last executing test programs: 13.61978085s ago: executing program 2 (id=134): lsm_set_self_attr(0x66, 0x0, 0x1020, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0xc8400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = dup3(r2, r1, 0x0) r4 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940), 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) pipe2$9p(0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641777f56c7556d0072577bc6fcfb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad548d62a3b45bb98872fb1900"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg2\x00'}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r8, 0x4) 12.575083503s ago: executing program 2 (id=137): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004001580"], 0x18}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 11.984651531s ago: executing program 0 (id=141): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40002) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) shutdown(r0, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000408002540378b5ec30900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a300000000020ad0004801c0001800a00010071756575650000000c0002800600014000170000140000001100010000000000000000000000000aeb7f39df4c43ad4028d9e2fa8dad2ad217b84758a3252d"], 0xd0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) sendmsg(r7, 0x0, 0x48000) 11.321524826s ago: executing program 2 (id=143): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8f}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x9}, "022ecaa5336609de6f"}}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fspick(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) iopl(0x3) 9.980886175s ago: executing program 0 (id=144): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400000000fedbdf250000ff"], 0x48}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0x2d, 0x3, 0xc}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009402"]) 8.976666298s ago: executing program 1 (id=147): lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1700000056000500000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4c602, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) syz_clone(0x10000000, &(0x7f0000000240)="b78084fe464e542c99e9c2e243baacfe2667e9c40e8413eecaff0e8d2597ec23e6d81da55b3ef655abc23ae05d83f0b9956b266e75be02d727b90a95380634278232be2934522c76ae70f0b53d2f7d96c083713207e131948e60beb1e27cf65232722b5e4888f9f8036fbb6b083e3f36fb1a8f1d8ff59523ac7a4bb3fdec5db902b3cbea179263dbf4323756d5c3ee4c3f041fbe51", 0x95, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="cdc3af15b38f596d9d14111ddd594dae2a48c8b1adc98c40837317758c49b6e3caf62debfee55e5f047a7026e972de65cde9a30f0bdaae8d071f4a0279f5832fa39f564ee20aff9814e85446b71072d11d958a921228d86796c7674a97d0bd9dc4a86f0a0ed7fd49582b9570341b26bb190bbcb13751e7928167fdb069c5c662b9198f4e0c61d3959529eb97cc254802d20db0b5279ecca03384debd377ae95deac26a7cd1ee598e41740b8c282b29da0294f0e0c5741434900ef08339215e58fb24ff043ff3bed3ebcc8cf2ef") r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xbe, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x5e22, 0x7fff, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x2, 0x40) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 8.88717108s ago: executing program 0 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x1fffffe, @mcast1}}, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x15) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') writev(r8, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) 7.528975682s ago: executing program 0 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1002, 0x2}, 0xfffffffffffffe87) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000003c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0xfe58, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "8200"}]}}, 0x0}, 0x0) syz_usb_connect$uac1(0x6, 0x112, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x9, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x6, 0xa0, "84561f2bdf3b"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x5, 0x5, 0x2, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xc}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x2, 0x82, "a277", "98"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xb3, 0x3, 0x43, 0x9, "1e"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x4a, "", "c7"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x0, "88866342"}]}, {{0x9, 0x5, 0x1, 0x9, 0xb7fa2800c0a28b71, 0x9, 0x8, 0x35, {0x7, 0x25, 0x1, 0x2, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xc54f, 0x2, 0x71, "14ee"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x5e, 'D\t', "4b0cdf"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x9, 0x7, "60ace9"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x9, 0xf9, "3f316d279e87d0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd, 0x7, "b3765be450324b7583"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xff, 0x3, 0x7, 0xb, "16c2641d5721ebb629"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfd, 0x0, 0x90, {0x7, 0x25, 0x1, 0x83, 0xa, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xe4, 0x5, 0x0, 0x88, 0x9}, 0x1f, &(0x7f0000000240)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "ffb8b68ee22ba9730c553d1bbbebd030"}]}, 0x1, [{0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "01a5122190e0360488cb77994690fc7d9970e8b1ec4e806a1bc67c15f93bb7039f30b08fa92103638a2daa9213f24acf4872831f6c2db02e5c667155261a21bc367e6d54da354cceb09fbc88a4bef975bc69fb045477f6200a8f69da93e07d8779a7f39d85c1726180b245a32073fdd2ae7d0aed9f4c7161c0ec5878ec6a66c1174e3dfd53dbaac8d6fdacc4148b3273ff58215d23d80581e8854e938ab7336cff80e375dc74c592b09e7ed33e0ec29d2b9133451e221ac718043d7a78a5c0a12f1aab63e6a37247778642d6fc9169b2a14c4b2933f660d310b185f8bb7b47b9b5bf19b26e5db025c694c4f71dea1c080930d7"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1002, 