last executing test programs: 8m34.016919158s ago: executing program 32 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000002800)={0x0, 0xec25, 0x0, 0xfffffffd, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)="375ccbe7a8296f2a781998", 0xb, 0x0, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r8, 0x100ffffc}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4c1f, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, {0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, r8, 0xd}}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) utimensat(r9, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r8, 0x2}}, 0x18) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002880)=ANY=[@ANYBLOB="22403eda56fff642ac0086e7a734c11b103c213c9259ab5e56e96619f955c33b2dd70ec2d0ac521e49b3fdf5ca775d2e247791aabfc88af07fbd55ba1a318ff15071424f2ebcb7cddc566b88f87fd5b3c829cc37049ecfd563700a85f8e7746d37cbc6d450bb91665afed2158cfe36a9149e26b1d8dbc3a9deade3c0a7e57d00f1bbd9be0e1d3bb6664e86ee68924894d2e561b8e1705089188d30b7481190d8b682064ae83fea3901f56cc7f938d10d6c8d951a20b2c5f243872250cd0d209f5cf08235", @ANYRES32=r9, @ANYRESOCT=r11, @ANYRES32=r6], 0x24}}, 0x14) read$FUSE(r9, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r9, &(0x7f0000000240)={0x10, 0xffffffffffffffda, r13}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0) 4m1.762012402s ago: executing program 33 (id=1345): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x4, 0x3fd, @mcast1, 0x1}}, {{0xa, 0xfffe, 0x0, @private2}}}, 0x108) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000480)) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) keyctl$set_reqkey_keyring(0xe, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000f24b62505fd756ae29a2895016a67f99a6961ab4a456d6785ec23aa9a01d2734eec0f5248261c9295e651f068e2b5f30999d97e5f8cfaf2adbd6e43abd5ad472ed0b530b9be9d3ef197aabc624d20f099adb3792c89b8d7d03590232e932f05305a9eefaf8eacff7967bf5eedb2d9bed89a27ddd312418ac594b8e8e4e563f243416b181"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, r7, 0x25, 0x4, @void}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x5) 3m3.36798878s ago: executing program 34 (id=1616): syz_emit_ethernet(0xa9, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x73, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x7, 0x3, "2e2ba300d1be277621a9eb18ff4df5c6f25dc02624ad23e96cacf9eb7229a3d7315deb1754b53ae4d8778a46a6586b11299d6e4be1893474155370a36272e9e2a0e35746decff13c067de42012b4b463b433c1ca428bf49b593b433ee3ae284b7e1ab4f1aa1fd62ae6118b"}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40bc5311, &(0x7f0000000100)={0x80}) fanotify_init(0x8, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) ioperm(0x0, 0x7, 0xd645) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xa, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000423000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x4031, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) 1m41.737431031s ago: executing program 7 (id=1926): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d080"], 0x40}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r8) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r11 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKZEROOUT(r12, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) 1m39.024453861s ago: executing program 7 (id=1934): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000000091, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x8, 0x4, {0x1, @win={{0xd, 0x1, 0x3, 0x6b9b}, 0x5, 0x4, 0x0, 0x4, 0x0, 0x8}}}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf"], 0x0) 1m36.629990241s ago: executing program 6 (id=1942): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0xfffffffffffffcd8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000280)=0xe8) setresuid(r2, 0xffffffffffffffff, r4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x100000a, 0x80010, 0xffffffffffffffff, 0x2ee85000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r6, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x15}, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x0, 0x988ef5d6392e9693) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000400)={r1, 0x3, 0x5, 0x4, 0x9}, 0x14) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xd4, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 1m35.613767379s ago: executing program 7 (id=1946): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'wg0\x00', &(0x7f0000000380)=@ethtool_eee={0x25, 0x1ff, 0x80000000, 0x9, 0x2, 0x7f, 0xa9, 0x800, [0x1, 0x7a]}}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) close(r1) 1m35.337743634s ago: executing program 7 (id=1948): socket$inet(0x2, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}}, 0x40000) fstatfs(r0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r7, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xf2, 0x9d, 0x18, 0x40, 0x50d, 0x1203, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x2c, 0xc0, 0xe1}}]}}]}}, 0x0) 1m35.234164881s ago: executing program 0 (id=1949): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000bfe000/0x400000)=nil, 0x400000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x0, 0xfffffffe}) 1m34.911440694s ago: executing program 5 (id=1950): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000002140)='fuseblk\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r2, 0x4, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000640)=0x10000000, 0x20000009, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) socket(0x2e, 0x2, 0x10001) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x0) 1m34.343973857s ago: executing program 0 (id=1951): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x6}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0xc4140) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x500000}}, 0x50) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='user.syz\x00') write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfCno=', @ANYRESHEX=r6, @ANYRES64=r3, @ANYRESHEX=r7, @ANYBLOB=',version=9p2000.u,\x00']) socket(0x1a, 0x1, 0x80) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302c3919"]) 1m34.167826581s ago: executing program 5 (id=1953): syz_io_uring_setup(0x2292, &(0x7f0000000640), &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x1c}}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000000700000000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m33.121923693s ago: executing program 0 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000001010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m33.121115417s ago: executing program 5 (id=1955): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0a03"], 0xd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f82fc1b1000"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)=ANY=[@ANYBLOB="2c000000000b01210000000000000000020000000800024000f4ffff070001006f7366000800034000000000"], 0x2c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080), 0xd) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0xffffffffffffffff}], 0x1, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 1m32.620641257s ago: executing program 0 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000900000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 1m32.485879871s ago: executing program 6 (id=1957): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6(0x10, 0x3, 0x200004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20071026}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{0x9, 0x5, 0xf7, 0xf}, {0x25, 0x80, 0x4, 0x7fff}, {0xab, 0xf, 0x4, 0x8}, {0x3, 0x4, 0x0, 0xfffff58b}, {0x1c60, 0xc8, 0x4, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r1, 0x2}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) 1m31.423387511s ago: executing program 5 (id=1958): syz_io_uring_setup(0x2292, &(0x7f0000000640), &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x1c}}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000000700000000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m31.419142827s ago: executing program 6 (id=1959): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xffffffffffffffff, 0x109701) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x66) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000004c0)={0x1, {{0x2, 0x4e21, @empty}}}, 0x88) accept4(r2, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000298000/0x3000)=nil, 0x3000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$FUSE_IOCTL(r6, &(0x7f0000000000)={0x20}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0xffffff00, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16, 0xfc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) 1m30.990014912s ago: executing program 7 (id=1961): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eaf, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x2, 0x1f2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000380)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f00000000c0)=""/140, 0x8c}], 0x2, 0xe4, 0x8000) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000440)={0x1, 0x4}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000080)="2e9c1c400c", &(0x7f0000000240)="9e66a753c460dee1a7d2a74c3b1507961cc28596c3e7c079c552ee1c5a71d4a2c18aa1751919b682f97634b70225cc38acf49164877a25c5bb3b5b2773fc87acf1e9dfd1f0e8f70eba88e1891e74592f48e415e3472c09500ff5b04f8b5c71bb470285130ce7f30dfd8543fa6fcff71ae5a7de60082a2d47ca7ee358fed19d3f5589d2abc583f0e4f1f77cae58ded6084a78000000000000000000"}}, &(0x7f0000bbdffc)) 1m30.175749765s ago: executing program 5 (id=1963): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x3}, 0x11, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0xfffa, 0x2, @remote, 0x4}}, {{0xa, 0xfffd, 0xc05, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000008}}}, 0x108) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0xffffff33, 0x2, 0x3, 0x2, 0x5, 0x1}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x3}, 0x11, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0xfffa, 0x2, @remote, 0x4}}, {{0xa, 0xfffd, 0xc05, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000008}}}, 0x108) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0xffffff33, 0x2, 0x3, 0x2, 0x5, 0x1}, 0x20) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 1m29.821955162s ago: executing program 0 (id=1965): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e0005001800a600030003000100010500"], 0x17) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x6000000000000001, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff00000000314bd180b6cbbce207"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x200, {0x0, 0x0, 0x0, r4, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000380)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000840)="74d217984567b69cb539c53a83bf49b934c430c7073da54e475fe52778e723be04706ce3bc2872bf0484d95f34d1f1f286fa220762139cac282d31c25e6933aa59d730d3972da0c68440efe900ac304efdae520910f084e1cbb015410acb0a9f0241e99ef2dba0538158a497a9cdd819f2375395d648f870f81cc80ec3c710c4f6184177f98e926e952f05cf210098f60d91f8072671aef4aaf2e69e926db260adab7fc55edda134bb13bad891a5476eb5e16c4661e567994efb65c4ef5599416ed84270a3387aee84201f00836ec629f78c1c360c0ae6594be31c74873515dfe4b09b94b8b461a0fddf53fd5f54a95a9fb8d5b72a08fb98269d5bd2f611570236aedebc9d3a1e5bd8e272b32d0d59e02bb4178033fbe3f232db0eef18c7e3b5641a5d086742e9badbd710c42ad884d8cfa46d1c9a4a67a74ffd8b5e893a9c5e7bee96811e19a9d0c000c9cebb22c2b4231e3e5f3fe9c5b0e2b8bee343610fb3aaf577c47a8f03eb1abfb2e3618d4de0c08e4a51152162f0c16aea66c3f06e691ae37088fbf7468280d854916c8759643424c737466c94c64c130d78fe4ee430f3fd6af8c7af7d310b3f1b80034d321fc650b5f4a086b9f0298cc700266f799cba646c7e20d3745d3ffe92d6e573eaa19b832e4e4c90669a2ee39c11faabbb02b261e7ea1852601dcf9a68cff0be10efb83a0aa4ef8589080f80b2924a99f0214ddf0e9c869e860007e7038b59b2dd351d74272fdc903cbeea2855cf0b6ba9d3c3b732b0d585a4609a78182c09296eb7afb11560ce767109cbc53549758a5133eb632515b92f224a1370de73fccd626d5ac8305e846b15d9ffc7565861a29537873ab784c6f6857be9a8f242a28d1a4378dabc7e0120dd4a4a00e72bca844b51502d71067987e166749ac91e38b4e3f5633cebd29c97a46fafb19bb3fb9f32b33c64f85f64e73319073bfd0d252e9de1de46077be84c9148e12180254b0eec3560b0efa8cf41d93b49cd2370ceff896cd40efa43c719436c7a080c559df537e0badcfb28dddefffcca34b3bd1193a1c994ab690e5bc7460b0fb639fa3da21ebd9a3800698290b9451cc95943379107a602ba267081ed37d5fb6cacf2e0f2f44c0e5fe4ca68567fc0de0a29d83dd194a060e0ed3fbbbcdeef44b7ed9f611e0853674a45ce152f176ee91fc2949d1ee5f1ecc01a4f1db5c848e76f43d58553d0991b3884ce99a2c6edbb717a8465bb83c1eb9ebaea80a9e9b756f7970b0986437f5ed5e324c1eadbb9225bc411044e5d1bf5be490b51e12f316400f95359d4135ee3f9bd09ec4568656f797f56d5be5455d17ac337482a9716d1c51e406f34e247d7550a820aec37ac089404e1b299eeacc3ab0104ca31329ba53334e7603c68a34f4497f53a0e9bc445cf9979dcf75a6c058214429572a44c0fd7acb10bf5c395c7ffa330bdd8f8524a2a363d486fc2e50e502ca0ef3c81e3d1e3ca80b2b12ec20b6f394643f54a77d38e429166cb948fd03dae305bcff0aea37b1b2384f9d4470148cb06911bd9ae8aad87dd5e720ec18d72ef35549e3826ef9bb10c2d8e4033d1fb5ca0eea4b5cf30ebfa9c876289ee0d4368615ed560b116114085ef0f8e47781d4f906f240a832f6f24a134773df2317436b19b33f4a67e57a43a9c5682487e1ad3023b732b42a14273f520bb416d2613584175011f672cc6d1e1f96af5db8f88fe8a2ecda581bec307c1ce8a785a2294d40ca2e83782acefc0ce66feea3ed935b27b8bab98a6356f526c9b4331cbdf3a17338ddf7e4a75e08295180fab96d1fde27929c88bac870ce4d1e0a8d7a1dcce7a8c7c4f21da73ca50824b34a42395fdf8fce2c977cab1f453987f3c1d02d005b2005f8761c57fe0e3e0869dab4f6ccb658c0f5bcbbae256382db726c269f26a5626cdd827e964c4a7c4807d30a8fa8ddb71c60ee355ef48dee99e353443edf76bde8d2579b13bdcdedb8e7caf984df10dd0b7dd953fbc3fea7d5783afee28655d0a4d4e144f3b1c0f86c03dcba53d77424be1b2a1ddc541eb425981476f08986af1b803bc13b2e417f849f1555da6abe1f1e43cefdbd8a74a379c7d2be07a4a737f341785fc7956cf10481109d63005b896f77ea159dd7000c41dc319e0fc2341035cbadcfca62ec2ab40afa215c59d440379f544eec3f53758536d647c1094352aa3c1df5c71a64d5306c2f0aff7e7508478b4fb296e78ac021b39e168ce9702c22e14641dfde5dcb4d4e7df6d4768fbed0ffa4ba7941959c0d8e109b0d1810dfafeb4a7da928e0744227bbb8968969b13ffc62a71139b01f03443623ef9262ecaae47f1b438b9c8919acdf73fb3263dafd3d89c4d3f7e6e44a6230b7fd5fc22699fa88b38bad8636e772ccbb036f36cee2626fc9ffcc2fa6df8cefe58172cac97e91ad89079774e19d099b5196a653958956dd3ecfeac819f5bd2df62a00e0c3fc644ee05ec192d39462ac5a4fecadae3a43f9bb46b9df7038886043a4b66b654caeb2420b081aa9d1ba00c97facf257c7787fd7e3f1a24e367821dc8291ddfb904985c71b494d631c24849f3050f1f63f849429d2078681bdd7e1d1343ccf3f36caf36a7182e4613000677bb9e81128d6ec7bb9a8c4f5178f806b2bfa75e9b88cc8d45c18717ae72cf8377daaeb3fa37c38a602ee77660e8edfa1d9857e222186320a19e3c631d4c25d966f83cf12311932511a2a98c5247ceb8cfc84465279d37359e1c2d235ff5e25172784b3b8831c46a636d8ef3051a953995be1b8c1a3ac64d106063a4877bea2877f8e6f29e72a5cd6fc8d95860ec4e04dda210d644c77d0f1f0ec9dc87101b0a6b2d54aedec41d5c83aa44d69785bdf519ed0a5bd42731b88ed6d17a23b840532b42b18eb298066bc9ea629cc3041f630f153064c0dd80339aaf6257126dd5bcdfc3740b0fc3f5f3733518ffcc73aeee28c33e798f547a7d45bbf3ef89b02de6554d18fc63ea710e09131819f364d71ae674dedf856e484ac362c94ffa92279b1c785cec61147e107b09b7bf6f02df3400886fe3de9df8a2e6d1d534ca66aadea9147fa8679bcc5e4a0f16e86639850741358f3eb45126f8430f878541272ead2617303f53369882dd333686e437d6ec0244f9593587e56b45f5fb9638279550c3fd54b6a01a00f1be24fb6594bbbf4d67701f15bc4cb99782a782a1e9fbba464390c94e86189f1a5c5e8d38212d33278a402976177e6da8943e82a7450eb189a64fe1764afa4e2d588a98cce81c873fac426e5d259cb2dffc4261b0b5949dd47c7a7a6abd564b5320995ce4f66e40b41e7fd1814ad608e4f95f4e4639129e7493278e185c33931532b159ebf312363221a0b4cf502dd6962fb994c3b60e04e3b2e143045bfcf646c8037ced336114446345963ba666acdb82309e8ef0324a282806988f46d7e63b40074a3d50a7e5c7f1ece1739bd44b0206633e5dfc6740fdc2dfb6a2cc2219e292cf5ed9fe3a2de16cce75ccc820c3de44654ae5f9b4bb4ec7b0f7f391f911459a2d6c5c7e2522b2e81be077ce033ba28ffb8719b1b9942546a36243275072cb3a2b34d4e9b7b4890f88f6f1ebbd4e3d378a82ec2d037fa59fd57bb2a8dbe9d015233188c2da474647c2dcfcb110485e8ebb2e2048d244fe3793340dd0ca6922a8d59ac29d04987b778c50bf313b666a61e976e3f41278abe2722db04568328c8e3e35e5cbf708b7629d8262408deb22ec042c7ca333656274d22e666757999f81915658c7d57113f8e34604e2dc2f91f52b5a8f5b081ef408d850a5ff9c5a20109b2f6a019f2173ec667f27e3c1552cf633f6d3ee7e8e3a1509e8455d0ce354151e7c32c1d3812671a1bf3c11146ddc445b1f596c25d54a5ac9bad6e046313ee7fc24b9e7d8e8bcd63794d691899cf817706236c22903cbc768c348129b6285b1a6e4ee5337c0d65bd6e117954d48b5dac2b175fb1865daa140c84a2784402b706d11662404f082e9992fb13a8e472ec611ba69b0582a0b449c787d16b20207828a21c3db0720ab6f57a9f1598962ebc92b7684bd574adc0c41dbd7d7d055c3c9ef229711273a02ec0ce9452eb210c6ca11e67bf47d80ae064314cd5d8fbb43ad85d014982a7212a4e23054021a3795e1e2410bec65aaee8e734d035b2e2f502a510f51fd9bbc3c73d9599b7c0780537f5fe1697d9f13b49a7a7fdb5a77d787dd4f1ee9e625b0afdbc9d9397334a3120eaae23340c5b63407b5a61b38075a36e0c14952bb806a398ff005603c8d21b36f858a15ec310111c26ec6daad77c5dcff61aeb2dda7f1f5b8a9db5f1d5d9d68e8f003e056933583b61278ae3aae2fdb85399bafb029fad2a8160c906aeb628490bb530a1be052b733e18cc0ab4cd4e15c326d398fd20a132624134780515491020aa4d27c702c674fd29ad041cb549c17feff603c71e15a640332c794250e8d4d4cdb4f9b91cddad868be9121178326eafb99a8553bc3c870e33fc5dda5ee4affdba518e7dd29aaa5d8f0001f6c3cdf6b7ba5de0f85e1217adf327e3ec199913aa035046376479faea1899e03ae930f91b545ad60855776511dddc0694699c38c0accc21d4b8724820a3041900cd324a36403a909b2d9ae174dba89f7689950623a51a45ad9747211df9604fc96ae324e9eef8cb50da5ee774196aa9c02a3bb0ff6359c316ce207ffa1ee396b00b2b3876522c5b3d8baa725754e8ac3a88b7436a49307d58573549b62ededd79b2a4981b4753ae2049c29eec7b81e4a4744eb52be693062929ed27cea6d26e2e3d70538e6f9f70a3d46883d31ea2f1e8a812f5ec974fb78a14b829a2c4d5a4bd4507ffb5eb200548b14b773081af91f68464a37a4654a0080470864e9605577e0ad70d4209f8020078998014eca498a8158060ae20062365a61ed6255b6094f948462805c38472b9d7934ab98e7b85114755d207830392ae1335eb966ea3b4f248a46485d1e65ec8f5e2b07b25e335cc8a2b506e46ff00fb3a06721645116b726b8c4a2728b4f401716e84c6b7b120b7cea2d912f086d2cc9c14069f61df021738a810b2ee01bc2e11bbed0d8da616d0e12c05d6999638a6a0cc15dcb9087921ddf6b3580f74e8840be0345a1c3297bf94e99cf0bca616ce4155e98b5a265950f24444d007147d75488567b57498a83804bbff63bc74f8b40c0fd9bb6df24dd4e660668fa7924257274f498a7bdb745ae59e03a4e68cee0a742479800c8c645f34aa27da5def41c0b936d2c7731e1a7cb71af7b78f31cf04d6fd86b9c1f0b15df1d70040a423cd417b5c5f0941d4a2e5e21d2ae5cabd3d8f877529c6a2908cfd53a5f59ba208675eea9a441f92bc8e13e6e8a22ee760543153a0404f7b37da098a70d30acc37f75f0d51b4753e38fd750b7f264d876efc587b6c58ad60a7ec09e8b7ce3d7dc69f2833f135e46b78637bb37168bd8f0fd6749069ec801196a6e4133b5246113a2166418230f175487ef2b6e41a586245228fdb3d0e3dba5bfc0292b9c38bf987f6e11d38c9f2e5f3e6839ca343a839da2b3ba5b87f76991b58a3633d22519007a2745e7e672e940a2cd68c39dabfb024ea999c61056859594526ff7da95af894bd27cd0300f501e120e8adf9c61e6d54087badd10579a9d14c47ed1a9967470fe5937d5ac0955cc3e96970e7c397906bade1f9a4ff23dee681f7fdd1c31615c005eecb0eb5ab763497016207104be042106bcf60e8ea24fa3a98eaf43aac16f960dccae3b52ce413efef89fb2f0300efadad7dd3771fd", 0x1000}], 