denied { read write } for pid=16617 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1613.896614][ T29] audit: type=1400 audit(1735633209.005:21998): avc: denied { read write open } for pid=16617 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1613.936772][ T29] audit: type=1400 audit(1735633209.033:21999): avc: denied { ioctl } for pid=16617 comm="syz-executor" path="socket:[70155]" dev="sockfs" ino=70155 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1613.971196][ T9693] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1613.989447][ T9693] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1613.998976][ T9693] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1614.015662][ T9693] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1614.023146][ T9693] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1614.031766][ T9693] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1614.068857][ T9693] Bluetooth: hci7: command tx timeout [ 1614.113918][ T29] audit: type=1400 audit(1735633209.211:22000): avc: denied { ioctl } for pid=16617 comm="syz-executor" path="socket:[70155]" dev="sockfs" ino=70155 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1614.140789][ T29] audit: type=1400 audit(1735633209.220:22001): avc: denied { read } for pid=16617 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1614.165078][ T29] audit: type=1400 audit(1735633209.220:22002): avc: denied { read open } for pid=16617 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1614.189652][ T29] audit: type=1400 audit(1735633209.248:22003): avc: denied { mounton } for pid=16617 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1615.863419][ T9693] Bluetooth: hci4: command tx timeout [ 1616.205476][ T9693] Bluetooth: hci8: command tx timeout [ 1616.290911][ T9693] Bluetooth: hci7: command tx timeout [ 1618.086706][ T9693] Bluetooth: hci4: command tx timeout [ 1618.428960][ T9693] Bluetooth: hci8: command tx timeout [ 1618.514462][ T9693] Bluetooth: hci7: command tx timeout [ 1618.562528][ T29] audit: type=1400 audit(1735633213.430:22004): avc: denied { execmem } for pid=16619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1619.209023][ T29] audit: type=1400 audit(1735633214.038:22005): avc: denied { create } for pid=16620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1619.270887][ T29] audit: type=1400 audit(1735633214.076:22006): avc: denied { read write } for pid=16620 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1619.335132][T12342] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1619.346219][T12342] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1619.354802][ T29] audit: type=1400 audit(1735633214.076:22007): avc: denied { read write open } for pid=16620 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1619.380009][ T29] audit: type=1400 audit(1735633214.095:22008): avc: denied { ioctl } for pid=16620 comm="syz-executor" path="socket:[70179]" dev="sockfs" ino=70179 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1619.450246][T12342] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1619.463498][T12342] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1619.471266][T12342] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1619.478644][T12342] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1619.505138][ T29] audit: type=1400 audit(1735633214.310:22009): avc: denied { ioctl } for pid=16620 comm="syz-executor" path="socket:[70179]" dev="sockfs" ino=70179 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1619.577553][ T29] audit: type=1400 audit(1735633214.385:22010): avc: denied { read } for pid=16620 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1619.663209][ T29] audit: type=1400 audit(1735633214.413:22011): avc: denied { read open } for pid=16620 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1619.690749][ T29] audit: type=1400 audit(1735633214.422:22012): avc: denied { mounton } for pid=16620 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1620.310011][T12342] Bluetooth: hci4: command tx timeout [ 1620.652321][T12342] Bluetooth: hci8: command tx timeout [ 1620.737520][T12342] Bluetooth: hci7: command tx timeout [ 1621.763828][T12342] Bluetooth: hci11: command tx timeout [ 1622.875327][T12342] Bluetooth: hci8: command tx timeout [ 1623.986941][T12342] Bluetooth: hci11: command tx timeout [ 1626.210246][T12342] Bluetooth: hci11: command tx timeout [ 1628.433583][T12342] Bluetooth: hci11: command tx timeout [ 1638.960601][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1638.970971][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1639.521122][ T29] audit: type=1400 audit(1735633233.049:22013): avc: denied { execmem } for pid=16622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1640.836171][ T29] audit: type=1400 audit(1735633234.274:22014): avc: denied { create } for pid=16623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1640.886832][ T29] audit: type=1400 audit(1735633234.312:22015): avc: denied { read write } for pid=16623 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1640.970818][ T29] audit: type=1400 audit(1735633234.312:22016): avc: denied { read write open } for pid=16623 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1641.311990][T16624] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1641.338299][T16624] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1641.354135][T16624] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1641.365674][ T29] audit: type=1400 audit(1735633234.761:22017): avc: denied { ioctl } for pid=16623 comm="syz-executor" path="socket:[70203]" dev="sockfs" ino=70203 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1641.420254][T16624] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1641.445884][T16624] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1641.459500][T16624] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1641.510713][ T29] audit: type=1400 audit(1735633234.892:22018): avc: denied { ioctl } for pid=16623 comm="syz-executor" path="socket:[70203]" dev="sockfs" ino=70203 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1641.714508][ T29] audit: type=1400 audit(1735633235.098:22019): avc: denied { read } for pid=16623 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1641.776743][ T29] audit: type=1400 audit(1735633235.116:22020): avc: denied { read open } for pid=16623 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1641.953298][ T29] audit: type=1400 audit(1735633235.313:22021): avc: denied { mounton } for pid=16623 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1643.825514][T16624] Bluetooth: hci12: command tx timeout [ 1646.048787][T16624] Bluetooth: hci12: command tx timeout [ 1646.652616][T16624] Bluetooth: hci9: command 0x0406 tx timeout [ 1648.272147][T16624] Bluetooth: hci12: command tx timeout [ 1650.495367][T16624] Bluetooth: hci12: command tx timeout [ 1672.682832][ T29] audit: type=1400 audit(1735633264.062:22022): avc: denied { execmem } for pid=16626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1673.878019][ T29] audit: type=1400 audit(1735633265.185:22023): avc: denied { create } for pid=16627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1673.940042][ T29] audit: type=1400 audit(1735633265.213:22024): avc: denied { read write } for pid=16627 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1674.021948][ T29] audit: type=1400 audit(1735633265.213:22025): avc: denied { read write open } for pid=16627 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1674.491680][ T29] audit: type=1400 audit(1735633265.756:22026): avc: denied { execmem } for pid=16628 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1674.581732][T16624] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1674.600018][T16624] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1674.622598][ T29] audit: type=1400 audit(1735633265.821:22027): avc: denied { ioctl } for pid=16627 comm="syz-executor" path="socket:[70227]" dev="sockfs" ino=70227 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1674.709955][T16624] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1675.141513][ T9693] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1676.084631][ T9693] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1676.091965][ T9693] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1676.127531][ T29] audit: type=1400 audit(1735633267.262:22028): avc: denied { ioctl } for pid=16627 comm="syz-executor" path="socket:[70227]" dev="sockfs" ino=70227 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1676.212981][ T29] audit: type=1400 audit(1735633267.355:22029): avc: denied { read } for pid=16627 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1676.246430][ T29] audit: type=1400 audit(1735633267.355:22030): avc: denied { read open } for pid=16627 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1676.356949][ T29] audit: type=1400 audit(1735633267.365:22031): avc: denied { mounton } for pid=16627 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1676.718268][T12342] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1676.740800][T12342] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1676.750687][T12342] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1676.765810][T12342] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1676.773652][T12342] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1676.781437][T12342] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1678.286822][T16633] Bluetooth: hci13: command tx timeout [ 1681.675070][T16633] Bluetooth: hci14: command tx timeout [ 1681.682063][T16633] Bluetooth: hci6: command 0x0406 tx timeout [ 1681.693093][T16633] Bluetooth: hci0: command 0x0406 tx timeout [ 1681.699289][T16633] Bluetooth: hci5: command 0x0406 tx timeout [ 1681.705285][T16633] Bluetooth: hci13: command tx timeout [ 1681.861768][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1681.861782][ T29] audit: type=1400 audit(1735633272.651:22040): avc: denied { execmem } for pid=16634 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1682.418993][ T29] audit: type=1400 audit(1735633273.174:22041): avc: denied { create } for pid=16636 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1682.481081][T16624] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1682.493515][T16624] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1682.501810][T16624] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1682.509523][T16624] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1682.517965][T16624] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1682.525592][T16624] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1682.593967][ T29] audit: type=1400 audit(1735633273.174:22042): avc: denied { read write } for pid=16636 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1682.618029][ T29] audit: type=1400 audit(1735633273.174:22043): avc: denied { read write open } for pid=16636 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1682.643043][ T29] audit: type=1400 audit(1735633273.231:22044): avc: denied { ioctl } for pid=16636 comm="syz-executor" path="socket:[70275]" dev="sockfs" ino=70275 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1682.668975][ T29] audit: type=1400 audit(1735633273.287:22045): avc: denied { ioctl } for pid=16636 comm="syz-executor" path="socket:[70275]" dev="sockfs" ino=70275 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1682.718692][ T29] audit: type=1400 audit(1735633273.305:22046): avc: denied { read } for pid=16636 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1682.857347][ T29] audit: type=1400 audit(1735633273.305:22047): avc: denied { read open } for pid=16636 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1682.890906][ T29] audit: type=1400 audit(1735633273.315:22048): avc: denied { mounton } for pid=16636 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1683.382741][ T29] audit: type=1400 audit(1735633274.073:22049): avc: denied { execmem } for pid=16639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1683.814118][T16633] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1683.828147][T16633] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1683.837614][T16633] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1683.884658][T16633] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1683.904789][T16633] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1683.912621][T16633] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1683.930945][T16638] Bluetooth: hci13: command tx timeout [ 1683.936475][T16638] Bluetooth: hci14: command tx timeout [ 1684.700086][T16633] Bluetooth: hci15: command tx timeout [ 1684.956761][T16633] Bluetooth: hci10: command 0x0406 tx timeout [ 1686.154359][T16638] Bluetooth: hci14: command tx timeout [ 1686.159883][T16638] Bluetooth: hci13: command tx timeout [ 1686.171529][T16633] Bluetooth: hci16: command tx timeout [ 1686.923491][T16642] Bluetooth: hci15: command tx timeout [ 1688.377307][T16635] Bluetooth: hci14: command tx timeout [ 1688.382844][T16642] Bluetooth: hci16: command tx timeout [ 1689.146628][T16642] Bluetooth: hci15: command tx timeout [ 1690.600558][T16642] Bluetooth: hci16: command tx timeout [ 1691.369997][T16642] Bluetooth: hci15: command tx timeout [ 1692.823942][T16630] Bluetooth: hci16: command tx timeout [ 1699.836220][ T30] INFO: task syz-executor:16484 blocked for more than 143 seconds. [ 1699.844163][ T30] Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1699.867595][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1699.876279][ T30] task:syz-executor state:D stack:26352 pid:16484 tgid:16484 ppid:1 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1699.901178][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1699.901192][ T29] audit: type=1400 audit(1735633289.537:22058): avc: denied { write } for pid=5803 comm="syz-executor" path="pipe:[4073]" dev="pipefs" ino=4073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1699.956405][ T30] Call Trace: [ 1699.959706][ T30] [ 1699.962643][ T30] __schedule+0xe58/0x5ad0 [ 1699.988452][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1700.031663][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1700.036897][ T30] ? __pfx___schedule+0x10/0x10 [ 1700.082356][ T30] ? schedule+0x298/0x350 [ 1700.086837][ T30] ? __pfx_lock_release+0x10/0x10 [ 1700.177576][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1700.183137][ T30] ? lock_acquire+0x2f/0xb0 [ 1700.187667][ T30] ? schedule+0x1fd/0x350 [ 1700.198957][ T29] audit: type=1400 audit(1735633289.565:22059): avc: denied { write } for pid=5803 comm="syz-executor" path="pipe:[4073]" dev="pipefs" ino=4073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1700.273759][ T29] audit: type=1400 audit(1735633289.565:22060): avc: denied { write } for pid=5803 comm="syz-executor" path="pipe:[4073]" dev="pipefs" ino=4073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1700.391667][ T29] audit: type=1400 audit(1735633289.911:22061): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1700.487525][ T30] schedule+0xe7/0x350 [ 1700.491640][ T30] schedule_preempt_disabled+0x13/0x30 [ 1700.497110][ T30] __mutex_lock+0x62b/0xa60 [ 1700.506585][ T30] ? tun_chr_close+0x38/0x230 [ 1700.511378][ T29] audit: type=1400 audit(1735633289.911:22062): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.540943][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1700.546052][ T30] ? locks_remove_file+0x393/0x5a0 [ 1700.551202][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 1700.557022][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1700.562165][ T30] ? tun_chr_close+0x38/0x230 [ 1700.567001][ T30] ? rtnl_lock+0x9/0x20 [ 1700.571166][ T30] tun_chr_close+0x38/0x230 [ 1700.576002][ T30] __fput+0x3f8/0xb60 [ 1700.580010][ T30] task_work_run+0x14e/0x250 [ 1700.584831][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1700.589961][ T30] do_exit+0xad8/0x2d70 [ 1700.594148][ T30] ? get_signal+0x8f7/0x26c0 [ 1700.598991][ T30] ? __pfx_do_exit+0x10/0x10 [ 1700.603601][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1700.609036][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1700.614520][ T30] do_group_exit+0xd3/0x2a0 [ 1700.619146][ T30] get_signal+0x24ed/0x26c0 [ 1700.623686][ T30] ? __sys_sendto+0x2a1/0x4f0 [ 1700.628434][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1700.633479][ T30] ? __pfx_get_signal+0x10/0x10 [ 1700.638479][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 1700.644043][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1700.650894][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 1700.656561][ T30] do_syscall_64+0xda/0x250 [ 1700.690838][ T29] audit: type=1400 audit(1735633289.911:22063): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1700.713404][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.719335][ T30] RIP: 0033:0x7fb7b7587bbc [ 1700.733468][ T29] audit: type=1400 audit(1735633289.967:22064): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1700.765416][ T30] RSP: 002b:00007ffca989b270 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1700.773869][ T30] RAX: 0000000000000040 RBX: 00007fb7b82a4620 RCX: 00007fb7b7587bbc [ 1700.829528][ T30] RDX: 0000000000000040 RSI: 00007fb7b82a4670 RDI: 0000000000000003 [ 1700.837552][ T30] RBP: 0000000000000000 R08: 00007ffca989b2c4 R09: 000000000000000c [ 1700.845656][ T29] audit: type=1400 audit(1735633289.967:22065): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1700.904505][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1700.912523][ T30] R13: 0000000000000000 R14: 00007fb7b82a4670 R15: 0000000000000000 [ 1700.922248][ T29] audit: type=1400 audit(1735633290.052:22066): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1700.956137][ T30] [ 1700.959329][ T30] INFO: task syz-executor:16487 blocked for more than 144 seconds. [ 1700.967221][ T30] Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1700.986085][ T29] audit: type=1400 audit(1735633290.052:22067): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.008292][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1701.017043][ T30] task:syz-executor state:D stack:24976 pid:16487 tgid:16487 ppid:1 flags:0x00004006 [ 1701.043326][ T30] Call Trace: [ 1701.046625][ T30] [ 1701.049565][ T30] __schedule+0xe58/0x5ad0 [ 1701.064475][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1701.069817][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1701.075038][ T30] ? __pfx___schedule+0x10/0x10 [ 1701.090176][ T30] ? schedule+0x298/0x350 [ 1701.094522][ T30] ? __pfx_lock_release+0x10/0x10 [ 1701.106028][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1701.116455][ T30] ? lock_acquire+0x2f/0xb0 [ 1701.127275][ T30] ? schedule+0x1fd/0x350 [ 1701.131840][ T30] schedule+0xe7/0x350 [ 1701.135938][ T30] schedule_preempt_disabled+0x13/0x30 [ 1701.157161][ T30] __mutex_lock+0x62b/0xa60 [ 1701.161929][ T30] ? tun_chr_close+0x38/0x230 [ 1701.166626][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1701.181109][ T30] ? locks_remove_file+0x393/0x5a0 [ 1701.186978][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 1701.192469][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1701.211424][ T30] ? tun_chr_close+0x38/0x230 [ 1701.221001][ T30] ? rtnl_lock+0x9/0x20 [ 1701.229937][ T30] tun_chr_close+0x38/0x230 [ 1701.234471][ T30] __fput+0x3f8/0xb60 [ 1701.243332][ T30] task_work_run+0x14e/0x250 [ 1701.254397][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1701.267737][ T30] do_exit+0xad8/0x2d70 [ 1701.272085][ T30] ? get_signal+0x8f7/0x26c0 [ 1701.276691][ T30] ? __pfx_do_exit+0x10/0x10 [ 