0x2}, 0xfffffffffffffe87) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000003c0)) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0xfe58, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "8200"}]}}, 0x0}, 0x0) (async) syz_usb_connect$uac1(0x6, 0x112, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x9, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x6, 0xa0, "84561f2bdf3b"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x5, 0x5, 0x2, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xc}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x2, 0x82, "a277", "98"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xb3, 0x3, 0x43, 0x9, "1e"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x4a, "", "c7"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x0, "88866342"}]}, {{0x9, 0x5, 0x1, 0x9, 0xb7fa2800c0a28b71, 0x9, 0x8, 0x35, {0x7, 0x25, 0x1, 0x2, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xc54f, 0x2, 0x71, "14ee"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x5e, 'D\t', "4b0cdf"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x9, 0x7, "60ace9"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x9, 0xf9, "3f316d279e87d0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd, 0x7, "b3765be450324b7583"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xff, 0x3, 0x7, 0xb, "16c2641d5721ebb629"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfd, 0x0, 0x90, {0x7, 0x25, 0x1, 0x83, 0xa, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xe4, 0x5, 0x0, 0x88, 0x9}, 0x1f, &(0x7f0000000240)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "ffb8b68ee22ba9730c553d1bbbebd030"}]}, 0x1, [{0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "01a5122190e0360488cb77994690fc7d9970e8b1ec4e806a1bc67c15f93bb7039f30b08fa92103638a2daa9213f24acf4872831f6c2db02e5c667155261a21bc367e6d54da354cceb09fbc88a4bef975bc69fb045477f6200a8f69da93e07d8779a7f39d85c1726180b245a32073fdd2ae7d0aed9f4c7161c0ec5878ec6a66c1174e3dfd53dbaac8d6fdacc4148b3273ff58215d23d80581e8854e938ab7336cff80e375dc74c592b09e7ed33e0ec29d2b9133451e221ac718043d7a78a5c0a12f1aab63e6a37247778642d6fc9169b2a14c4b2933f660d310b185f8bb7b47b9b5bf19b26e5db025c694c4f71dea1c080930d7"}}]}) (async) 7.380506985s ago: executing program 4 (id=153): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x8000001, 0x7}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6, 0x0, 0x1ff, 0x40801, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x4, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000400)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000130005000000001000000000070000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100005800c0007800800010000000000"], 0x34}}, 0x0) r12 = openat$cgroup_int(r8, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) 7.030748272s ago: executing program 4 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="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", 0x13b}, {&(0x7f0000001800)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd74c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b000000000000000000093d81b0a1965db0bc89737e343f143eead9539909ea38d9b49acc20a10e5824271522006970cddbdda54f1b51702d7c2c2", 0x454}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000480)=0xffffffffffffff40, 0x4) prlimit64(0x0, 0xb, &(0x7f0000000300)={0x5, 0xe58}, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x20, r4}, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 6.681259996s ago: executing program 4 (id=155): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40002) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) shutdown(r0, 0x1) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000880)={{0x3, @bcast}, [@netrom, @rose, @remote, @default, @remote, @rose, @remote, @null]}, &(0x7f0000000040)=0xfffffffffffffee2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000408002540378b5ec30900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a300000000020ad0004801c0001800a00010071756575650000000c0002800600014000170000140000001100010000000000000000000000000aeb7f39df4c43ad4028d9e2fa8dad2ad217b84758a3252d"], 0xd0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) sendmsg(r7, 0x0, 0x48000) 6.640361928s ago: executing program 1 (id=156): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xa000, 0x10, 0x20}, 0x18) openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x4ca02, 0x10, 0x20}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000180)={0x18, r7, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x9}]}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r7, 0x0, &(0x7f0000000240)='LLLLLLL', 0x7, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r7, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2}) 5.621243139s ago: executing program 3 (id=157): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="140004006e69637666300000000000000000000000000000000000008b05fbacff874672edc7aa1ec63e38b0b36c33da1906c2dbfb03782a091436a82c07b9d87efa38b098f1d4bd3ea610518e244c7940ac6523b3003c206616a890071e60a69d8967791ac5f84a5c25e8d20908638bbf5c2e6f46caee6b595a4c636307b3d78bdbd85fc23d3dbffda3e5d76b70a7f8"], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$session_to_parent(0x12) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f00000000c0)={0x5, 0x0, 0x4, {0xc0020000, 0xe7fffffe, 0x3, 0x5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r11 = memfd_create(&(0x7f00000001c0)='y\x105\xa4q\x12\xc1\xd9\xc2\f\xad\x0f\r\x8a\xe9\xee\xea_\x8c\x1c\xa4\xcda\x9b\x11X\x0e\xa5\f\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\xb0(\x9a\x00\x00\x00', 0x3) ftruncate(r11, 0xffff) fcntl$addseals(r11, 0x409, 0x7) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000000)={r11, 