0x1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="96000000000000000f010000030000008e5b9236fcacf41410074a26e1f879488106abc1028073aa3ddd8dc6750d512734753210f63a9a94512256b7cc3a88602d0caea8ef11b431d5646a3ee6ff3b5eeeb03cab57bdcc402cc44830523c83bc1f81b1f2bbd6621a9f5f84cf782c5fd1cbfec49cf7913bbe7d8be4340744b1037000000000000000a0000000000000001801000040000000689d0bb119af108da109c7e66011f530e7da69e6b1b6b42132ce2c9dd32ead950f105867a1242194103ec8e55dc4fc3e1a347063e979a98cfc9e7776b29d2c2d521432f7aff534167960176b992f3ca702000000227da93dbbb89d17e2b2212d99292386bf83f66e1a3d2abc9ede60e37ca419d872da571d1c69a4bd326de2118f9ccecc8e488b91452f6194fa70000048010000000000000a0100000d0000005567159a85f5f4ca23f2a5116245194b246eeaaf80f3c7ca7a0504a4d50eda1e27e65e14c7122bd3138e86f0055c669b54e92a209bec210470d645ddae4cc8273b94a9a91e488743b0833a43573de80947ae531807a98a6d412d793c390000521cf2426193f030c54282068b60fe2fee7a7f41f57388403980e756d9703ab93e41867fdf7f0703737a98285fc1e1db9a9d703a76e13797b829ae6ea4b070ee2c98a31dc4ed4b02acdf8f0cbbf7670b6e6260c3f0facee54aefec102fd0ea74513e9a136c37a041eb0258c54148baf1f45df6e6dd80bd4ca2031c484743a3cdad8d0e58f459ef9ef0634411eb9f14620f9ee9f109ccaddaa88361e165a170e54b751b50a4b0f4442980bdf90541ee183f687df1eb31a5cd1f98bf6862ef6f493631edb04471b84bbd38e0788a123908ee4000000000000000"], 0x270}}], 0x1, 0x24010055) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="0e3660001000011e2d95c43d630000000000000005000000000a2c000000060a0b04729c20e67cb17e9f020000100900010073797a30000000000900020077797a3200000000680000001100010000000000000000000100000a7f3bbf30d359773059917133e4620167b26c014fe95ac3d33d7aa0dd31eb2aa6e80f4c72620b6886086464d767a16c246d97999ec40c37fd4a685d174cc50b83e41ed0c64d68906f9fa3432acccbf09280b6de18babc8455de43cd0b"], 0x54}}, 0x0) 1m29.821033259s ago: executing program 6 (id=1966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x83000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.stat\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000400)={0x4, "91b00ac4b1d5a7d6f94f0171bfc02aac982ffd0c3dd7ce6f78edb845d356e4fb", 0x3, 0x4, 0x4, 0x401, 0x6, 0x2, 0x194, 0x8}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp_trap\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x801}, 0x14}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x8}, 0x18) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r6, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1m29.094080429s ago: executing program 5 (id=1967): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) io_uring_enter(r6, 0x3c99, 0x916, 0x12, &(0x7f0000000440)={[0x3]}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setownex(r7, 0xf, &(0x7f00000003c0)={0x2, r8}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x84cadf1407cf6c33) getdents(r9, &(0x7f0000000300)=""/147, 0x93) 1m28.859310169s ago: executing program 4 (id=1968): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffd}, 0x90) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0) write$FUSE_INIT(r5, &(0x7f0000003980)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x40010, 0xfff7, 0x1, 0x5, 0x8}}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pidfd_getfd(r5, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x40000000000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5, @void, @value}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r6, &(0x7f0000000080)=""/237, 0xed, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffffffffffa1120000000800070001000400180001801400020076657468305f746f5f62617461647600080009"], 0x3c}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$xdp(r4, &(0x7f0000000040)={0x2c, 0x3, r9, 0x3, r5}, 0x10) 1m28.059103111s ago: executing program 4 (id=1969): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0a03"], 0xd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f82fc1b1000"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)=ANY=[@ANYBLOB="2c000000000b01210000000000000000020000000800024000f4ffff070001006f7366000800034000000000"], 0x2c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080), 0xd) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0xffffffffffffffff}], 0x1, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 1m27.658087768s ago: executing program 7 (id=1970): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x3432564e}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0xff00) 1m27.326168826s ago: executing program 4 (id=1971): socket$inet(0x2, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}}, 0x40000) fstatfs(r0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r7, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xf2, 0x9d, 0x18, 0x40, 0x50d, 0x1203, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x2c, 0xc0, 0xe1}}]}}]}}, 0x0) 1m27.285251891s ago: executing program 6 (id=1972): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x80, 0x9) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000000, 0x0, 0x32315559, 0x3, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 1m26.430079967s ago: executing program 6 (id=1973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_fscache}, {@version_9p2000}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) r6 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r6) write(0xffffffffffffffff, &(0x7f0000000180)="01", 0x1) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 1m24.902945648s ago: executing program 0 (id=1974): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000002140)='fuseblk\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r2, 0x4, 0x0) dup(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) socket(0x2e, 0x2, 0x10001) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x0) 1m24.434914939s ago: executing program 4 (id=1975): syz_emit_ethernet(0x148, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) dup(0xffffffffffffffff) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x67) 1m23.274165665s ago: executing program 4 (id=1976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e9, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, 0x0, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) syz_init_net_socket$ax25(0x3, 0x2, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x713, 0x1c000000, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) 1m22.586101528s ago: executing program 4 (id=1977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000100), 0x4) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = io_uring_setup(0x17b9, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x11, &(0x7f00000002c0)=[0xffffffff, 0x3], 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000003c0)=""/27, 0x1b, 0x700, 0x0, 0x0) 1m13.845277343s ago: executing program 35 (id=1967): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) io_uring_enter(r6, 0x3c99, 0x916, 0x12, &(0x7f0000000440)={[0x3]}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setownex(r7, 0xf, &(0x7f00000003c0)={0x2, r8}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x84cadf1407cf6c33) getdents(r9, &(0x7f0000000300)=""/147, 0x93) 1m12.34422535s ago: executing program 36 (id=1970): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x3432564e}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0xff00) 1m11.225546417s ago: executing program 37 (id=1973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_fscache}, {@version_9p2000}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) r6 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r6) write(0xffffffffffffffff, &(0x7f0000000180)="01", 0x1) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 1m9.530751014s ago: executing program 38 (id=1974): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000002140)='fuseblk\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r2, 0x4, 0x0) dup(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) socket(0x2e, 0x2, 0x10001) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x0) 1m6.781158264s ago: executing program 39 (id=1977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000100), 0x4) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = io_uring_setup(0x17b9, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x11, &(0x7f00000002c0)=[0xffffffff, 0x3], 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000003c0)=""/27, 0x1b, 0x700, 0x0, 0x0) 16.350074673s ago: executing program 3 (id=2001): r0 = socket$inet(0x2, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}}, 0x40000) fstatfs(r1, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r8, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x8040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) listen(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r10 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x40b8, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x10000}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r10, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xf2, 0x9d, 0x18, 0x40, 0x50d, 0x1203, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x2c, 0xc0, 0xe1}}]}}]}}, 0x0) accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f00000000c0)=0x6e) 13.603975746s ago: executing program 3 (id=2010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f0000"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r5, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000b558a2910ffdd76628063f9458562c195a68aa2fccd731f485c3dfb6f403ff56f32506d06427c4b3749d665c0ab403f71282600d074df74eace25a45f8ad5ab01f07851ce4c2f2b8188c575d015bf12494dec562cd89780676c1c4733ec3f1631ca4c23a9e5e91390b0ea1c0161d52e466c8f4903d464ea8bc"], 0x10}}, 0x20000004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x7, 0x700, 0xffffff50, 0x8001, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0xa6, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @local]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) 10.180847791s ago: executing program 3 (id=2021): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000780010000000000", @ANYRES32, @ANYBLOB="00000000d37e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 10.150295594s ago: executing program 9 (id=2022): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0xc0c81) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0x1000d81, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xf5) r5 = fanotify_init(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x0, 0x110018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000010000000000040000004300000000000000050000000000002e00b0f3d8484c91d24a31734870daa02d1559e806b9e49aa96eb280e6"], 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_emit_vhci(0x0, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r8, 0x1000d81, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r11, &(0x7f0000000140)={0x29, 0x6, 0x0, {0x7c, 0x5}}, 0x29) accept4$nfc_llcp(r7, &(0x7f0000000240), &(0x7f00000000c0)=0x60, 0x0) ioctl$FIOCLEX(r5, 0x5451) close_range(r5, 0xffffffffffffffff, 0x0) 8.116207969s ago: executing program 3 (id=2026): syz_usb_connect(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002da755608ac0533faaacb010203010902240001040700f50904f40102fffd018009050102"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x8, 0x0, 0x8, 0x2}, 0x0, 0x7, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x1, 0x0}}) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 6.980121006s ago: executing program 9 (id=2027): syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @local}}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x2, 0x0, 0xfc}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0e080000000000000000000004000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x6c, r8, 0x0, 0x0, 0x1}}, 0x20) 6.144754818s ago: executing program 1 (id=2029): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r6 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'veth1_to_team\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010004b0400040000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000200012800b000100846d000000000000100002800a0014ce39b0bb3cf458d317"], 0x40}}, 0x0) 5.793158769s ago: executing program 2 (id=2032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c000480050008000000000005000300000000000500030000000000050003008000000005000300010000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 2) 5.782947605s ago: executing program 1 (id=2033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x3, 0x6}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000018110000", @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.73017096s ago: executing program 8 (id=2034): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000002140)='fuseblk\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = dup(0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, r1, &(0x7f0000000640)=0x10000000, 0x20000009, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 4.802570366s ago: executing program 9 (id=2035): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e0005001800a600030003000100010500"], 0x17) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x6000000000000001, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff00000000314bd180b6cbbce207"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000380)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000840)="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", 0x1000}], 0x1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x270}}], 0x1, 0x24010055) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.738221458s ago: executing program 2 (id=2036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, 0x0}, 0x108) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000040)=0xffff8000, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_open_dev$midi(&(0x7f0000000200), 0x77, 0x121882) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000340)=0xfffff113) io_destroy(r6) connect$unix(r5, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2000000) close_range(r4, 0xffffffffffffffff, 0x0) r11 = dup(r3) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3, r11}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 4.735259501s ago: executing program 8 (id=2037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0xfffffff5, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x4000040) 4.650931225s ago: executing program 3 (id=2038): r0 = socket$inet(0x2, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}}, 0x40000) fstatfs(r1, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r8, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x8040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r10 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x40b8, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x10000}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r10, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xf2, 0x9d, 0x18, 0x40, 0x50d, 0x1203, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x2c, 0xc0, 0xe1}}]}}]}}, 0x0) accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f00000000c0)=0x6e) 4.650570073s ago: executing program 1 (id=2039): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18) syz_clone(0x29382000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 4.546115199s ago: executing program 9 (id=2040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r2], 0x90}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="126b76a046269a3a4aff530a22721803dea71faf823b3f67a2e18e4474fe4aaccba5fe7703e71530806305846189b78798f42640ea76988d62d20bdd9cd3ea0696b57dd996f06858657b5b000000cc3a7b11753900ee6012f321a9bb3c7f2f9d2ccfdfd14c34a463fc7f9dc36f5919f98d50b78e7ad63afa990ba713c190c4cfecd2df44132551fa21a3a85b13beac0586236335fe27f0abaf78d960aa40ff06689826294364f1fc2951916c410304543760041da8c4beb05f587288ea094376e3367645dc04552de2b765ca598000bbfec7262e10e4754eb25107c3c2774079b6c7bbb0f897d5638f5a90b9467652d673e67d2b35c2", @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf25120000003400018008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f626f6e64000000140002007465616d3000"/40], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r4 = inotify_init() fgetxattr(r4, &(0x7f0000003500)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x3}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(r6, r5, &(0x7f0000000540)=@IORING_OP_SHUTDOWN={0x22, 0xc4, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = add_key$keyring(&(0x7f0000000400), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) fanotify_mark(0xffffffffffffffff, 0x2, 0x88001010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r10, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r10, 0x0) keyctl$link(0x8, r8, r9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000002300)={'vlan0\x00', &(0x7f00000022c0)=@ethtool_pauseparam={0x1, 0x10001, 0xfffffffe, 0x9}}) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x18}, 0x1, 0x0, 0x0, 0x24040001}, 0x4000810) 4.419943553s ago: executing program 1 (id=2041): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002380)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0x0, 0x3}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 4.184081376s ago: executing program 8 (id=2042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x4000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x346d1}, [@IFLA_PHYS_PORT_ID={0x17, 0x22, "f544e043ffb135345a077c31d095a4d0cb348d"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) (async) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async, rerun: 32) sendto$inet(r4, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000014000480050001006674702d32303030300000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050065ab83191898d66c074000000000"], 0xa8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) 4.147453552s ago: executing program 9 (id=2043): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000db7000017ffffe31800000007000000050000000100000f050000000b000000030000000800000000000000006100"], 0x0, 0x37, 0x0, 0xa, 0x5, 0x0, @void, @value}, 0x20) listen(r4, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500051fff00000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) userfaultfd(0x801) 4.136232924s ago: executing program 2 (id=2044): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 3.741234255s ago: executing program 8 (id=2045): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000002140)='fuseblk\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = dup(r1) copy_file_range(r1, 0x0, r2, &(0x7f0000000640)=0x10000000, 0x20000009, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 2.95068726s ago: executing program 9 (id=2046): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='devfreq_frequency\x00', r0, 0x0, 0x7e}, 0x18) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='\x9e/*@)\x00', r2) r3 = add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f0000000180), &(0x7f0000000500)="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", 0xfa, r2) syz_emit_ethernet(0x6f, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7e71a450b13fcbc"}}}}}}}, 0x0) keyctl$read(0xb, r3, &(0x7f0000000240)=""/101, 0x65) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffe}]}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r4, 0x25, 0x1, @void}, 0x10) r5 