1701.289148][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1701.294255][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1701.299651][ T30] do_group_exit+0xd3/0x2a0 [ 1701.314868][ T30] get_signal+0x24ed/0x26c0 [ 1701.319422][ T30] ? __sys_sendto+0x2a1/0x4f0 [ 1701.331232][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1701.340388][ T30] ? __pfx_get_signal+0x10/0x10 [ 1701.350926][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 1701.360514][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1701.373274][ T30] ? rcu_is_watching+0x12/0xc0 [ 1701.378634][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 1701.384299][ T30] do_syscall_64+0xda/0x250 [ 1701.402559][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.411725][ T30] RIP: 0033:0x7fe655187bbc [ 1701.416858][ T30] RSP: 002b:00007ffd3cf2b560 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1701.426443][ T30] RAX: 000000000000003c RBX: 00007fe655ea4620 RCX: 00007fe655187bbc [ 1701.444316][ T30] RDX: 000000000000003c RSI: 00007fe655ea4670 RDI: 0000000000000003 [ 1701.456451][ T30] RBP: 0000000000000000 R08: 00007ffd3cf2b5b4 R09: 000000000000000c [ 1701.470399][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1701.481665][ T30] R13: 0000000000000000 R14: 00007fe655ea4670 R15: 0000000000000000 [ 1701.489674][ T30] [ 1701.507592][ T30] INFO: task syz-executor:16596 blocked for more than 144 seconds. [ 1701.529355][ T30] Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1701.541542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1701.562000][ T30] task:syz-executor state:D stack:27408 pid:16596 tgid:16596 ppid:1 flags:0x00004006 [ 1701.577665][ T30] Call Trace: [ 1701.580958][ T30] [ 1701.583903][ T30] __schedule+0xe58/0x5ad0 [ 1701.597286][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1701.604054][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1701.609297][ T30] ? __pfx___schedule+0x10/0x10 [ 1701.624962][ T30] ? schedule+0x298/0x350 [ 1701.629329][ T30] ? __pfx_lock_release+0x10/0x10 [ 1701.641843][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1701.647692][ T30] ? lock_acquire+0x2f/0xb0 [ 1701.652216][ T30] ? schedule+0x1fd/0x350 [ 1701.667612][ T30] schedule+0xe7/0x350 [ 1701.671712][ T30] schedule_preempt_disabled+0x13/0x30 [ 1701.683616][ T30] __mutex_lock+0x62b/0xa60 [ 1701.688250][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 1701.693373][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1701.708553][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1701.714300][ T30] ? hlock_class+0x4e/0x130 [ 1701.726294][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 1701.731604][ T30] ? rtnl_lock+0x9/0x20 [ 1701.735765][ T30] inet_rtm_newaddr+0x316/0x1560 [ 1701.751325][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1701.757793][ T30] ? find_held_lock+0x2d/0x110 [ 1701.770255][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1701.775661][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1701.790032][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 1701.795093][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1701.800569][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1701.816350][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1701.821573][ T30] ? __pfx_sock_has_perm+0x10/0x10 [ 1701.833612][ T30] ? __lock_acquire+0xcc5/0x3c40 [ 1701.838732][ T30] netlink_rcv_skb+0x16b/0x440 [ 1701.843510][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1701.865476][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1701.875623][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 1701.885740][ T30] netlink_unicast+0x53c/0x7f0 [ 1701.898451][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1701.903772][ T30] netlink_sendmsg+0x8b8/0xd70 [ 1701.908560][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.925187][ T30] __sys_sendto+0x488/0x4f0 [ 1701.929728][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1701.939612][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 1701.949883][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 1701.960654][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 1701.970966][ T30] ? do_syscall_64+0x91/0x250 [ 1701.991310][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1702.005414][ T30] do_syscall_64+0xcd/0x250 [ 1702.009949][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.015860][ T30] RIP: 0033:0x7fc506987bbc [ 1702.031494][ T30] RSP: 002b:00007ffca814d7d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1702.046131][ T30] RAX: ffffffffffffffda RBX: 00007fc5076a4620 RCX: 00007fc506987bbc [ 1702.058159][ T30] RDX: 0000000000000028 RSI: 00007fc5076a4670 RDI: 0000000000000003 [ 1702.071463][ T30] RBP: 0000000000000000 R08: 00007ffca814d824 R09: 000000000000000c [ 1702.088913][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1702.111593][ T30] R13: 0000000000000000 R14: 00007fc5076a4670 R15: 