0x0, 0x0, 0x1000}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)=""/167, 0xa7}], 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101, 0x1) mmap(&(0x7f000033e000/0x2000)=nil, 0x2000, 0xe, 0x1010, r8, 0x3248000) 5.268264049s ago: executing program 1 (id=158): lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1700000056000500000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4c602, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) syz_clone(0x10000000, &(0x7f0000000240)="b78084fe464e542c99e9c2e243baacfe2667e9c40e8413eecaff0e8d2597ec23e6d81da55b3ef655abc23ae05d83f0b9956b266e75be02d727b90a95380634278232be2934522c76ae70f0b53d2f7d96c083713207e131948e60beb1e27cf65232722b5e4888f9f8036fbb6b083e3f36fb1a8f1d8ff59523ac7a4bb3fdec5db902b3cbea179263dbf4323756d5c3ee4c3f041fbe51", 0x95, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="cdc3af15b38f596d9d14111ddd594dae2a48c8b1adc98c40837317758c49b6e3caf62debfee55e5f047a7026e972de65cde9a30f0bdaae8d071f4a0279f5832fa39f564ee20aff9814e85446b71072d11d958a921228d86796c7674a97d0bd9dc4a86f0a0ed7fd49582b9570341b26bb190bbcb13751e7928167fdb069c5c662b9198f4e0c61d3959529eb97cc254802d20db0b5279ecca03384debd377ae95deac26a7cd1ee598e41740b8c282b29da0294f0e0c5741434900ef08339215e58fb24ff043ff3bed3ebcc8cf2ef") r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xbe, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x5e22, 0x7fff, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x2, 0x40) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 4.650380958s ago: executing program 3 (id=159): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x48845) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES32, @ANYRESDEC, @ANYBLOB="7cfdca8aa9faadc2ba7d26c5eeedc7a223612e9efee17c3de89f9db900426efcaaec24a14c75063e1b7010efe20671ad6f3d3fd407d816c1302ec848c97bc8d2938f18fcc011a3796c83989e24cb35fa1b249bfc6d5f973a44769f963d96a86d57b513195e97b0c628e3baddb9fad31f5a62ed1cf1b3dfc71a7910afc933032c1a0b83064fbfb4da4ce9cf85bbb3686709e656385e7d2e4dec1acb9f83a454d92ee762bda38c9b721f49699e44c8bc1a71c26735ee5f19f7612ea5451f6a62a4c84fa9b481e1d9924667902a7366f3fdca35bee99f4fd075ddd9dc60e4e743e7128e6032b07c316dcbd7f7501e9effc40f344c20c47cee", @ANYBLOB="fb820bea5a261f80c581c74b2be69cd568faea7ac28cbc0640962ff50e9a", @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="270e001900000000000004070200f8b58c4f4b8e42c37d5d6782a13993046b606ec1a9183d8e4284b68618de5d95454e9f87410da99e02cfd929da4dd47930e4a2c9a9bc4cdf7b1bf97e8b948162797fa400b2a6006eab6fe4ab9dcf520aeda7620144ad6e8e2e3dd030"], 0x14}, 0x1, 0x40030000000000}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRES8=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0xfffffffffffffee9, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x0, {0x0, 0x39}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x4480, 0x0) ioctl$RNDGETENTCNT(r9, 0x80045200, &(0x7f00000002c0)) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r6) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4891) 4.629725254s ago: executing program 4 (id=160): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/if_inet6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="8500005ca86e"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="a200004ef3b125948ef66b0ee0b3d41b1b", @ANYRES8]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x80) 4.389178608s ago: executing program 0 (id=161): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xd) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x1aa02, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, &(0x7f0000000040)) r4 = timerfd_create(0x9, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000002000128008000100687372001400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r12, @ANYBLOB="08000600", @ANYRES32=r14], 0x24}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) ioctl$TCFLSH(r1, 0x8925, 0x20001116) 3.719671908s ago: executing program 3 (id=162): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x2}, 0xe) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$FICLONE(r0, 0x40049409, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x7, 0x1) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x5, 0x1, 0xffffffff, 0x2, r5}) r6 = inotify_init1(0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000002c0)) r7 = syz_io_uring_setup(0x7c87, &(0x7f0000000300)={0x0, 0x6f4f, 0x1, 0x3, 0x272}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000400)={0x8, r6, 0x0, {0x400, 0x4}, 0x40}, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x540) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x18, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x21, &(0x7f0000000700)=""/33, 0x41000, 0xa, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x8, 0x0, &(0x7f0000000800)=[{0x4, 0x4, 0xb, 0x8}, {0x5, 0x5, 0x2, 0x1}, {0x2, 0x3, 0x2, 0x1}, {0x1, 0x2, 0xa, 0xc}, {0x1, 0x4, 0xa, 0x8}, {0x1, 0x1, 0x2}, {0x3, 0x1, 0x4, 0x5}, {0x2, 0x3, 0x7, 0x1}], 0x10, 0xffff, @void, @value}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000940)={0x40, 0x8, 0x1, 0xc, 0x0, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0xb, [@enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0x5, 0x8}, {0xa, 0xb}, {0xf, 0x3}, {0x2}, {0xe}]}, @union={0x7, 0x7, 0x0, 0x5, 0x1, 0x9, [{0x8, 0x2, 0x1}, {0x0, 0x5, 0x71286a8}, {0xa, 0x3, 0x11e000}, {0x4, 0x3}, {0x7, 0x4, 0x9}, {0x0, 0x0, 0x1}, {0xf, 0x0, 0xa770}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x2}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5}, @fwd={0x8}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x2f, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x1a}, @struct={0xa, 0x2, 0x0, 0x4, 0x1, 0xfffffeff, [{0x5, 0x3, 0xf2}, {0x5, 0x2}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x59, 0x4}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x71, 