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000010001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000080000000deffffff00"/28], 0x48) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x2f, 0x1, 0x0, 0x0, "4c54758e5ee36a5e0b7cd845e8257f7f3c43cbd7af144faaaaeceb1cc7ef9085a01e5afeffdf0fd1c8d5bd233217f0e0eea535a26b42a2a06cb1bb241c500f75"}}}}, &(0x7f00000002c0)={0x1, 0x3, [0xbb4, 0x4, 0xc4f, 0x171]}) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x0, 0x0) 2.838273991s ago: executing program 1 (id=2047): syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @local}}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x2, 0x0, 0xfc}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0e080000000000000000000004000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x6c, r8, 0x0, 0x0, 0x1}}, 0x20) 2.837929438s ago: executing program 2 (id=2048): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000002140)='fuseblk\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = dup(0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, r1, &(0x7f0000000640)=0x10000000, 0x20000009, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 2.245383363s ago: executing program 8 (id=2049): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) openat2$dir(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', &(0x7f0000001300)={0x4400, 0x0, 0x20}, 0x18) 2.229146039s ago: executing program 2 (id=2050): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000300)="729da7c06edaf16e6a17fa8e3f3e76557c25f8fb84cf3618d7a402f9d1305ffb2129e3c146b2b725a5ff506f72895f91198832571a4d4f87f3eb7d61365219e6a329925f36277d7012b4dd924f5b1890f9b8ccff70e327494f7eae5103b66cdd0f23e7a443e32fd20b0806e78a74b3505826de04ebec2a4afedd5d7b0b3fb7a4a04b67e9c14180f195", &(0x7f0000000a40)=@tcp=r4}, 0xfffffe7b) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x12400, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.956801407s ago: executing program 3 (id=2051): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040c211082200000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 1.484724859s ago: executing program 1 (id=2052): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d080"], 0x40}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r8) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r11 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKZEROOUT(r12, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) 1.238010318s ago: executing program 8 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x4000004) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a380000001c0abf1b0000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x800) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000140)=@fragment={0x16, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x68}, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0200090a00000000000000000000000300060000000e0002000000e00000090000f4ff0000000002000100000000000008000200000000030005000000000002000000e0000001000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@sg0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x8, 0x4400, 0x9, 0x3, 0xfffffffb, 0x4}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x1, 0x8000}]}, 0x10) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)=0x7) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) 0s ago: executing program 2 (id=2054): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000002140)='fuseblk\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = dup(0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, r1, &(0x7f0000000640)=0x10000000, 0x20000009, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) kernel console output (not intermixed with test programs): B0 [ 534.652687][T13041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.673538][ T9] belkin_sa 5-1:0.66: device disconnected [ 534.724408][ T5881] usb 6-1: USB disconnect, device number 37 [ 534.795578][T13041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.823422][T13041] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.835284][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.842412][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.872689][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.879807][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.048895][T13041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.080833][T11695] Bluetooth: hci0: command tx timeout [ 535.154075][T13041] veth0_vlan: entered promiscuous mode [ 535.172564][T13041] veth1_vlan: entered promiscuous mode [ 535.789380][T13041] veth0_macvtap: entered promiscuous mode [ 535.880910][T13041] veth1_macvtap: entered promiscuous mode [ 535.896198][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.906699][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.916793][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.927437][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.937309][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.947956][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.958344][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.968952][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.979754][T13041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.989029][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.999519][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.009388][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.019863][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.029698][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.040169][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.050227][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.061248][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.074536][T13041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.104652][T13041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.113395][T13041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.122216][T13041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.131084][T13041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.760843][ T29] audit: type=1400 audit(1732956786.952:1061): avc: denied { create } for pid=13182 comm="syz.5.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 536.908169][T13041] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macvlan2 [ 536.918237][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.079463][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.115423][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.142182][ T29] audit: type=1400 audit(1732956787.302:1062): avc: denied { write } for pid=13182 comm="syz.5.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 537.162991][ T5837] Bluetooth: hci0: command tx timeout [ 537.234300][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.281170][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.511012][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 537.702714][ T29] audit: type=1400 audit(1732956787.932:1063): avc: denied { write } for pid=13200 comm="syz.7.1865" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 537.743504][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.763091][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 537.799900][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.811451][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.822477][T13208] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1835'. [ 537.840896][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.859441][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.910563][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.931019][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.942304][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 537.968576][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 537.977783][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.979504][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.052640][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.080510][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.190870][ T9] usb 7-1: config 0 descriptor?? [ 538.282048][ T5923] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 538.384123][ T29] audit: type=1400 audit(1732956788.612:1064): avc: denied { write } for pid=13224 comm="syz.4.1868" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 538.408018][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.423066][T13213] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 538.465912][ T5923] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 538.474524][ T5923] usb 1-1: config 0 has no interface number 0 [ 538.530003][ T5923] usb 1-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice= 8.17 [ 538.540792][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.548800][ T5923] usb 1-1: Product: syz [ 538.575390][ T5923] usb 1-1: Manufacturer: syz [ 538.580035][ T5923] usb 1-1: SerialNumber: syz [ 538.599735][ T5923] usb 1-1: config 0 descriptor?? [ 538.621754][ T5923] belkin_sa 1-1:0.66: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 538.642940][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.002F/input/input75 [ 538.643698][ T5923] usb 1-1: bcdDevice: 0817, bfc: 0 [ 538.667822][ T5923] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 538.758748][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.002F/input/input76 [ 538.841290][ T9] kye 0003:0458:5011.002F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 539.081182][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 539.131796][ T867] usb 1-1: USB disconnect, device number 33 [ 539.142055][ T867] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 539.163589][ T867] belkin_sa 1-1:0.66: device disconnected [ 539.469034][ T29] audit: type=1804 audit(1732956789.692:1065): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1869" name="/newroot/402/file0" dev="fuse" ino=1 res=1 errno=0 [ 539.760754][ T29] audit: type=1400 audit(1732956789.992:1066): avc: denied { accept } for pid=13267 comm="syz.4.1871" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 539.999867][T13286] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 540.016854][T13286] qnx6: wrong signature (magic) in superblock #1. [ 540.024427][T13286] qnx6: unable to read the first superblock [ 540.139374][T13290] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 540.151331][T13290] Cannot find del_set index 0 as target [ 540.568346][T13295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1876'. [ 540.614909][ T29] audit: type=1400 audit(1732956790.842:1067): avc: denied { ioctl } for pid=13294 comm="syz.4.1876" path="socket:[36633]" dev="sockfs" ino=36633 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 540.639648][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.652889][ T5934] usb 7-1: USB disconnect, device number 17 [ 540.691187][T13300] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 540.709175][ T5923] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 540.787413][T13300] netlink: 'syz.4.1876': attribute type 2 has an invalid length. [ 540.905763][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 540.975124][ T29] audit: type=1400 audit(1732956790.912:1068): avc: denied { write } for pid=13297 comm="syz.6.1877" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 541.110241][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 541.119351][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 541.136494][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.158780][ T5923] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 541.161436][ T29] audit: type=1400 audit(1732956791.072:1069): avc: denied { map } for pid=13297 comm="syz.6.1877" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 541.189352][T13300] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1876'. [ 541.238412][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.260912][ T5923] usb 6-1: config 0 descriptor?? [ 541.274592][ T5934] IPVS: starting estimator thread 0... [ 541.378411][T13295] netlink: 'syz.4.1876': attribute type 16 has an invalid length. [ 541.390700][ T29] audit: type=1400 audit(1732956791.072:1070): avc: denied { execute } for pid=13297 comm="syz.6.1877" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 541.417097][T13313] FAULT_INJECTION: forcing a failure. [ 541.417097][T13313] name failslab, interval 1, probability 0, space 0, times 0 [ 541.906235][T13313] CPU: 1 UID: 0 PID: 13313 Comm: syz.0.1879 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 541.916684][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 541.926716][T13313] Call Trace: [ 541.929970][T13313] [ 541.932878][T13313] dump_stack_lvl+0x16c/0x1f0 [ 541.937537][T13313] should_fail_ex+0x497/0x5b0 [ 541.942195][T13313] ? fs_reclaim_acquire+0xae/0x150 [ 541.947285][T13313] should_failslab+0xc2/0x120 [ 541.951939][T13313] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 541.957720][T13313] ? lock_acquire.part.0+0x11b/0x380 [ 541.960795][T13295] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1876'. [ 541.962977][T13313] ? __alloc_skb+0x2b1/0x380 [ 541.976747][T13313] __alloc_skb+0x2b1/0x380 [ 541.981176][T13313] ? __pfx___alloc_skb+0x10/0x10 [ 541.986123][T13313] ? spin_bug+0x1c0/0x1d0 [ 541.990467][T13313] ? lock_acquire+0x2f/0xb0 [ 541.990704][ T29] audit: type=1400 audit(1732956791.362:1071): avc: denied { ioctl } for pid=13297 comm="syz.6.1877" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 541.994963][T13313] ? unix_create1+0x47b/0x6c0 [ 542.025061][T13313] sock_wmalloc+0xd4/0x120 [ 542.029466][T13313] unix_stream_connect+0x2c2/0x17d0 [ 542.034650][T13313] ? __pfx_unix_stream_connect+0x10/0x10 [ 542.040265][T13313] ? selinux_netlbl_socket_connect+0x30/0x40 [ 542.046224][T13313] ? selinux_socket_connect+0x6b/0x80 [ 542.051572][T13313] ? __pfx_unix_stream_connect+0x10/0x10 [ 542.057181][T13313] __sys_connect_file+0x13e/0x1a0 [ 542.062192][T13313] __sys_connect+0x14f/0x170 [ 542.066760][T13313] ? __pfx___sys_connect+0x10/0x10 [ 542.071849][T13313] ? __pfx_ksys_write+0x10/0x10 [ 542.076677][T13313] __x64_sys_connect+0x72/0xb0 [ 542.081415][T13313] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.086605][T13313] do_syscall_64+0xcd/0x250 [ 542.091091][T13313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.096976][T13313] RIP: 0033:0x7fee49d80849 [ 542.101366][T13313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.120947][T13313] RSP: 002b:00007fee4ac1e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 542.129331][T13313] RAX: ffffffffffffffda RBX: 00007fee49f45fa0 RCX: 00007fee49d80849 [ 542.137276][T13313] RDX: 000000000000006e RSI: 0000000020000280 RDI: 0000000000000006 [ 542.145222][T13313] RBP: 00007fee4ac1e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 542.153165][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.161111][T13313] R13: 0000000000000000 R14: 00007fee49f45fa0 R15: 00007fff889f6118 [ 542.169062][T13313] [ 542.230604][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.271521][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.330758][T13314] IPVS: using max 31 ests per chain, 74400 per kthread [ 542.360786][ T5923] usbhid 6-1:0.0: can't add hid device: -71 [ 542.430221][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 542.512294][ T5923] usb 6-1: USB disconnect, device number 38 [ 543.964096][T13329] macsec1: entered allmulticast mode [ 544.185936][T13337] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 544.210725][T13340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 545.301983][ T5916] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 545.478036][T13368] tipc: Started in network mode [ 545.483119][T13368] tipc: Node identity , cluster identity 4711 [ 545.489222][T13368] tipc: Failed to set node id, please configure manually [ 545.535305][T13368] tipc: Enabling of bearer rejected, failed to enable media [ 545.650463][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 545.660634][ T5916] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 545.670593][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.678674][ T5916] usb 5-1: Product: syz [ 545.683046][ T5916] usb 5-1: Manufacturer: syz [ 545.687655][ T5916] usb 5-1: SerialNumber: syz [ 545.697673][ T5916] usb 5-1: config 0 descriptor?? [ 545.925007][T13380] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 545.940052][T13380] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 546.117994][ T5916] airspy 5-1:0.0: Board ID: 00 [ 546.123115][ T5916] airspy 5-1:0.0: Firmware version: [ 547.019944][ T29] audit: type=1400 audit(1732956797.242:1072): avc: denied { bind } for pid=13398 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 547.039644][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 547.416126][ T5916] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 547.423553][ T29] audit: type=1400 audit(1732956797.242:1073): avc: denied { read } for pid=13398 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 547.454633][ T5916] airspy 5-1:0.0: Registered as swradio24 [ 547.460722][ T5916] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 547.473399][ T5916] usb 5-1: USB disconnect, device number 42 [ 547.620786][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 547.654754][ T9] usb 7-1: config 0 has an invalid interface number: 22 but max is 0 [ 547.662927][ T9] usb 7-1: config 0 has no interface number 0 [ 547.669100][ T9] usb 7-1: config 0 interface 22 has no altsetting 0 [ 547.682935][ T9] usb 7-1: New USB device found, idVendor=bb6f, idProduct=9304, bcdDevice=b9.26 [ 547.708255][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.743601][ T9] usb 7-1: Product: syz [ 547.758791][ T9] usb 7-1: Manufacturer: syz [ 547.779125][ T9] usb 7-1: SerialNumber: syz [ 547.820302][ T9] usb 7-1: config 0 descriptor?? [ 547.916275][ T9] usb-storage 7-1:0.22: USB Mass Storage device detected [ 548.534734][ T5888] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 549.339169][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.364787][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.390542][ T5888] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 549.399731][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.422269][ T5888] usb 6-1: config 0 descriptor?? [ 549.645106][T13427] syz.0.1905: attempt to access beyond end of device [ 549.645106][T13427] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 549.716239][T13409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.738922][ T5916] usb 7-1: USB disconnect, device number 18 [ 549.780842][T13409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.840562][ T867] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 549.915369][ T29] audit: type=1400 audit(1732956800.122:1074): avc: denied { connect } for pid=13429 comm="syz.0.