0000000000000000 [ 1702.119726][ T30] [ 1702.132907][ T30] INFO: task syz-executor:16598 blocked for more than 145 seconds. [ 1702.140930][ T30] Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1702.159014][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1702.167924][ T30] task:syz-executor state:D stack:27248 pid:16598 tgid:16598 ppid:1 flags:0x00000004 [ 1702.190120][ T30] Call Trace: [ 1702.193436][ T30] [ 1702.196373][ T30] __schedule+0xe58/0x5ad0 [ 1702.208003][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1702.213537][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1702.218763][ T30] ? __pfx___schedule+0x10/0x10 [ 1702.239289][ T30] ? schedule+0x298/0x350 [ 1702.243835][ T30] ? __pfx_lock_release+0x10/0x10 [ 1702.248870][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1702.264831][ T30] ? lock_acquire+0x2f/0xb0 [ 1702.269360][ T30] ? schedule+0x1fd/0x350 [ 1702.280106][ T30] schedule+0xe7/0x350 [ 1702.284338][ T30] schedule_preempt_disabled+0x13/0x30 [ 1702.289817][ T30] __mutex_lock+0x62b/0xa60 [ 1702.304599][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 1702.309760][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1702.314801][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1702.330944][ T30] ? hlock_class+0x4e/0x130 [ 1702.335499][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 1702.354614][ T30] ? rtnl_lock+0x9/0x20 [ 1702.361191][ T30] inet_rtm_newaddr+0x316/0x1560 [ 1702.366147][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1702.372749][ T30] ? find_held_lock+0x2d/0x110 [ 1702.377528][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1702.393810][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1702.399236][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 1702.415947][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1702.421461][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1702.432269][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1702.441607][ T30] ? __pfx_sock_has_perm+0x10/0x10 [ 1702.453254][ T30] ? __lock_acquire+0xcc5/0x3c40 [ 1702.464980][ T30] netlink_rcv_skb+0x16b/0x440 [ 1702.469775][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1702.475258][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1702.491472][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 1702.496805][ T30] netlink_unicast+0x53c/0x7f0 [ 1702.506398][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1702.517992][ T30] netlink_sendmsg+0x8b8/0xd70 [ 1702.522936][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1702.528244][ T30] __sys_sendto+0x488/0x4f0 [ 1702.543125][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1702.548198][ T30] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1702.561148][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 1702.565934][ T30] ? do_syscall_64+0x91/0x250 [ 1702.570621][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1702.592228][ T30] do_syscall_64+0xcd/0x250 [ 1702.598274][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.612967][ T30] RIP: 0033:0x7f7cc2d87bbc [ 1702.617534][ T30] RSP: 002b:00007fff9771bbc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1702.635870][ T30] RAX: ffffffffffffffda RBX: 00007f7cc3aa4620 RCX: 00007f7cc2d87bbc [ 1702.643864][ T30] RDX: 0000000000000028 RSI: 00007f7cc3aa4670 RDI: 0000000000000003 [ 1702.662191][ T30] RBP: 0000000000000000 R08: 00007fff9771bc14 R09: 000000000000000c [ 1702.674920][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1702.689059][ T30] R13: 0000000000000000 R14: 00007f7cc3aa4670 R15: 0000000000000000 [ 1702.710769][ T30] [ 1702.713819][ T30] [ 1702.713819][ T30] Showing all locks held in the system: [ 1702.728244][ T30] 3 locks held by kworker/u8:1/12: [ 1702.738074][ T30] 2 locks held by ksoftirqd/0/16: [ 1702.749356][ T30] 1 lock held by khungtaskd/30: [ 1702.759154][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1702.774568][ T30] 6 locks held by kworker/u8:3/52: [ 1702.783740][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1702.796368][ T30] #1: ffffc90000bd7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1702.806330][ T30] #2: ffffffff8fec6d90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0 [ 1702.832320][ T30] #3: ffff8880923240e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 1702.849703][ T30] #4: ffff888092325250 (&devlink->lock_key#25){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 1702.870228][ T30] #5: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x4c9/0xb20 [ 1702.879315][ T30] 2 locks held by getty/5580: [ 1702.884197][ T30] #0: ffff88803737a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1702.904966][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1702.923938][ T30] 3 locks held by kworker/u8:4/13425: [ 1702.929444][ T30] #0: ffff88814d132948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1702.956706][ T30] #1: ffffc90003e67d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1702.980912][ T30] #2: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1702.996840][ T30] 3 locks held by kworker/u8:8/13946: [ 1703.002721][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1703.030063][ T30] #1: ffffc900048d7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1703.040595][ T30] #2: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1703.057517][ T30] 1 lock held by syz-executor/16484: [ 1703.074062][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1703.083220][ T30] 1 lock held by syz-executor/16487: [ 1703.106199][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1703.115231][ T30] 2 locks held by syz-executor/16499: [ 1703.127750][ T30] #0: ffffffff8fec6d90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 [ 1703.137188][ T30] #1: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: setup_net+0x40b/0x860 [ 1703.157646][ T30] 2 locks held by syz-executor/16554: [ 1703.167000][ T30] #0: ffffffff8fec6d90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 [ 1703.193013][ T30] #1: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x218/0x790 [ 1703.211457][ T30] 2 locks held by syz.5.2999/16577: [ 1703.216807][ T30] 1 lock held by syz-executor/16592: [ 1703.222095][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.242501][ T30] 1 lock held by syz-executor/16596: [ 1703.250287][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.266603][ T30] 1 lock held by syz-executor/16598: [ 1703.271901][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.304694][ T30] 1 lock held by syz-executor/16601: [ 1703.316376][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.326102][ T30] 1 lock held by syz-executor/16604: [ 1703.340834][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x4f0/0x4760 [ 1703.350338][ T30] 1 lock held by syz-executor/16608: [ 1703.355832][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.365335][ T30] 1 lock held by syz-executor/16612: [ 1703.370625][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.380346][ T30] 1 lock held by syz-executor/16614: [ 1703.386266][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.395814][ T30] 1 lock held by syz-executor/16617: [ 1703.401096][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.428524][ T30] 1 lock held by syz-executor/16620: [ 1703.433835][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.448307][ T30] 1 lock held by syz-executor/16623: [ 1703.453600][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.472558][ T30] 1 lock held by syz-executor/16627: [ 1703.477854][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.494419][ T30] 1 lock held by syz-executor/16631: [ 1703.508047][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.522334][ T30] 1 lock held by syz-executor/16636: [ 1703.535287][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.554040][ T30] 1 lock held by syz-executor/16640: [ 1703.559613][ T30] #0: ffffffff8fedc988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 1703.576604][ T30] [ 1703.578944][ T30] ============================================= [ 1703.578944][ T30] [ 1703.598022][ T30] NMI backtrace for cpu 1 [ 1703.602361][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1703.612859][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1703.622916][ T30] Call Trace: [ 1703.626195][ T30] [ 1703.629128][ T30] dump_stack_lvl+0x116/0x1f0 [ 1703.633818][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1703.638759][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1703.644748][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1703.650739][ T30] watchdog+0xf14/0x1240 [ 1703.654996][ T30] ? __pfx_watchdog+0x10/0x10 [ 1703.659680][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1703.664892][ T30] ? __kthread_parkme+0x148/0x220 [ 1703.669942][ T30] ? __pfx_watchdog+0x10/0x10 [ 1703.674633][ T30] kthread+0x2c1/0x3a0 [ 1703.678709][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1703.683928][ T30] ? __pfx_kthread+0x10/0x10 [ 1703.688535][ T30] ret_from_fork+0x45/0x80 [ 1703.692957][ T30] ? __pfx_kthread+0x10/0x10 [ 1703.697559][ T30] ret_from_fork_asm+0x1a/0x30 [ 1703.702349][ T30] [ 1703.706628][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1703.711863][ C0] NMI backtrace for cpu 0 [ 1703.711877][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1703.711894][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1703.711904][ C0] RIP: 0010:nf_nat_ipv4_pre_routing+0x0/0x340 [ 1703.711931][ C0] Code: db fe ff ff 4c 89 ff e8 fe bb a1 f8 e9 66 ff ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 49 89 fe 41 55 49 89 d5 41 54 55 53 48 89 [ 1703.711945][ C0] RSP: 0018:ffffc900001578f0 EFLAGS: 00000246 [ 1703.711958][ C0] RAX: 1ffff11011a5764b RBX: ffff88808d2bb250 RCX: ffffffff894f118f [ 1703.711969][ C0] RDX: ffffc90000157980 RSI: ffff888187b64780 RDI: ffff888023782640 [ 1703.711978][ C0] RBP: ffff88808d2bb200 R08: 0000000000000004 R09: 0000000000000006 [ 1703.711987][ C0] R10: 0000000000000005 R11: 0000000000000001 R12: 0000000000000005 [ 1703.711996][ C0] R13: ffff888187b64780 R14: ffffffff895b0730 R15: dffffc0000000000 [ 1703.712006][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1703.712025][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1703.712035][ C0] CR2: 0000000021000000 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 1703.712045][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1703.712054][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1703.712063][ C0] Call Trace: [ 1703.712068][ C0] [ 1703.712074][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1703.712092][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1703.712107][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1703.712123][ C0] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 1703.712144][ C0] ? default_do_nmi+0x6a/0x160 [ 1703.712159][ C0] ? exc_nmi+0x170/0x1e0 [ 1703.712173][ C0] ? end_repeat_nmi+0xf/0x53 [ 1703.712193][ C0] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 1703.712215][ C0] ? nf_hook_slow+0x11f/0x200 [ 1703.712232][ C0] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 1703.712252][ C0] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 1703.712273][ C0] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 1703.712299][ C0] [ 1703.712304][ C0] [ 1703.712309][ C0] nf_hook_slow+0xbb/0x200 [ 1703.712324][ C0] nf_hook.constprop.0+0x42e/0x750 [ 1703.712340][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1703.712356][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1703.712372][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1703.712385][ C0] ? ip_rcv_core+0x93f/0xea0 [ 1703.712401][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1703.712414][ C0] ip_rcv+0x7d/0x5d0 [ 1703.712428][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1703.712441][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 1703.712463][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1703.712482][ C0] ? rcu_is_watching+0x12/0xc0 [ 1703.712507][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1703.712526][ C0] ? process_backlog+0x3f1/0x15f0 [ 1703.712545][ C0] ? process_backlog+0x3f1/0x15f0 [ 1703.712564][ C0] __netif_receive_skb+0x1d/0x160 [ 1703.712584][ C0] process_backlog+0x443/0x15f0 [ 1703.712608][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1703.712629][ C0] net_rx_action+0xa94/0x1010 [ 1703.712651][ C0] ? tmigr_handle_remote+0x153/0xdd0 [ 1703.712682][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1703.712701][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1703.712720][ C0] ? run_timer_base+0x11c/0x190 [ 1703.712746][ C0] handle_softirqs+0x213/0x8f0 [ 1703.712766][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1703.712784][ C0] ? rcu_is_watching+0x12/0xc0 [ 1703.712804][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1703.712821][ C0] ? smpboot_thread_fn+0x59d/0xa30 [ 1703.712840][ C0] run_ksoftirqd+0x3a/0x60 [ 1703.712857][ C0] smpboot_thread_fn+0x661/0xa30 [ 1703.712876][ C0] ? __kthread_parkme+0x148/0x220 [ 1703.712897][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1703.712915][ C0] kthread+0x2c1/0x3a0 [ 1703.712933][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1703.712951][ C0] ? __pfx_kthread+0x10/0x10 [ 1703.712969][ C0] ret_from_fork+0x45/0x80 [ 1703.712983][ C0] ? __pfx_kthread+0x10/0x10 [ 1703.713001][ C0] ret_from_fork_asm+0x1a/0x30 [ 1703.713030][ C0] [ 1704.174257][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1704.181147][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1704.191657][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1704.201722][ T30] Call Trace: [ 1704.204999][ T30] [ 1704.207930][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1704.212536][ T30] panic+0x71d/0x800 [ 1704.216440][ T30] ? __pfx_panic+0x10/0x10 [ 1704.220866][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1704.226246][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1704.232228][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1704.237607][ T30] ? watchdog+0xd7e/0x1240 [ 1704.242035][ T30] ? watchdog+0xd71/0x1240 [ 1704.246461][ T30] watchdog+0xd8f/0x1240 [ 1704.250713][ T30] ? __pfx_watchdog+0x10/0x10 [ 1704.255391][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1704.260595][ T30] ? __kthread_parkme+0x148/0x220 [ 1704.265651][ T30] ? __pfx_watchdog+0x10/0x10 [ 1704.270336][ T30] kthread+0x2c1/0x3a0 [ 1704.274411][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1704.279621][ T30] ? __pfx_kthread+0x10/0x10 [ 1704.284221][ T30] ret_from_fork+0x45/0x80 [ 1704.288640][ T30] ? __pfx_kthread+0x10/0x10 [ 1704.293239][ T30] ret_from_fork_asm+0x1a/0x30 [ 1704.298021][ T30] [ 1704.301254][ T30] Kernel Offset: disabled [ 1704.305559][ T30] Rebooting in 86400 seconds..