0x5f, 0x30, 0x5f, 0x61]}}, &(0x7f0000000cc0)=""/4096, 0x143, 0x1000, 0x1, 0x62c4, 0x10000, @value=r7}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x11, 0x8667, 0x4, 0x7fffffff, 0xc, 0xffffffffffffffff, 0xfffff801, '\x00', r11, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f40)={0x11, 0x12, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff3e7a}, {}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @generic={0x6, 0x2, 0xd, 0x400, 0xe0000000}]}, &(0x7f0000000a80)='GPL\x00', 0x4, 0x7e, &(0x7f0000000ac0)=""/126, 0x41100, 0x30, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000001d00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x1, 0xd, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001e80)=[r4, r13, 0xffffffffffffffff], &(0x7f0000001ec0)=[{0x5, 0x4, 0xa, 0x9}, {0x4, 0x3, 0x5, 0x4}, {0x2, 0x2, 0x8, 0x2}, {0x0, 0x3, 0x5, 0xc}, {0x1, 0x4, 0xe, 0x8}], 0x10, 0xfffffe00, @void, @value}, 0x94) 3.486684757s ago: executing program 1 (id=163): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000040)}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f0000000140)=""/21, 0x15}], 0x4, &(0x7f0000000780)=""/11, 0xb}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001100)=""/245, 0xf5}, {&(0x7f00000007c0)=""/9, 0x9}, {&(0x7f0000001200)=""/188, 0xbc}, {&(0x7f00000012c0)=""/148, 0x94}, {&(0x7f0000001380)=""/162, 0xa2}], 0x5}, 0x8}, {{&(0x7f0000001440)=@tipc, 0x80, &(0x7f0000002540)=[{&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2, &(0x7f0000002580)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003580)=""/180, 0xb4}, {&(0x7f0000003640)=""/178, 0xb2}, {&(0x7f0000003700)=""/63, 0x3f}, {&(0x7f0000003740)=""/41, 0x29}, {&(0x7f0000003780)=""/17, 0x11}, {&(0x7f00000037c0)=""/141, 0x8d}], 0x6, &(0x7f0000003900)=""/231, 0xe7}, 0xe1b}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003a00)=""/90, 0x5a}], 0x1}, 0xf}, {{&(0x7f0000003ac0)=@nfc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003b40)=""/141, 0x8d}, {&(0x7f0000003c00)=""/27, 0x1b}, {&(0x7f0000003c40)=""/159, 0x9f}, {&(0x7f0000003d00)=""/17, 0x11}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/8, 0x8}], 0x6}, 0x4}], 0x6, 0x10000, &(0x7f0000004fc0)={0x77359400}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f00000006c0)={&(0x7f0000000680)=@can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "f2b4fb1ec29c25fa"}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000040000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000015000000000000000000000000000000000000000ad70040000000000000000000ffffffff01000000110000000000000086dd636169663000000000000000e0ff000076657468315f746f5f7465616d00000073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c2000000000000000025bd6383000000e8000000180100006970360000ab46e30ec754849d000000000000000000000000000000000000005000000000000000fe80000000000000000000000000000000000000000000000000ffffac1e0000000000000000000000000000000000000000000000000000000000000000000000113e000008f9e21fdefe000000000041554449540000000000000000000000000000000000000000080000000000001000"/424]}, 0x220) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0xe) io_setup(0x5, &(0x7f0000000000)) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xed}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000150069194c0f0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000380)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x0, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000f00)=""/80}, 0x1}], 0x2a, 0x40012020, 0x0) dup3(r0, r0, 0x0) 3.293614104s ago: executing program 3 (id=164): setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) 3.01936362s ago: executing program 3 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="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", 0x13b}, {&(0x7f0000001800)="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", 0x454}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000480)=0xffffffffffffff40, 0x4) prlimit64(0x0, 0xb, &(0x7f0000000300)={0x5, 0xe58}, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x20, r4}, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 2.577119241s ago: executing program 1 (id=166): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) 2.547481094s ago: executing program 3 (id=167): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xfff, 0x0, 0x0, 0x2, 0x11, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{@fixed}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) syz_open_dev$usbfs(0x0, 0x6, 0x208000) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="00086e0000006e0f252d0ae5f0c23ca7100b"], &(0x7f0000000dc0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "27baa8b489ee95df82b2ed0531202fcb567cf98cd433126745cda96194e6"}}, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) epoll_create(0x1000003) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x7, 0xc2, 0xd, 0x2, 0x3, 0x3e, 0xa, 0xaf, 0x38, 0x378, 0x3, 0x2, 0x20, 0x1, 0x10, 0x6, 0x1}, [{0x4, 0x1000, 0x6c8b, 0x3, 0x7, 0x8, 0x0, 0x351c}], "482378bff7d25dd8f4265f9ef1a1db6fde67eb8b372b218030bcaca723267285bd7c922bf903ebdee909bd24181816d9bdb2853c26e72511633545e9752784881fa6c187740a2b39049550e4fdf62902b2790c723c8b9b4e2af61eb0935b95a4895ec18fb8b795fda0140b52750b9b979c6c9756a4e4b3a086f719f6dfdafb8c741d", ['\x00']}, 0x1da) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000280)=0x400, 0x4) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) 2.381193062s ago: executing program 1 (id=168): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x32d40, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5035, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000300)={{0x4, 0x5, 0x8000, 0x1, 'syz1\x00', 0x8000}, 0x1, 0x200, 0x4, r1, 0x2, 0x137, 'syz1\x00', &(0x7f0000000180)=['\x00', '\'-[\\}*&-:\x00'], 