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 550.097531][ T5888] hid-steam 0003:28DE:1142.0030: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 550.144626][ T867] usb 5-1: Using ep0 maxpacket: 8 [ 550.174862][ T5888] hid-steam 0003:28DE:1142.0030: Steam wireless receiver connected [ 550.211627][ T867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.236323][ T867] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.384113][ T867] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 550.397812][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.399054][T13433] x_tables: duplicate underflow at hook 3 [ 550.407772][ T5888] hid-steam 0003:28DE:1142.0031: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 550.424396][ T867] usb 5-1: config 0 descriptor?? [ 550.446426][ T5888] usb 6-1: USB disconnect, device number 39 [ 550.471424][ T5888] hid-steam 0003:28DE:1142.0030: Steam wireless receiver disconnected [ 550.642773][ T29] audit: type=1400 audit(1732956800.872:1075): avc: denied { mount } for pid=13441 comm="syz.0.1911" name="/" dev="configfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 550.690514][ T29] audit: type=1400 audit(1732956800.892:1076): avc: denied { search } for pid=13441 comm="syz.0.1911" name="/" dev="configfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.733615][ T29] audit: type=1400 audit(1732956800.902:1077): avc: denied { read } for pid=13441 comm="syz.0.1911" name="/" dev="configfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.797457][ T29] audit: type=1400 audit(1732956800.902:1078): avc: denied { open } for pid=13441 comm="syz.0.1911" path="/13/file0" dev="configfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.984478][ T29] audit: type=1400 audit(1732956801.182:1079): avc: denied { write } for pid=13441 comm="syz.0.1911" name="/" dev="configfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 551.405365][ T29] audit: type=1400 audit(1732956801.182:1080): avc: denied { add_name } for pid=13441 comm="syz.0.1911" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 551.472392][ T29] audit: type=1400 audit(1732956801.182:1081): avc: denied { create } for pid=13441 comm="syz.0.1911" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 552.145855][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 552.145870][ T29] audit: type=1400 audit(1732956802.372:1084): avc: denied { audit_write } for pid=13466 comm="syz.0.1917" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.350505][ T5916] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 552.475154][T13470] netlink: 'syz.0.1917': attribute type 4 has an invalid length. [ 552.508616][ T5934] usb 5-1: USB disconnect, device number 43 [ 552.522971][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 552.561216][ T5916] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 552.579565][ T29] audit: type=1400 audit(1732956802.792:1085): avc: denied { read } for pid=13466 comm="syz.0.1917" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 552.680585][ T5916] usb 7-1: config 0 has no interface number 0 [ 552.936299][ T5916] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 552.953937][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.979403][ T29] audit: type=1400 audit(1732956802.792:1086): avc: denied { open } for pid=13466 comm="syz.0.1917" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 553.004603][T13484] overlay: Unknown parameter 'subj_user' [ 553.209742][ T5916] usb 7-1: Product: syz [ 553.218329][ T5916] usb 7-1: Manufacturer: syz [ 553.223158][ T5916] usb 7-1: SerialNumber: syz [ 553.257119][ T5916] usb 7-1: config 0 descriptor?? [ 553.515124][T13488] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1923'. [ 553.890491][ T5885] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 554.042489][ T5885] usb 5-1: config 0 has no interfaces? [ 554.049577][ T5885] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 554.050498][ T51] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 554.075932][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.122304][ T5885] usb 5-1: config 0 descriptor?? [ 554.223763][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 554.237062][ T51] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.247689][ T51] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.256833][ T51] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.266033][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.277061][ T51] usb 6-1: config 0 descriptor?? [ 554.528279][ T5916] snd-usb-6fire 7-1:0.16: unable to receive device firmware state. [ 554.536569][ T5916] snd-usb-6fire 7-1:0.16: probe with driver snd-usb-6fire failed with error -110 [ 554.611534][ T5885] usb 5-1: USB disconnect, device number 44 [ 555.028432][ T5885] usb 7-1: USB disconnect, device number 19 [ 556.105354][T13514] futex_wake_op: syz.6.1931 tries to shift op by 144; fix this program [ 556.470822][ T867] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 556.600663][ T867] usb 5-1: device descriptor read/64, error -71 [ 556.870525][ T867] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 557.056055][ T5885] usb 6-1: USB disconnect, device number 40 [ 557.070548][ T867] usb 5-1: device descriptor read/64, error -71 [ 557.180750][ T867] usb usb5-port1: attempt power cycle [ 557.395799][ T29] audit: type=1400 audit(1732956807.622:1087): avc: denied { nlmsg_write } for pid=13535 comm="syz.6.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 557.900789][ T867] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 557.930929][ T867] usb 5-1: device descriptor read/8, error -71 [ 557.990309][T13541] netlink: 15574 bytes leftover after parsing attributes in process `syz.5.1938'. [ 558.028938][T13534] netlink: 15574 bytes leftover after parsing attributes in process `syz.5.1938'. [ 558.180486][ T867] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 558.210499][ T867] usb 5-1: device descriptor read/8, error -71 [ 558.321564][ T867] usb usb5-port1: unable to enumerate USB device [ 559.290713][ T867] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 559.719513][ T29] audit: type=1400 audit(1732956809.922:1088): avc: denied { read } for pid=5192 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 559.741653][ T29] audit: type=1400 audit(1732956809.922:1089): avc: denied { search } for pid=5192 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.763302][ T29] audit: type=1400 audit(1732956809.922:1090): avc: denied { append } for pid=5192 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 559.785804][ T29] audit: type=1400 audit(1732956809.922:1091): avc: denied { open } for pid=5192 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 559.808886][ T29] audit: type=1400 audit(1732956809.922:1092): avc: denied { getattr } for pid=5192 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 559.832186][ T29] audit: type=1400 audit(1732956809.922:1093): avc: denied { ioctl } for pid=13548 comm="syz.6.1942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 559.857433][ T29] audit: type=1400 audit(1732956809.992:1094): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 559.880649][ T867] usb 7-1: Using ep0 maxpacket: 8 [ 559.907304][ T29] audit: type=1400 audit(1732956810.132:1095): avc: denied { read } for pid=13560 comm="syz.7.1946" dev="nsfs" ino=4026533589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 559.939048][ T29] audit: type=1400 audit(1732956810.162:1096): avc: denied { open } for pid=13560 comm="syz.7.1946" path="net:[4026533589]" dev="nsfs" ino=4026533589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 559.945809][ T867] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 559.979104][ T867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.988643][ T867] usb 7-1: Product: syz [ 559.998841][ T867] usb 7-1: Manufacturer: syz [ 560.007296][ T867] usb 7-1: SerialNumber: syz [ 560.019513][ T867] usb 7-1: config 0 descriptor?? [ 560.051940][T13563] vxcan1: tx address claim with dlc 90 [ 560.434557][ T867] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 560.437768][T13573] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1948'. [ 561.289759][T13581] fuse: Unknown parameter '0xffffffffffffffff' [ 561.297304][T13581] 9pnet_fd: Insufficient options for proto=fd [ 561.304680][T13581] tmpfs: Bad value for 'mpol' [ 562.302574][ T867] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 562.517092][ T867] usb 7-1: USB disconnect, device number 20 [ 562.526095][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.532508][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.651288][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 562.651305][ T29] audit: type=1400 audit(1732956812.792:1151): avc: denied { write } for pid=13592 comm="syz.5.1955" path="socket:[38149]" dev="sockfs" ino=38149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.681455][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.783810][ T29] audit: type=1400 audit(1732956813.012:1152): avc: denied { prog_run } for pid=13597 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 562.813410][T13598] batadv1: entered promiscuous mode [ 562.819856][T13598] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 563.124894][ T29] audit: type=1400 audit(1732956813.342:1153): avc: denied { read } for pid=13599 comm="syz.6.1957" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 563.585909][T13600] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1957'. [ 563.653329][ T7608] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 563.663687][ T7608] batman_adv: batadv1: adding TT local entry 01:00:5e:00:00:01 to non-existent VLAN -1 [ 563.970483][ T29] audit: type=1400 audit(1732956813.342:1154): avc: denied { open } for pid=13599 comm="syz.6.1957" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 564.002248][ T29] audit: type=1326 audit(1732956813.342:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c7780849 code=0x7ffc0000 [ 564.025928][ T29] audit: type=1326 audit(1732956813.342:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c7780849 code=0x7ffc0000 [ 564.049573][ T29] audit: type=1326 audit(1732956813.342:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f02c7780849 code=0x7ffc0000 [ 564.073266][ T29] audit: type=1326 audit(1732956813.342:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c7780849 code=0x7ffc0000 [ 564.096910][ T29] audit: type=1326 audit(1732956813.342:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c7780849 code=0x7ffc0000 [ 564.120738][ T29] audit: type=1326 audit(1732956813.342:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02c7780849 code=0x7ffc0000 [ 564.300786][ T67] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 565.855884][T13638] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 565.863619][T13638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.362268][T13635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 567.272487][T13653] netlink: 15574 bytes leftover after parsing attributes in process `syz.6.1966'. [ 567.282145][T13649] netlink: 15574 bytes leftover after parsing attributes in process `syz.6.1966'. [ 569.214444][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.287540][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.353677][T13667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1971'. [ 569.406336][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.485962][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.500539][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.550494][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.560364][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.650520][ T5888] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 569.842077][ T5888] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 569.850304][ T5888] usb 5-1: config 0 has no interface number 0 [ 569.895022][ T5888] usb 5-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice= 8.17 [ 569.914318][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.952856][ T5888] usb 5-1: Product: syz [ 569.973074][ T5888] usb 5-1: Manufacturer: syz [ 570.008176][ T5888] usb 5-1: SerialNumber: syz [ 570.038990][ T5888] usb 5-1: config 0 descriptor?? [ 570.057492][ T5888] belkin_sa 5-1:0.66: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 570.088159][ T5888] usb 5-1: bcdDevice: 0817, bfc: 0 [ 570.111337][ T5888] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 570.320474][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.364866][ T867] usb 5-1: USB disconnect, device number 49 [ 570.374272][ T867] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 570.460820][ T867] belkin_sa 5-1:0.66: device disconnected [ 571.703725][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 571.703744][ T29] audit: type=1400 audit(1732956821.742:1268): avc: denied { setopt } for pid=13671 comm="syz.4.1975" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 573.125283][ T29] audit: type=1400 audit(1732956823.352:1269): avc: denied { create } for pid=13681 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 573.192192][ T29] audit: type=1400 audit(1732956823.352:1270): avc: denied { getopt } for pid=13681 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 573.340447][ T29] audit: type=1400 audit(1732956823.352:1271): avc: denied { create } for pid=13681 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 573.480135][ T29] audit: type=1400 audit(1732956823.402:1272): avc: denied { name_bind } for pid=13681 comm="syz.4.1977" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 573.642327][ T29] audit: type=1400 audit(1732956823.402:1273): avc: denied { node_bind } for pid=13681 comm="syz.4.1977" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 583.371800][ T29] audit: type=1400 audit(1732956833.602:1274): avc: denied { read } for pid=13687 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 583.584495][T11695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.595707][T11695] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.603829][T11695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.611466][T11695] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 583.620291][T11695] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 583.627694][T11695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.637349][T13687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.702804][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.950464][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.967088][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.974310][ T29] audit: type=1400 audit(1732956833.632:1275): avc: denied { open } for pid=13687 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 584.022472][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 584.068599][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 584.092470][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 584.152665][T13689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 585.053999][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.066851][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.074975][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.083230][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.090929][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 585.098191][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.108508][T13695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 585.127424][T11695] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 585.138482][T11695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 585.148296][T11695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 585.159832][T11695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 585.220608][T11695] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 585.252009][T11695] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 585.266227][ T29] audit: type=1400 audit(1732956835.492:1276): avc: denied { mounton } for pid=13694 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 585.750824][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.770545][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.779296][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.822792][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.840465][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 585.849963][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.861715][T13698] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 586.721813][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 586.780552][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 586.803128][T13708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 586.812801][T13708] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 586.821011][T13708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 586.829513][T13708] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 586.837109][T13708] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 586.844875][T13708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 586.854309][T13704] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 586.910548][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 586.920973][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 586.928168][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 586.938072][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 586.952733][T13703] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 587.420611][T11695] Bluetooth: hci6: command tx timeout [ 587.455506][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.470699][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.483037][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.494362][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.510513][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 587.520649][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.120997][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 588.152623][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 588.164533][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 588.173927][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 588.181463][ T5842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 588.188559][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 588.461194][T11695] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 588.472161][T11695] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 588.480245][T11695] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 588.500794][T11695] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 588.508019][T11695] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 588.516147][T11695] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 588.524535][T13716] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 589.430866][T11695] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 589.444361][T11695] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 589.460697][T11695] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 589.469507][T11695] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 589.478996][T11695] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 589.486144][T13708] Bluetooth: hci6: command tx timeout [ 589.498309][T11695] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 589.533134][T13720] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 589.562749][ T5842] Bluetooth: hci4: command tx timeout [ 589.912093][T11695] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 589.930654][T11695] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 589.938960][T11695] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 589.948564][T11695] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 589.956059][T11695] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 589.970529][T11695] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 589.978700][T13722] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 590.281892][T11695] Bluetooth: hci7: command tx timeout [ 590.851401][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 590.872673][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 590.881264][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 590.888702][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 590.902012][ T5842] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 590.909119][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 590.919222][T13725] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 591.564529][T11695] Bluetooth: hci6: command tx timeout [ 591.660450][T11695] Bluetooth: hci4: command tx timeout [ 591.680927][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 591.692735][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 591.703606][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 591.711155][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 591.718367][ T5842] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 591.732594][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 592.187504][T11695] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 592.215339][T11695] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 592.224059][T11695] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 592.234501][T11695] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 592.241966][T11695] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 592.249544][T11695] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 592.372471][T11695] Bluetooth: hci7: command tx timeout [ 593.650421][ T5842] Bluetooth: hci6: command tx timeout [ 593.740447][ T5842] Bluetooth: hci4: command tx timeout [ 593.800619][ T5842] Bluetooth: hci8: command tx timeout [ 594.280787][ T5842] Bluetooth: hci9: command tx timeout [ 594.460417][ T5842] Bluetooth: hci7: command tx timeout [ 595.332636][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 595.804138][ T5842] Bluetooth: hci4: command tx timeout [ 595.890470][ T5842] Bluetooth: hci8: command tx timeout [ 596.377562][ T5842] Bluetooth: hci9: command tx timeout [ 596.532565][ T5842] Bluetooth: hci7: command tx timeout [ 597.980433][ T5842] Bluetooth: hci8: command tx timeout [ 598.443777][ T5842] Bluetooth: hci9: command tx timeout [ 600.050494][ T5842] Bluetooth: hci8: command tx timeout [ 600.523460][ T5842] Bluetooth: hci9: command tx timeout [ 617.912991][T13640] syz_tun (unregistering): left allmulticast mode [ 618.044705][ T4473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.056840][ T4473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.143538][ T4473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.153913][ T4473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.244492][ T4473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.276887][ T4473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.340150][T13694] chnl_net:caif_netlink_parms(): no params data found [ 618.383217][ T4473] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.415701][ T4473] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.489565][T13714] chnl_net:caif_netlink_parms(): no params data found [ 618.615598][ T29] audit: type=1400 audit(1732956868.842:1277): avc: denied { read } for pid=5504 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 618.716733][T13711] chnl_net:caif_netlink_parms(): no params data found [ 618.770204][T13729] chnl_net:caif_netlink_parms(): no params data found [ 618.857536][T13731] chnl_net:caif_netlink_parms(): no params data found [ 618.876348][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.888589][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.897757][T13694] bridge_slave_0: entered allmulticast mode [ 618.908006][T13694] bridge_slave_0: entered promiscuous mode [ 618.929767][ T4473] bridge_slave_1: left allmulticast mode [ 618.936275][ T4473] bridge_slave_1: left promiscuous mode [ 618.945718][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.131176][ T4473] bond1 (unregistering): (slave ipip0): Releasing backup interface [ 619.370273][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.385228][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.397590][ T4473] bond0 (unregistering): Released all slaves [ 619.409066][ T4473] bond1 (unregistering): Released all slaves [ 619.439201][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.455407][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.477410][T13694] bridge_slave_1: entered allmulticast mode [ 619.510164][T13694] bridge_slave_1: entered promiscuous mode [ 619.586494][T13714] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.594021][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.605875][T13714] bridge_slave_0: entered allmulticast mode [ 619.612582][T13714] bridge_slave_0: entered promiscuous mode [ 619.653917][T13694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.709464][T13714] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.719300][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.730937][T13714] bridge_slave_1: entered allmulticast mode [ 619.738002][T13714] bridge_slave_1: entered promiscuous mode [ 619.794307][T13694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.815390][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.827115][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.835027][T13729] bridge_slave_0: entered allmulticast mode [ 619.845779][T13729] bridge_slave_0: entered promiscuous mode [ 619.885853][ T4473] batman_adv: batadv0: Interface deactivated: macvlan2 [ 619.896702][ T4473] mac80211_hwsim hwsim8 wlan0 (unregistering): left promiscuous mode [ 619.927556][ T4473] batman_adv: batadv0: Removing interface: macvlan2 [ 619.940169][T13711] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.953288][T13711] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.962158][T13711] bridge_slave_0: entered allmulticast mode [ 619.969940][T13711] bridge_slave_0: entered promiscuous mode [ 620.005963][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.016888][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.025798][T13729] bridge_slave_1: entered allmulticast mode [ 620.035794][T13729] bridge_slave_1: entered promiscuous mode [ 620.078281][T13711] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.085926][ T29] audit: type=1400 audit(1732956870.292:1278): avc: denied { search } for pid=5504 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.129853][T13711] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.138243][T13711] bridge_slave_1: entered allmulticast mode [ 620.150136][ T29] audit: type=1400 audit(1732956870.342:1279): avc: denied { read } for pid=5504 comm="dhcpcd" name="n139" dev="tmpfs" ino=7361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.172216][T13711] bridge_slave_1: entered promiscuous mode [ 620.186046][ T29] audit: type=1400 audit(1732956870.342:1280): avc: denied { open } for pid=5504 comm="dhcpcd" path="/run/udev/data/n139" dev="tmpfs" ino=7361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.209512][ T29] audit: type=1400 audit(1732956870.342:1281): avc: denied { getattr } for pid=5504 comm="dhcpcd" path="/run/udev/data/n139" dev="tmpfs" ino=7361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.243496][T13694] team0: Port device team_slave_0 added [ 620.257640][T13714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.269132][T13714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.292569][ T4473] hsr_slave_0: left promiscuous mode [ 620.300702][ T4473] hsr_slave_1: left promiscuous mode [ 620.307543][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.315113][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.327389][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.335061][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.354586][ T4473] veth1_macvtap: left promiscuous mode [ 620.360108][ T4473] veth0_macvtap: left promiscuous mode [ 620.366027][ T4473] veth1_vlan: left promiscuous mode [ 620.371713][ T4473] veth0_vlan: left promiscuous mode [ 620.859618][ T4473] team0 (unregistering): Port device team_slave_1 removed [ 620.899913][ T4473] team0 (unregistering): Port device team_slave_0 removed [ 621.238155][T13694] team0: Port device team_slave_1 added [ 621.284085][T13711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.296698][T13711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.321113][T13714] team0: Port device team_slave_0 added [ 621.351700][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.365601][T13731] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.373808][T13731] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.389570][T13731] bridge_slave_0: entered allmulticast mode [ 621.397548][T13731] bridge_slave_0: entered promiscuous mode [ 621.415483][T13731] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.428745][T13731] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.430045][ T29] audit: type=1400 audit(1732956871.652:1282): avc: denied { read } for pid=13769 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.436213][T13731] bridge_slave_1: entered allmulticast mode [ 621.467730][ T29] audit: type=1400 audit(1732956871.692:1283): avc: denied { open } for pid=13769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.479314][T13731] bridge_slave_1: entered promiscuous mode [ 621.507156][ T29] audit: type=1400 audit(1732956871.692:1284): avc: denied { getattr } for pid=13769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.556366][T13694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.563512][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.596831][T13694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.612873][T13714] team0: Port device team_slave_1 added [ 621.620058][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.659087][ T29] audit: type=1400 audit(1732956871.882:1285): avc: denied { write } for pid=13768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.708761][ T29] audit: type=1400 audit(1732956871.882:1286): avc: denied { add_name } for pid=13768 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.738351][T13711] team0: Port device team_slave_0 added [ 621.746740][T13711] team0: Port device team_slave_1 added [ 621.753619][T13694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.761719][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.788106][T13694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.846462][T13731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.899324][T13729] team0: Port device team_slave_0 added [ 621.908283][T13731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.936499][T13711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.943669][T13711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.970158][T13711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.982163][T13714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.989100][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.016063][T13714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.029516][T13714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.037037][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.063335][T13714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.075787][T13729] team0: Port device team_slave_1 added [ 622.099211][T13731] team0: Port device team_slave_0 added [ 622.109687][T13694] hsr_slave_0: entered promiscuous mode [ 622.119258][T13694] hsr_slave_1: entered promiscuous mode [ 622.127275][T13694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.135205][T13694] Cannot create hsr debugfs directory [ 622.149544][T13711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.156663][T13711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.183185][T13711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.213732][T13731] team0: Port device team_slave_1 added [ 622.245173][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.255203][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.282736][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.294918][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.302104][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.329726][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.354145][T13731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.361306][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.388067][T13731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.439598][T13731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.446876][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.474972][T13731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.496003][T13711] hsr_slave_0: entered promiscuous mode [ 622.502051][T13711] hsr_slave_1: entered promiscuous mode [ 622.508016][T13711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.515797][T13711] Cannot create hsr debugfs directory [ 622.529593][T13714] hsr_slave_0: entered promiscuous mode [ 622.536045][T13714] hsr_slave_1: entered promiscuous mode [ 622.542178][T13714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.549736][T13714] Cannot create hsr debugfs directory [ 622.566244][T13729] hsr_slave_0: entered promiscuous mode [ 622.572951][T13729] hsr_slave_1: entered promiscuous mode [ 622.578817][T13729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.586748][T13729] Cannot create hsr debugfs directory [ 622.671033][T13731] hsr_slave_0: entered promiscuous mode [ 622.677873][T13731] hsr_slave_1: entered promiscuous mode [ 622.684271][T13731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.693707][T13731] Cannot create hsr debugfs directory [ 622.737726][ T4473] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.838064][ T4473] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.896964][ T4473] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.956588][ T4473] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.009777][T13694] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 623.027194][T13694] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 623.179239][T13694] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 623.200656][T13694] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 623.465107][ T4473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.519460][T13694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.537383][T13694] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.562903][ T4473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.581112][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.588190][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.609912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.617045][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.673214][ T4473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.786976][ T4473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.963952][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.970350][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.976317][T13694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.174415][ T4473] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.201051][ T4473] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.371649][ T4473] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.390420][ T4473] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.492487][ T4473] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.509287][ T4473] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.551388][T13694] veth0_vlan: entered promiscuous mode [ 624.678276][T13694] veth1_vlan: entered promiscuous mode [ 624.701859][ T4473] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.712379][ T4473] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.771109][T13694] veth0_macvtap: entered promiscuous mode [ 624.787114][T13694] veth1_macvtap: entered promiscuous mode [ 624.816503][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.828032][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.848465][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.861104][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.871328][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.884920][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.895125][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.905633][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.917836][T13694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.937857][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.951822][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.962311][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.972848][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.982981][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.993490][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.013560][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.024210][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.036030][T13694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.074938][T13694] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.085367][T13694] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.101898][T13694] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.111578][T13694] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.203095][ T4473] bridge_slave_1: left allmulticast mode [ 625.208754][ T4473] bridge_slave_1: left promiscuous mode [ 625.232032][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.250098][ T4473] bridge_slave_0: left allmulticast mode [ 625.255842][ T4473] bridge_slave_0: left promiscuous mode [ 625.262267][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.276233][ T4473] bridge_slave_1: left allmulticast mode [ 625.282225][ T4473] bridge_slave_1: left promiscuous mode [ 625.287825][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.297450][ T4473] bridge_slave_0: left allmulticast mode [ 625.303603][ T4473] bridge_slave_0: left promiscuous mode [ 625.309211][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.319313][ T4473] bridge_slave_1: left allmulticast mode [ 625.325708][ T4473] bridge_slave_1: left promiscuous mode [ 625.332214][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.340995][ T4473] bridge_slave_0: left allmulticast mode [ 625.346736][ T4473] bridge_slave_0: left promiscuous mode [ 625.354829][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.138560][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.149253][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.160179][ T4473] bond0 (unregistering): Released all slaves [ 626.265835][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.275775][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.286494][ T4473] bond0 (unregistering): Released all slaves [ 626.399195][ T4473] team0: Port device bond0 removed [ 626.406112][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.416123][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.426718][ T4473] bond0 (unregistering): Released all slaves [ 626.669902][T13714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.683646][T13714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 626.735633][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.752758][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.774271][T13714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.784666][T13714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 626.803583][T13711] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 626.816225][T13711] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 626.827759][T13711] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 626.875667][T13714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.886224][T13714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 626.921260][T13711] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 626.982082][T13714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.001662][T13714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 627.050770][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.058692][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.098559][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 627.098574][ T29] audit: type=1400 audit(1732956877.322:1292): avc: denied { mounton } for pid=13694 comm="syz-executor" path="/root/syzkaller.NphsOQ/syz-tmp" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 627.147958][ T29] audit: type=1400 audit(1732956877.322:1293): avc: denied { mount } for pid=13694 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 627.163405][T13711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.182582][ T29] audit: type=1400 audit(1732956877.322:1294): avc: denied { mounton } for pid=13694 comm="syz-executor" path="/root/syzkaller.NphsOQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 627.258218][ T29] audit: type=1400 audit(1732956877.332:1295): avc: denied { mount } for pid=13694 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 627.259881][T13711] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.329298][ T29] audit: type=1400 audit(1732956877.332:1296): avc: denied { mounton } for pid=13694 comm="syz-executor" path="/root/syzkaller.NphsOQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 627.359106][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.366204][ T7608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.366412][ T29] audit: type=1400 audit(1732956877.332:1297): avc: denied { mounton } for pid=13694 comm="syz-executor" path="/root/syzkaller.NphsOQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 627.410260][ T29] audit: type=1400 audit(1732956877.342:1298): avc: denied { unmount } for pid=13694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 627.442219][ T29] audit: type=1400 audit(1732956877.362:1299): avc: denied { mounton } for pid=13694 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 627.468250][ T29] audit: type=1400 audit(1732956877.362:1300): avc: denied { mount } for pid=13694 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 627.501127][ T29] audit: type=1400 audit(1732956877.362:1301): avc: denied { mounton } for pid=13694 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 627.554639][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.561758][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.860989][T13714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 627.907264][T13714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 627.994973][T13714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 628.028842][ T4473] hsr_slave_0: left promiscuous mode [ 628.039296][ T4473] hsr_slave_1: left promiscuous mode [ 628.055384][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.063670][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.071885][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.079300][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.093218][ T4473] hsr_slave_0: left promiscuous mode [ 628.100241][ T4473] hsr_slave_1: left promiscuous mode [ 628.106484][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.114463][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.123349][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.131196][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.146981][ T4473] hsr_slave_0: left promiscuous mode [ 628.152936][ T4473] hsr_slave_1: left promiscuous mode [ 628.158751][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.175376][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.185906][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.194412][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.235271][ T4473] veth1_macvtap: left promiscuous mode [ 628.240924][ T4473] veth0_macvtap: left promiscuous mode [ 628.246427][ T4473] veth1_vlan: left promiscuous mode [ 628.252147][ T4473] veth0_vlan: left promiscuous mode [ 628.257877][ T4473] veth1_macvtap: left promiscuous mode [ 628.263538][ T4473] veth0_macvtap: left promiscuous mode [ 628.274646][ T4473] veth1_vlan: left promiscuous mode [ 628.279940][ T4473] veth0_vlan: left promiscuous mode [ 628.286001][ T4473] veth1_macvtap: left promiscuous mode [ 628.292221][ T4473] veth0_macvtap: left promiscuous mode [ 628.308185][ T4473] veth1_vlan: left promiscuous mode [ 628.314080][ T4473] veth0_vlan: left promiscuous mode [ 628.969081][ T4473] pimreg (unregistering): left allmulticast mode [ 629.609425][ T4473] team0 (unregistering): Port device vlan0 removed [ 629.828893][ T4473] team0 (unregistering): Port device team_slave_1 removed [ 629.869655][ T4473] team0 (unregistering): Port device team_slave_0 removed [ 630.537150][ T4473] team0 (unregistering): Port device team_slave_1 removed [ 630.580196][ T4473] team0 (unregistering): Port device team_slave_0 removed [ 631.258686][ T4473] team0 (unregistering): Port device team_slave_1 removed [ 631.300128][ T4473] team0 (unregistering): Port device team_slave_0 removed [ 631.657942][T13714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 631.840357][T13714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.048443][T13714] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.126773][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.133899][ T7608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.155484][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.162616][ T7608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.218714][T13711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.289747][T13714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 632.312412][T13714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.468769][T13729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 632.522503][T13729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 632.702106][T13729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 632.925513][T13729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 633.173505][T13711] veth0_vlan: entered promiscuous mode [ 633.188158][T13714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.194724][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 633.194738][ T29] audit: type=1400 audit(1732956883.412:1317): avc: denied { getopt } for pid=13955 comm="syz.8.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 633.237475][T13731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 633.254595][T13731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 633.305021][T13731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 633.324158][T13711] veth1_vlan: entered promiscuous mode [ 633.370086][T13731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 633.531686][ T29] audit: type=1400 audit(1732956883.712:1318): avc: denied { create } for pid=13955 comm="syz.8.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 633.704765][T13714] veth0_vlan: entered promiscuous mode [ 633.787228][ T29] audit: type=1400 audit(1732956883.722:1319): avc: denied { write } for pid=13955 comm="syz.8.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 633.990919][T13714] veth1_vlan: entered promiscuous mode [ 634.115339][T13711] veth0_macvtap: entered promiscuous mode [ 634.127772][T13729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.153495][T13711] veth1_macvtap: entered promiscuous mode [ 634.203264][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.218608][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.247297][T13729] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.262688][T13714] veth0_macvtap: entered promiscuous mode [ 634.266295][T13974] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1990'. [ 634.287370][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.294478][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.313559][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.325120][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.342672][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.345398][ T29] audit: type=1400 audit(1732956884.552:1320): avc: denied { read write } for pid=13973 comm="syz.8.1990" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 634.359229][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.389055][T13711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.400252][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.411036][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.422035][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.434671][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.435988][ T29] audit: type=1400 audit(1732956884.552:1321): avc: denied { open } for pid=13973 comm="syz.8.1990" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 634.445682][T13711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.480856][ T29] audit: type=1400 audit(1732956884.632:1322): avc: denied { sys_chroot } for pid=13980 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 634.503061][ T29] audit: type=1400 audit(1732956884.632:1323): avc: denied { setgid } for pid=13980 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 634.507207][T13714] veth1_macvtap: entered promiscuous mode [ 634.525305][ T29] audit: type=1400 audit(1732956884.632:1324): avc: denied { setrlimit } for pid=13980 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 634.546981][ T4473] IPVS: stop unused estimator thread 0... [ 634.558353][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.565432][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.586764][T13711] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.596184][T13711] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.606220][T13711] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.616243][T13711] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.642039][T13731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.670485][ T51] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 634.702767][T13731] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.715186][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.726138][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.736511][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.746947][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.757436][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.768395][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.778964][T13714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.795690][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.802769][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.812424][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.819473][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.839261][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.853101][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.855215][ T51] usb 9-1: config 0 has an invalid interface number: 66 but max is 0 [ 634.863695][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.882614][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.890625][ T51] usb 9-1: config 0 has no interface number 0 [ 634.892711][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.900012][ T51] usb 9-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice= 8.17 [ 634.909629][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.918162][ T51] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.938766][T13714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.942009][ T51] usb 9-1: Product: syz [ 634.948331][T13714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.959256][T13714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.959995][ T51] usb 9-1: Manufacturer: syz [ 634.968775][T13714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.975982][ T51] usb 9-1: SerialNumber: syz [ 634.983416][T13714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.988057][ T51] usb 9-1: config 0 descriptor?? [ 635.001965][ T51] belkin_sa 9-1:0.66: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 635.021675][ T51] usb 9-1: bcdDevice: 0817, bfc: 0 [ 635.027027][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.033070][ T51] usb 9-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 635.058476][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.106107][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.137530][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.196883][T13731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 635.218293][ T8] usb 9-1: USB disconnect, device number 2 [ 635.225954][ T8] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 635.241290][ T8] belkin_sa 9-1:0.66: device disconnected [ 635.262631][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.285393][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.337143][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.348451][T13729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.361245][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.393890][ T29] audit: type=1400 audit(1732956885.612:1325): avc: denied { write } for pid=13988 comm="syz.9.1979" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 635.412293][T13729] veth0_vlan: entered promiscuous mode [ 635.433225][T13989] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 635.438911][T13729] veth1_vlan: entered promiscuous mode [ 635.455401][T13989] qnx6: wrong signature (magic) in superblock #1. [ 635.488996][T13989] qnx6: unable to read the first superblock [ 635.498048][T13729] veth0_macvtap: entered promiscuous mode [ 635.593186][T13993] Cannot find del_set index 0 as target [ 635.768782][T13729] veth1_macvtap: entered promiscuous mode [ 635.964494][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.009773][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.026809][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.037692][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.060800][ T29] audit: type=1400 audit(1732956886.212:1326): avc: denied { create } for pid=13994 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 636.340850][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.469590][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.499776][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.515689][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.709899][T13729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.745891][T13731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.081814][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.081872][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.081930][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.081965][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.081996][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.082047][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.082080][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.082105][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.102966][T13729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.104799][T13729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.205820][T13729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.205851][T13729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.205877][T13729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.221892][T13731] veth0_vlan: entered promiscuous mode [ 637.223933][T13731] veth1_vlan: entered promiscuous mode [ 637.304106][T13731] veth0_macvtap: entered promiscuous mode [ 637.306567][T13731] veth1_macvtap: entered promiscuous mode [ 638.117143][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.164488][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.190464][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.220440][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.240442][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.302536][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.322993][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.333587][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.344696][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.355383][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.355723][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 638.355736][ T29] audit: type=1400 audit(1732956888.582:1359): avc: denied { create } for pid=14015 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 638.394623][T13731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.407268][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.419986][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.420466][ T29] audit: type=1400 audit(1732956888.652:1360): avc: denied { bind } for pid=14017 comm="syz.8.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 638.431687][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.465125][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.465986][ T29] audit: type=1400 audit(1732956888.692:1361): avc: denied { write } for pid=14017 comm="syz.8.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 638.590257][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.601514][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.614189][ T29] audit: type=1400 audit(1732956888.812:1362): avc: denied { read } for pid=14015 comm="syz.3.1996" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.621965][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.648058][ T5934] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 638.652644][ T29] audit: type=1400 audit(1732956888.812:1363): avc: denied { open } for pid=14015 comm="syz.3.1996" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.656412][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.679579][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.680064][ T29] audit: type=1400 audit(1732956888.812:1364): avc: denied { map } for pid=14015 comm="syz.3.1996" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 638.695409][T13731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.698330][ T29] audit: type=1400 audit(1732956888.832:1365): avc: denied { create } for pid=14015 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 638.752891][T13731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.791425][T13731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.804370][T14021] netlink: 15574 bytes leftover after parsing attributes in process `syz.3.1996'. [ 638.813918][T14016] netlink: 15574 bytes leftover after parsing attributes in process `syz.3.1996'. [ 638.831088][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.838925][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.856292][ T5934] usb 10-1: Using ep0 maxpacket: 32 [ 638.877833][T13731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.900434][ T5934] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 638.913183][ T5934] usb 10-1: config 0 has no interface number 0 [ 638.932425][T13731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.944338][ T5934] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 638.956688][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.966958][ T5934] usb 10-1: Product: syz [ 638.973120][T13731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.983758][ T5934] usb 10-1: Manufacturer: syz [ 638.988471][ T5934] usb 10-1: SerialNumber: syz [ 639.005776][ T5934] usb 10-1: config 0 descriptor?? [ 639.006158][T13731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.022866][ T5934] smsc95xx v2.0.0 [ 639.039310][ T29] audit: type=1400 audit(1732956889.262:1366): avc: denied { create } for pid=14026 comm="syz.8.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.088882][T14029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.099856][ T29] audit: type=1400 audit(1732956889.302:1367): avc: denied { getopt } for pid=14026 comm="syz.8.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.119695][T14029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.129575][T14029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.140887][ T29] audit: type=1400 audit(1732956889.302:1368): avc: denied { prog_run } for pid=14026 comm="syz.8.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 639.160969][T14029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.184630][T14030] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2001'. [ 639.204003][T14029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.216784][T14029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.230248][T14029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.264772][T14029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.278346][T14029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.295002][T14029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.581091][T13910] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 639.786892][ T5934] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 639.791302][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.805437][ T5934] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 639.807338][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.922732][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.936443][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.002490][T13910] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 640.008125][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.015676][T13910] usb 4-1: config 0 has no interface number 0 [ 640.023957][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.033306][ T5934] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 640.048145][ T5934] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 640.053061][T11695] Bluetooth: Frame is too long (len 12, expected len 9) [ 640.104703][T13910] usb 4-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice= 8.17 [ 640.114077][T13910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.122365][T13910] usb 4-1: Product: syz [ 640.126724][T13910] usb 4-1: Manufacturer: syz [ 640.131395][T13910] usb 4-1: SerialNumber: syz [ 640.142755][T14041] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 640.149918][T13910] usb 4-1: config 0 descriptor?? [ 640.169325][T14041] qnx6: wrong signature (magic) in superblock #1. [ 640.176306][T13910] belkin_sa 4-1:0.66: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 640.197967][T13910] usb 4-1: bcdDevice: 0817, bfc: 0 [ 640.198547][T14041] qnx6: unable to read the first superblock [ 640.209504][T13910] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 640.326484][T14047] Cannot find del_set index 0 as target [ 640.975153][T14048] futex_wake_op: syz.2.1982 tries to shift op by 144; fix this program [ 641.034925][ T5888] usb 4-1: USB disconnect, device number 37 [ 641.050513][ T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 641.058457][ T5888] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 641.071455][ T5888] belkin_sa 4-1:0.66: device disconnected [ 641.220614][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 641.232221][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.259860][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 641.282225][ T8] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.291494][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.311056][ T8] usb 9-1: config 0 descriptor?? [ 641.387388][T13910] usb 10-1: USB disconnect, device number 2 [ 641.440521][T13885] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 641.500013][T14057] FAULT_INJECTION: forcing a failure. [ 641.500013][T14057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.533082][T14057] CPU: 1 UID: 0 PID: 14057 Comm: syz.9.2007 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 641.543538][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.553604][T14057] Call Trace: [ 641.556887][T14057] [ 641.559815][T14057] dump_stack_lvl+0x16c/0x1f0 [ 641.564495][T14057] should_fail_ex+0x497/0x5b0 [ 641.569191][T14057] strncpy_from_user+0x3b/0x2d0 [ 641.574042][T14057] getname_flags.part.0+0x8f/0x550 [ 641.579157][T14057] ? __pfx_ksys_write+0x10/0x10 [ 641.584003][T14057] getname_flags+0x93/0xf0 [ 641.588406][T14057] __x64_sys_unlinkat+0xb4/0x130 [ 641.593333][T14057] do_syscall_64+0xcd/0x250 [ 641.597833][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.603719][T14057] RIP: 0033:0x7f8edff80849 [ 641.608117][T14057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.627715][T14057] RSP: 002b:00007f8edddf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 641.636116][T14057] RAX: ffffffffffffffda RBX: 00007f8ee0145fa0 RCX: 00007f8edff80849 [ 641.644074][T14057] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 641.652031][T14057] RBP: 00007f8edddf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 641.659983][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.667939][T14057] R13: 0000000000000000 R14: 00007f8ee0145fa0 R15: 00007fffd89b6c28 [ 641.675904][T14057] [ 641.678984][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.703884][T13885] usb 3-1: Using ep0 maxpacket: 32 [ 641.748416][ T8] usbhid 9-1:0.0: can't add hid device: -71 [ 641.755411][ T8] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 641.778370][T13885] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 641.795135][ T8] usb 9-1: USB disconnect, device number 3 [ 641.801596][T13885] usb 3-1: config 0 has no interface number 0 [ 641.807699][T13885] usb 3-1: config 0 interface 12 has no altsetting 0 [ 641.846893][T13885] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 641.860123][T13885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.933884][T13885] usb 3-1: Product: syz [ 641.938073][T13885] usb 3-1: Manufacturer: syz [ 641.952191][T13885] usb 3-1: SerialNumber: syz [ 641.969527][T14068] netlink: 15574 bytes leftover after parsing attributes in process `syz.9.2009'. [ 641.979251][T14066] netlink: 15574 bytes leftover after parsing attributes in process `syz.9.2009'. [ 642.151247][T13885] usb 3-1: config 0 descriptor?? [ 643.195858][T14094] FAULT_INJECTION: forcing a failure. [ 643.195858][T14094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.232705][T14094] CPU: 0 UID: 0 PID: 14094 Comm: syz.9.2013 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 643.243157][T14094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 643.253221][T14094] Call Trace: [ 643.256507][T14094] [ 643.259439][T14094] dump_stack_lvl+0x16c/0x1f0 [ 643.264133][T14094] should_fail_ex+0x497/0x5b0 [ 643.268834][T14094] _copy_to_user+0x32/0xd0 [ 643.273267][T14094] simple_read_from_buffer+0xd0/0x160 [ 643.278659][T14094] proc_fail_nth_read+0x198/0x270 [ 643.283701][T14094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.289260][T14094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.294802][T14094] vfs_read+0x1df/0xbe0 [ 643.298948][T14094] ? __fget_files+0x1fc/0x3a0 [ 643.303612][T14094] ? __pfx___mutex_lock+0x10/0x10 [ 643.308630][T14094] ? __pfx_vfs_read+0x10/0x10 [ 643.313296][T14094] ? __fget_files+0x206/0x3a0 [ 643.317963][T14094] ksys_read+0x12b/0x250 [ 643.322192][T14094] ? __pfx_ksys_read+0x10/0x10 [ 643.326946][T14094] do_syscall_64+0xcd/0x250 [ 643.331448][T14094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.337337][T14094] RIP: 0033:0x7f8edff7f25c [ 643.341742][T14094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 643.361337][T14094] RSP: 002b:00007f8edddf6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.369737][T14094] RAX: ffffffffffffffda RBX: 00007f8ee0145fa0 RCX: 00007f8edff7f25c [ 643.377691][T14094] RDX: 000000000000000f RSI: 00007f8edddf60b0 RDI: 0000000000000004 [ 643.385646][T14094] RBP: 00007f8edddf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 643.393615][T14094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.401569][T14094] R13: 0000000000000000 R14: 00007f8ee0145fa0 R15: 00007fffd89b6c28 [ 643.409536][T14094] [ 643.488442][T13885] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 643.498392][T13885] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 643.525039][T13885] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 643.532954][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 643.532972][ T29] audit: type=1400 audit(1732956893.752:1434): avc: denied { module_request } for pid=14090 comm="syz.8.2012" kmod="block-major-43-256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 643.561479][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.566633][T13885] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 643.607825][T13885] usb 3-1: USB disconnect, device number 29 [ 643.820459][T14097] /dev/nbd8: Can't open blockdev [ 643.825641][T14110] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 643.890620][T14110] qnx6: wrong signature (magic) in superblock #1. [ 643.914312][T14110] qnx6: unable to read the first superblock [ 644.017491][T14115] Cannot find del_set index 0 as target [ 644.328316][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 644.388022][T14119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2015'. [ 644.653265][T14123] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2016'. [ 644.775667][T14125] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 644.783778][ T29] audit: type=1326 audit(1732956894.992:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.9.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edff80849 code=0x7ffc0000 [ 644.867498][T14125] audit: out of memory in audit_log_start [ 645.098088][ T29] audit: type=1326 audit(1732956894.992:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.9.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edff80849 code=0x7ffc0000 [ 645.140182][ T29] audit: type=1326 audit(1732956894.992:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.9.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8edff80849 code=0x7ffc0000 [ 645.168601][ T29] audit: type=1326 audit(1732956894.992:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.9.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edff80849 code=0x7ffc0000 [ 645.218537][ T29] audit: type=1326 audit(1732956894.992:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.9.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edff80849 code=0x7ffc0000 [ 645.278220][ T29] audit: type=1326 audit(1732956895.002:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.9.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8edff7f1b0 code=0x7ffc0000 [ 645.341459][ T29] audit: type=1326 audit(1732956895.002:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.9.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8edff7f2ff code=0x7ffc0000 [ 648.054950][T14156] overlay: Unknown parameter 'dont_appraise' [ 648.540679][T13910] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 648.555429][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 648.555466][ T29] audit: type=1400 audit(1732956898.752:1457): avc: denied { read write } for pid=14159 comm="syz.8.2025" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 648.621281][T14174] overlayfs: statfs failed on './file0' [ 648.740663][T13910] usb 4-1: Using ep0 maxpacket: 8 [ 648.785857][T13910] usb 4-1: config 4 has an invalid interface number: 244 but max is 0 [ 648.852053][T13910] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 649.053771][T13910] usb 4-1: config 4 has no interface number 0 [ 649.060194][ T29] audit: type=1400 audit(1732956898.752:1458): avc: denied { open } for pid=14159 comm="syz.8.2025" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 649.097914][T13910] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 649.108758][T13910] usb 4-1: config 4 interface 244 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 649.187281][ T29] audit: type=1400 audit(1732956899.242:1459): avc: denied { unmount } for pid=13694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 649.270428][T13910] usb 4-1: config 4 interface 244 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.283677][T13910] usb 4-1: config 4 interface 244 has no altsetting 0 [ 649.290765][ T29] audit: type=1400 audit(1732956899.392:1460): avc: denied { execute_no_trans } for pid=14179 comm="syz.8.2028" path="/18/file1" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 649.319898][T14182] 9pnet_fd: Insufficient options for proto=fd [ 649.331398][T13910] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 649.340555][T13910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.348555][T13910] usb 4-1: Product: syz [ 649.362949][T13910] usb 4-1: Manufacturer: syz [ 649.376834][T13910] usb 4-1: SerialNumber: syz [ 649.465953][ T29] audit: type=1400 audit(1732956899.692:1461): avc: denied { setopt } for pid=14190 comm="syz.8.2030" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 649.682284][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.717451][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.723467][T14212] FAULT_INJECTION: forcing a failure. [ 649.723467][T14212] name failslab, interval 1, probability 0, space 0, times 0 [ 649.743409][ T29] audit: type=1400 audit(1732956899.972:1462): avc: denied { mount } for pid=14157 comm="syz.3.2026" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 649.825348][ T29] audit: type=1400 audit(1732956900.052:1463): avc: denied { read write } for pid=14207 comm="syz.8.2034" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 650.111220][T13910] ipheth 4-1:4.244: Unable to find endpoints [ 650.135423][ T29] audit: type=1400 audit(1732956900.052:1464): avc: denied { open } for pid=14207 comm="syz.8.2034" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 650.154874][T13910] usb 4-1: USB disconnect, device number 38 [ 650.160406][ T29] audit: type=1400 audit(1732956900.052:1465): avc: denied { read } for pid=14157 comm="syz.3.2026" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 650.190134][ T29] audit: type=1400 audit(1732956900.052:1466): avc: denied { open } for pid=14157 comm="syz.3.2026" path="/7/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 650.212977][T14212] CPU: 1 UID: 0 PID: 14212 Comm: syz.2.2032 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 650.223404][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 650.233463][T14212] Call Trace: [ 650.236740][T14212] [ 650.239661][T14212] dump_stack_lvl+0x16c/0x1f0 [ 650.244324][T14212] should_fail_ex+0x497/0x5b0 [ 650.248997][T14212] ? fs_reclaim_acquire+0xae/0x150 [ 650.254095][T14212] should_failslab+0xc2/0x120 [ 650.258761][T14212] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 650.264545][T14212] ? __alloc_skb+0x2b1/0x380 [ 650.269113][T14212] __alloc_skb+0x2b1/0x380 [ 650.273515][T14212] ? __pfx___alloc_skb+0x10/0x10 [ 650.278446][T14212] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 650.284763][T14212] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 650.291439][T14212] netlink_alloc_large_skb+0x69/0x130 [ 650.296828][T14212] netlink_sendmsg+0x689/0xd70 [ 650.301587][T14212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.306860][T14212] ____sys_sendmsg+0xaaf/0xc90 [ 650.311606][T14212] ? copy_msghdr_from_user+0x10b/0x160 [ 650.317054][T14212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.322330][T14212] ___sys_sendmsg+0x135/0x1e0 [ 650.326987][T14212] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.332165][T14212] ? __pfx_lock_release+0x10/0x10 [ 650.337165][T14212] ? trace_lock_acquire+0x14e/0x1f0 [ 650.342360][T14212] ? __fget_files+0x206/0x3a0 [ 650.347014][T14212] __sys_sendmsg+0x16e/0x220 [ 650.351582][T14212] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.356687][T14212] do_syscall_64+0xcd/0x250 [ 650.361172][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.367046][T14212] RIP: 0033:0x7fbf58580849 [ 650.371437][T14212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.391021][T14212] RSP: 002b:00007fbf59415058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.399440][T14212] RAX: ffffffffffffffda RBX: 00007fbf58745fa0 RCX: 00007fbf58580849 [ 650.407388][T14212] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 650.415335][T14212] RBP: 00007fbf594150a0 R08: 0000000000000000 R09: 0000000000000000 [ 650.423292][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.431255][T14212] R13: 0000000000000000 R14: 00007fbf58745fa0 R15: 00007ffc127d3868 [ 650.439219][T14212] [ 650.663621][T14221] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2035'. [ 650.857440][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.896194][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.918111][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.940787][T14241] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2038'. [ 650.949837][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.978097][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.011746][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.077755][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 651.083395][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.112647][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.129959][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.150212][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.197008][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.360771][ T5888] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 651.372805][T14254] bridge_slave_0 (unregistering): left allmulticast mode [ 651.381589][T14254] bridge_slave_0 (unregistering): left promiscuous mode [ 651.410431][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.621787][ T5888] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 651.662799][ T5888] usb 4-1: config 0 has no interface number 0 [ 651.673291][ T5888] usb 4-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice= 8.17 [ 651.683128][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.879775][T14277] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2043'. [ 651.888817][T14277] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2043'. [ 651.897843][T14277] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2043'. [ 651.906970][T14277] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2043'. [ 652.060133][ T5888] usb 4-1: Product: syz [ 652.064799][ T5888] usb 4-1: Manufacturer: syz [ 652.069404][ T5888] usb 4-1: SerialNumber: syz [ 652.087903][ T5888] usb 4-1: config 0 descriptor?? [ 652.457480][ T5888] belkin_sa 4-1:0.66: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 652.467696][ T5888] usb 4-1: bcdDevice: 0817, bfc: 0 [ 652.482007][ T5888] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 652.860232][T13910] usb 4-1: USB disconnect, device number 39 [ 652.999510][T13910] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 653.161359][T13910] belkin_sa 4-1:0.66: device disconnected [ 653.283820][T14302] 9pnet_fd: Insufficient options for proto=fd [ 653.432099][T13847] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 653.500611][ T5888] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 653.591979][T13847] usb 10-1: Using ep0 maxpacket: 16 [ 653.599498][T13847] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 653.611580][T13847] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 653.626258][T13847] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 653.638097][T13847] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 653.649644][T13847] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 653.661114][T13847] usb 10-1: config 1 interface 0 has no altsetting 0 [ 653.667880][T13847] usb 10-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 653.677255][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 653.682628][T13847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.692536][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.705898][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.721234][T13847] ums-sddr09 10-1:1.0: USB Mass Storage device detected [ 653.736004][ T5888] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.745781][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.754047][ T5885] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 653.765136][ T5888] usb 3-1: config 0 descriptor?? [ 653.945565][T13847] scsi host1: usb-storage 10-1:1.0 [ 653.981122][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.992615][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.002245][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 654.002259][ T29] audit: type=1400 audit(1732956904.222:1480): avc: denied { read write } for pid=14344 comm="syz.1.2052" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 654.003192][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.032917][ T29] audit: type=1400 audit(1732956904.232:1481): avc: denied { open } for pid=14344 comm="syz.1.2052" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 654.084107][ T5885] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 654.133651][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.165283][ T5885] usb 4-1: config 0 descriptor?? [ 654.192888][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 654.200053][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 654.239369][ T5888] usb 3-1: USB disconnect, device number 30 [ 654.890308][ T29] audit: type=1400 audit(1732956904.682:1482): avc: denied { write } for pid=14349 comm="syz.8.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 654.909935][ T29] audit: type=1400 audit(1732956904.702:1483): avc: denied { read write } for pid=14349 comm="syz.8.2053" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 654.934457][ T29] audit: type=1400 audit(1732956904.702:1484): avc: denied { open } for pid=14349 comm="syz.8.2053" path="/25/bus" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 654.958736][ T29] audit: type=1400 audit(1732956905.122:1485): avc: denied { map } for pid=14344 comm="syz.1.2052" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 654.982026][ T29] audit: type=1400 audit(1732956905.122:1486): avc: denied { execute } for pid=14344 comm="syz.1.2052" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 655.005614][ T29] audit: type=1400 audit(1732956905.132:1487): avc: denied { ioctl } for pid=14344 comm="syz.1.2052" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 655.015912][ T4473] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 655.057413][ T5888] usb 10-1: USB disconnect, device number 3 [ 655.067151][ T5885] betop 0003:11C2:2208.0032: unknown main item tag 0x0 [ 655.077466][ T5885] betop 0003:11C2:2208.0032: unknown main item tag 0x0 [ 655.098307][ T5885] betop 0003:11C2:2208.0032: unknown main item tag 0x0 [ 655.105452][T13847] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 655.143678][ T5885] betop 0003:11C2:2208.0032: unknown main item tag 0x0 [ 655.176844][ T5885] betop 0003:11C2:2208.0032: unknown main item tag 0x0 [ 655.178377][ T4473] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 655.195967][ T5941] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 655.248746][ T5885] betop 0003:11C2:2208.0032: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.3-1/input0 [ 655.249695][ T5941] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 655.261533][T13847] usb 9-1: Using ep0 maxpacket: 16 [ 655.276584][ T29] audit: type=1400 audit(1732956905.502:1488): avc: denied { mount } for pid=14315 comm="syz.3.2051" name="/" dev="hugetlbfs" ino=42670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 655.285820][ T5885] betop 0003:11C2:2208.0032: no inputs found [ 655.312585][T13847] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 655.327246][T13847] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.331154][ T5941] sd 1:0:0:0: [sdb] Sense not available. [ 655.400570][ T5885] usb 4-1: USB disconnect, device number 40 [ 655.407865][ T5941] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 655.410493][T13847] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.440309][ T5941] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 655.450997][ T5941] sd 1:0:0:0: [sdb] Write Protect is off [ 655.456828][ T5941] sd 1:0:0:0: [sdb] Asking for cache data failed [ 655.480236][T13847] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.522957][ T5941] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 655.526790][T13847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.547273][ T5941] [ 655.549632][ T5941] ====================================================== [ 655.556620][ T5941] WARNING: possible circular locking dependency detected [ 655.563617][ T5941] 6.12.0-syzkaller-10740-g509f806f7f70 #0 Not tainted [ 655.570344][ T5941] ------------------------------------------------------ [ 655.577336][ T5941] kworker/u8:9/5941 is trying to acquire lock: [ 655.583461][ T5941] ffff888028d1ba00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 655.593002][ T5941] [ 655.593002][ T5941] but task is already holding lock: [ 655.600340][ T5941] ffff888028d1b1c8 (&q->q_usage_counter(queue)#54){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 655.610850][ T5941] [ 655.610850][ T5941] which lock already depends on the new lock. [ 655.610850][ T5941] [ 655.621221][ T5941] [ 655.621221][ T5941] the existing dependency chain (in reverse order) is: [ 655.630200][ T5941] [ 655.630200][ T5941] -> #6 (&q->q_usage_counter(queue)#54){++++}-{0:0}: [ 655.639045][ T5941] blk_queue_enter+0x50f/0x640 [ 655.644313][ T5941] blk_mq_alloc_request+0x59b/0x950 [ 655.650009][ T5941] scsi_execute_cmd+0x1eb/0xf40 [ 655.655357][ T5941] read_capacity_10+0x1d4/0x6d0 [ 655.660708][ T5941] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 655.667012][ T5941] sd_probe+0x904/0x1000 [ 655.671758][ T5941] really_probe+0x23e/0xa90 [ 655.676756][ T5941] __driver_probe_device+0x1de/0x440 [ 655.682535][ T5941] driver_probe_device+0x4c/0x1b0 [ 655.688071][ T5941] __device_attach_driver+0x1df/0x310 [ 655.693945][ T5941] bus_for_each_drv+0x157/0x1e0 [ 655.699284][ T5941] __device_attach_async_helper+0x1d3/0x290 [ 655.705669][ T5941] async_run_entry_fn+0x9c/0x530 [ 655.711113][ T5941] process_one_work+0x9c5/0x1ba0 [ 655.716552][ T5941] worker_thread+0x6c8/0xf00 [ 655.721633][ T5941] kthread+0x2c1/0x3a0 [ 655.726205][ T5941] ret_from_fork+0x45/0x80 [ 655.731262][ T5941] ret_from_fork_asm+0x1a/0x30 [ 655.736520][ T5941] [ 655.736520][ T5941] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 655.744129][ T5941] __mutex_lock+0x19b/0xa60 [ 655.749289][ T5941] __nbd_set_size+0x2c0/0x730 [ 655.754467][ T5941] nbd_start_device+0x8fd/0xd70 [ 655.759812][ T5941] nbd_ioctl+0x21a/0xfd0 [ 655.764545][ T5941] blkdev_ioctl+0x276/0x6d0 [ 655.769547][ T5941] __x64_sys_ioctl+0x190/0x200 [ 655.774809][ T5941] do_syscall_64+0xcd/0x250 [ 655.779806][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.786206][ T5941] [ 655.786206][ T5941] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 655.794774][ T5941] blk_mq_submit_bio+0x1fb6/0x24c0 [ 655.800387][ T5941] __submit_bio+0x384/0x540 [ 655.805392][ T5941] submit_bio_noacct_nocheck+0x698/0xd70 [ 655.811525][ T5941] submit_bio_noacct+0x93a/0x1e20 [ 655.817038][ T5941] block_read_full_folio+0x812/0xa50 [ 655.822814][ T5941] filemap_read_folio+0xc6/0x2a0 [ 655.828242][ T5941] filemap_get_pages+0x155f/0x1be0 [ 655.834125][ T5941] filemap_read+0x3ca/0xd70 [ 655.839118][ T5941] blkdev_read_iter+0x187/0x480 [ 655.844474][ T5941] vfs_read+0x87f/0xbe0 [ 655.849119][ T5941] ksys_read+0x12b/0x250 [ 655.853852][ T5941] do_syscall_64+0xcd/0x250 [ 655.858851][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.865242][ T5941] [ 655.865242][ T5941] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 655.873724][ T5941] down_read+0x9a/0x330 [ 655.878380][ T5941] filemap_fault+0x2e0/0x2820 [ 655.883560][ T5941] __do_fault+0x10a/0x490 [ 655.888383][ T5941] do_pte_missing+0x1a8/0x3e70 [ 655.893651][ T5941] __handle_mm_fault+0x103c/0x2a40 [ 655.899254][ T5941] handle_mm_fault+0x3fa/0xaa0 [ 655.904508][ T5941] do_user_addr_fault+0x60d/0x13f0 [ 655.910109][ T5941] exc_page_fault+0x5c/0xc0 [ 655.915118][ T5941] asm_exc_page_fault+0x26/0x30 [ 655.920466][ T5941] [ 655.920466][ T5941] -> #2 (&vma->vm_lock->lock){++++}-{4:4}: [ 655.928419][ T5941] down_write+0x93/0x200 [ 655.933298][ T5941] vma_link+0x26d/0x4a0 [ 655.937955][ T5941] insert_vm_struct+0x197/0x3f0 [ 655.943304][ T5941] alloc_bprm+0x6e0/0xc90 [ 655.948123][ T5941] kernel_execve+0xb0/0x3b0 [ 655.953124][ T5941] kernel_init+0x14a/0x2b0 [ 655.958048][ T5941] ret_from_fork+0x45/0x80 [ 655.962961][ T5941] ret_from_fork_asm+0x1a/0x30 [ 655.968219][ T5941] [ 655.968219][ T5941] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 655.975740][ T5941] __might_fault+0x11b/0x190 [ 655.980825][ T5941] _copy_from_user+0x29/0xd0 [ 655.985905][ T5941] __blk_trace_setup+0xa8/0x180 [ 655.991261][ T5941] blk_trace_setup+0x47/0x70 [ 655.996344][ T5941] sg_ioctl+0x65e/0x2750 [ 656.001082][ T5941] __x64_sys_ioctl+0x190/0x200 [ 656.006341][ T5941] do_syscall_64+0xcd/0x250 [ 656.011340][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.017734][ T5941] [ 656.017734][ T5941] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 656.025601][ T5941] __lock_acquire+0x249e/0x3c40 [ 656.030969][ T5941] lock_acquire.part.0+0x11b/0x380 [ 656.036627][ T5941] __mutex_lock+0x19b/0xa60 [ 656.041637][ T5941] blk_mq_init_sched+0x42b/0x640 [ 656.047080][ T5941] elevator_init_mq+0x2cd/0x420 [ 656.052425][ T5941] add_disk_fwnode+0x113/0x1300 [ 656.057770][ T5941] sd_probe+0xa86/0x1000 [ 656.062598][ T5941] really_probe+0x23e/0xa90 [ 656.067598][ T5941] __driver_probe_device+0x1de/0x440 [ 656.073389][ T5941] driver_probe_device+0x4c/0x1b0 [ 656.078907][ T5941] __device_attach_driver+0x1df/0x310 [ 656.084771][ T5941] bus_for_each_drv+0x157/0x1e0 [ 656.090113][ T5941] __device_attach_async_helper+0x1d3/0x290 [ 656.096497][ T5941] async_run_entry_fn+0x9c/0x530 [ 656.101931][ T5941] process_one_work+0x9c5/0x1ba0 [ 656.107359][ T5941] worker_thread+0x6c8/0xf00 [ 656.112440][ T5941] kthread+0x2c1/0x3a0 [ 656.117001][ T5941] ret_from_fork+0x45/0x80 [ 656.121907][ T5941] ret_from_fork_asm+0x1a/0x30 [ 656.127164][ T5941] [ 656.127164][ T5941] other info that might help us debug this: [ 656.127164][ T5941] [ 656.137359][ T5941] Chain exists of: [ 656.137359][ T5941] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#54 [ 656.137359][ T5941] [ 656.151750][ T5941] Possible unsafe locking scenario: [ 656.151750][ T5941] [ 656.159168][ T5941] CPU0 CPU1 [ 656.164502][ T5941] ---- ---- [ 656.169836][ T5941] lock(&q->q_usage_counter(queue)#54); [ 656.175442][ T5941] lock(&q->limits_lock); [ 656.182346][ T5941] lock(&q->q_usage_counter(queue)#54); [ 656.190470][ T5941] lock(&q->debugfs_mutex); [ 656.195028][ T5941] [ 656.195028][ T5941] *** DEADLOCK *** [ 656.195028][ T5941] [ 656.203139][ T5941] 4 locks held by kworker/u8:9/5941: [ 656.208388][ T5941] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 656.218716][ T5941] #1: ffffc90003bafd80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 656.229896][ T5941] #2: ffff88807bd7a378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 656.240210][ T5941] #3: ffff888028d1b1c8 (&q->q_usage_counter(queue)#54){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 656.251135][ T5941] [ 656.251135][ T5941] stack backtrace: [ 656.256989][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: kworker/u8:9 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 656.267456][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 656.277485][ T5941] Workqueue: async async_run_entry_fn [ 656.282835][ T5941] Call Trace: [ 656.286087][ T5941] [ 656.288989][ T5941] dump_stack_lvl+0x116/0x1f0 [ 656.293642][ T5941] print_circular_bug+0x419/0x5d0 [ 656.298638][ T5941] check_noncircular+0x31a/0x400 [ 656.303555][ T5941] ? __pfx_check_noncircular+0x10/0x10 [ 656.308985][ T5941] ? lockdep_lock+0xc6/0x200 [ 656.313560][ T5941] ? __pfx_lockdep_lock+0x10/0x10 [ 656.318561][ T5941] __lock_acquire+0x249e/0x3c40 [ 656.323385][ T5941] ? __pfx___lock_acquire+0x10/0x10 [ 656.328554][ T5941] lock_acquire.part.0+0x11b/0x380 [ 656.333636][ T5941] ? blk_mq_init_sched+0x42b/0x640 [ 656.338722][ T5941] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 656.344334][ T5941] ? rcu_is_watching+0x12/0xc0 [ 656.349070][ T5941] ? trace_lock_acquire+0x14e/0x1f0 [ 656.354242][ T5941] ? blk_mq_init_sched+0x42b/0x640 [ 656.359340][ T5941] ? lock_acquire+0x2f/0xb0 [ 656.363816][ T5941] ? blk_mq_init_sched+0x42b/0x640 [ 656.368902][ T5941] __mutex_lock+0x19b/0xa60 [ 656.373380][ T5941] ? blk_mq_init_sched+0x42b/0x640 [ 656.378466][ T5941] ? blk_mq_init_sched+0x42b/0x640 [ 656.383552][ T5941] ? __pfx___mutex_lock+0x10/0x10 [ 656.388551][ T5941] ? blk_queue_flag_set+0x29/0x40 [ 656.393551][ T5941] ? blk_mq_init_sched+0x42b/0x640 [ 656.398635][ T5941] blk_mq_init_sched+0x42b/0x640 [ 656.403549][ T5941] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 656.408980][ T5941] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 656.414931][ T5941] ? lock_acquire+0x2f/0xb0 [ 656.419404][ T5941] ? add_disk_fwnode+0x113/0x1300 [ 656.424401][ T5941] elevator_init_mq+0x2cd/0x420 [ 656.429227][ T5941] ? add_disk_fwnode+0x113/0x1300 [ 656.434231][ T5941] add_disk_fwnode+0x113/0x1300 [ 656.439055][ T5941] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.444225][ T5941] sd_probe+0xa86/0x1000 [ 656.448438][ T5941] ? __pfx_sd_probe+0x10/0x10 [ 656.453085][ T5941] really_probe+0x23e/0xa90 [ 656.457561][ T5941] __driver_probe_device+0x1de/0x440 [ 656.462847][ T5941] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 656.468644][ T5941] driver_probe_device+0x4c/0x1b0 [ 656.473655][ T5941] __device_attach_driver+0x1df/0x310 [ 656.479004][ T5941] ? __pfx___device_attach_driver+0x10/0x10 [ 656.484870][ T5941] bus_for_each_drv+0x157/0x1e0 [ 656.489694][ T5941] ? __pfx_bus_for_each_drv+0x10/0x10 [ 656.495038][ T5941] ? lockdep_hardirqs_on+0x7c/0x110 [ 656.500213][ T5941] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 656.505993][ T5941] ? __pfx___device_attach_async_helper+0x10/0x10 [ 656.512391][ T5941] __device_attach_async_helper+0x1d3/0x290 [ 656.518254][ T5941] ? __pfx___device_attach_async_helper+0x10/0x10 [ 656.524637][ T5941] ? ktime_get+0x206/0x300 [ 656.529022][ T5941] ? read_tsc+0x9/0x20 [ 656.533068][ T5941] ? ktime_get+0x1ac/0x300 [ 656.537453][ T5941] async_run_entry_fn+0x9c/0x530 [ 656.542365][ T5941] process_one_work+0x9c5/0x1ba0 [ 656.547288][ T5941] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 656.552913][ T5941] ? __pfx_process_one_work+0x10/0x10 [ 656.558265][ T5941] ? rcu_is_watching+0x12/0xc0 [ 656.563020][ T5941] ? assign_work+0x1a0/0x250 [ 656.567595][ T5941] worker_thread+0x6c8/0xf00 [ 656.572281][ T5941] ? __kthread_parkme+0x148/0x220 [ 656.577298][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 656.582422][ T5941] kthread+0x2c1/0x3a0 [ 656.586484][ T5941] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.591675][ T5941] ? __pfx_kthread+0x10/0x10 [ 656.596251][ T5941] ret_from_fork+0x45/0x80 [ 656.600647][ T5941] ? __pfx_kthread+0x10/0x10 [ 656.605242][ T5941] ret_from_fork_asm+0x1a/0x30 [ 656.609993][ T5941] [ 656.613745][T13847] usb 9-1: Product: syz [ 656.617917][T13847] usb 9-1: Manufacturer: syz [ 656.622523][T13847] usb 9-1: SerialNumber: syz [ 656.843729][ T29] audit: type=1400 audit(1732956907.062:1489): avc: denied { unmount } for pid=13714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 656.886105][ T5941] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 657.226801][T14166] udevd[14166]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 658.116609][T13847] usb 9-1: 0:2 : does not exist [ 658.132587][T13847] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 658.149356][T13847] usb 9-1: USB disconnect, device number 4 [ 659.668479][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 659.668493][ T29] audit: type=1400 audit(1732956909.892:1491): avc: denied { sys_chroot } for pid=14664 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 659.697730][ T29] audit: type=1400 audit(1732956909.922:1492): avc: denied { setgid } for pid=14664 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 659.720248][ T29] audit: type=1400 audit(1732956909.922:1493): avc: denied { setrlimit } for pid=14664 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 660.113428][ T29] audit: type=1400 audit(1732956910.342:1494): avc: denied { read } for pid=5504 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1