0xb}) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf256800000008000300", @ANYRES32=r9, @ANYBLOB="1e00c7"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) accept4(r4, 0x0, 0x0, 0x0) 2.337324177s ago: executing program 2 (id=169): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x5, 0x4, 0x7fff}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x100, 0x400000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) socket(0x840000000002, 0x3, 0xff) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f039000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1.3550642s ago: executing program 4 (id=170): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x80800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) syz_open_dev$hidraw(&(0x7f0000000280), 0x8, 0x410000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='syscall\x00') pread64(r3, &(0x7f0000000180)=""/116, 0x74, 0x3) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x218}, 0x300048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 1.320043254s ago: executing program 2 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r3, 0x5429, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/reserved_size', 0x2206, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x4}], 0x2c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r5, &(0x7f00000007c0), 0x10, 0x0, 0x0) fsopen(&(0x7f0000000040)='befs\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000828000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x800, 0x4) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) connect$inet6(r6, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r5, 0x0) 256.937758ms ago: executing program 2 (id=172): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 35.827003ms ago: executing program 0 (id=173): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 0s ago: executing program 4 (id=174): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 51.154271][ T29] audit: type=1400 audit(1737198262.976:88): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.157672][ T5801] cgroup: Unknown subsys name 'net' [ 51.177197][ T29] audit: type=1400 audit(1737198262.976:89): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.207224][ T29] audit: type=1400 audit(1737198263.026:90): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.343996][ T5801] cgroup: Unknown subsys name 'cpuset' [ 51.351185][ T5801] cgroup: Unknown subsys name 'rlimit' [ 51.455902][ T29] audit: type=1400 audit(1737198263.276:91): avc: denied { setattr } for pid=5801 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.495386][ T29] audit: type=1400 audit(1737198263.276:92): avc: denied { create } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.516078][ T29] audit: type=1400 audit(1737198263.276:93): avc: denied { write } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.536725][ T29] audit: type=1400 audit(1737198263.276:94): avc: denied { read } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.557393][ T29] audit: type=1400 audit(1737198263.276:95): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.558494][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 51.582475][ T29] audit: type=1400 audit(1737198263.276:96): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.614281][ T29] audit: type=1400 audit(1737198263.306:97): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.454771][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.857320][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.864968][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.872941][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.880866][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.889662][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.891969][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.897683][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.912784][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.915354][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.920089][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.928485][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.942789][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.950976][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.955483][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.958593][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.965994][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.972076][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.981253][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.986645][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.001293][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.002243][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.008524][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.016115][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.030713][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.038225][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.046079][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.052952][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.053899][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.068187][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.069485][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.254317][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 56.254332][ T29] audit: type=1400 audit(1737198268.076:110): avc: denied { module_request } for pid=5822 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.284844][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 56.441293][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.451568][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.459154][ T5822] bridge_slave_0: entered allmulticast mode [ 56.466310][ T5822] bridge_slave_0: entered promiscuous mode [ 56.478445][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.485962][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.493092][ T5822] bridge_slave_1: entered allmulticast mode [ 56.499421][ T5822] bridge_slave_1: entered promiscuous mode [ 56.506354][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 56.528022][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.539833][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.553276][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 56.582518][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 56.610992][ T5822] team0: Port device team_slave_0 added [ 56.618549][ T5822] team0: Port device team_slave_1 added [ 56.704502][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.711450][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.738372][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.752282][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.759402][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.766674][ T5811] bridge_slave_0: entered allmulticast mode [ 56.773512][ T5811] bridge_slave_0: entered promiscuous mode [ 56.780024][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 56.794313][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.801287][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.827317][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.843251][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.850342][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.857530][ T5811] bridge_slave_1: entered allmulticast mode [ 56.864005][ T5811] bridge_slave_1: entered promiscuous mode [ 56.902326][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.909435][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.916670][ T5812] bridge_slave_0: entered allmulticast mode [ 56.923307][ T5812] bridge_slave_0: entered promiscuous mode [ 56.935937][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.943252][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.950358][ T5815] bridge_slave_0: entered allmulticast mode [ 56.956947][ T5815] bridge_slave_0: entered promiscuous mode [ 56.964193][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.971242][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.978460][ T5815] bridge_slave_1: entered allmulticast mode [ 56.984861][ T5815] bridge_slave_1: entered promiscuous mode [ 57.009505][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.016710][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.023887][ T5812] bridge_slave_1: entered allmulticast mode [ 57.030266][ T5812] bridge_slave_1: entered promiscuous mode [ 57.043592][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.054813][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.086288][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.108198][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.123836][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.139431][ T5822] hsr_slave_0: entered promiscuous mode [ 57.145949][ T5822] hsr_slave_1: entered promiscuous mode [ 57.161042][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.180597][ T5811] team0: Port device team_slave_0 added [ 57.188195][ T5811] team0: Port device team_slave_1 added [ 57.229461][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.236757][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.243970][ T5814] bridge_slave_0: entered allmulticast mode [ 57.250369][ T5814] bridge_slave_0: entered promiscuous mode [ 57.258898][ T5812] team0: Port device team_slave_0 added [ 57.274302][ T5815] team0: Port device team_slave_0 added [ 57.285031][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.292282][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.299388][ T5814] bridge_slave_1: entered allmulticast mode [ 57.306273][ T5814] bridge_slave_1: entered promiscuous mode [ 57.314799][ T5812] team0: Port device team_slave_1 added [ 57.326328][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.333380][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.359457][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.372558][ T5815] team0: Port device team_slave_1 added [ 57.407930][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.414950][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.440994][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.469641][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.481432][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.501394][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.508544][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.534576][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.548259][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.555364][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.581613][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.593741][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.600698][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.626735][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.646334][ T5814] team0: Port device team_slave_0 added [ 57.654103][ T5814] team0: Port device team_slave_1 added [ 57.660142][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.667210][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.693703][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.720882][ T5811] hsr_slave_0: entered promiscuous mode [ 57.727162][ T5811] hsr_slave_1: entered promiscuous mode [ 57.733244][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.740997][ T5811] Cannot create hsr debugfs directory [ 57.768205][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.775210][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.801506][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.835688][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.842831][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.868848][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.892362][ T5812] hsr_slave_0: entered promiscuous mode [ 57.898389][ T5812] hsr_slave_1: entered promiscuous mode [ 57.904452][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.912289][ T5812] Cannot create hsr debugfs directory [ 57.941930][ T5815] hsr_slave_0: entered promiscuous mode [ 57.948095][ T5815] hsr_slave_1: entered promiscuous mode [ 57.954244][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.962077][ T5815] Cannot create hsr debugfs directory [ 57.999070][ T5814] hsr_slave_0: entered promiscuous mode [ 58.005171][ T5814] hsr_slave_1: entered promiscuous mode [ 58.011217][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.018892][ T5814] Cannot create hsr debugfs directory [ 58.051546][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.062315][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.093977][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.102559][ T5828] Bluetooth: hci1: command tx timeout [ 58.102562][ T5832] Bluetooth: hci0: command tx timeout [ 58.102826][ T5828] Bluetooth: hci3: command tx timeout [ 58.108399][ T5832] Bluetooth: hci2: command tx timeout [ 58.120050][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.181969][ T5832] Bluetooth: hci4: command tx timeout [ 58.275157][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.285174][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.306825][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.321894][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.360468][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.377247][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.385805][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.395862][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.456772][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.464459][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.486325][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.496419][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.507254][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.549194][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.570664][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.597074][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.607095][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.614324][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.627152][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.644704][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.654166][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.672997][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.680091][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.699415][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.708228][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.726127][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.758303][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.767043][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.774129][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.794121][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.801170][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.825379][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.835314][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.842412][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.871408][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.878504][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.887376][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.894468][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.908700][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.959401][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.966556][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.985994][ T29] audit: type=1400 audit(1737198270.806:111): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.044989][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.090417][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.105709][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.149552][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.156669][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.180259][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.218810][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.225959][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.256980][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.291699][ T5822] veth0_vlan: entered promiscuous mode [ 59.342528][ T5822] veth1_vlan: entered promiscuous mode [ 59.355692][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.403107][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.435605][ T5811] veth0_vlan: entered promiscuous mode [ 59.464223][ T5822] veth0_macvtap: entered promiscuous mode [ 59.475103][ T5811] veth1_vlan: entered promiscuous mode [ 59.484366][ T5822] veth1_macvtap: entered promiscuous mode [ 59.537464][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.546250][ T5815] veth0_vlan: entered promiscuous mode [ 59.579511][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.592033][ T5811] veth0_macvtap: entered promiscuous mode [ 59.599850][ T5815] veth1_vlan: entered promiscuous mode [ 59.608377][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.618322][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.627936][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.636922][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.648645][ T5811] veth1_macvtap: entered promiscuous mode [ 59.683538][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.726532][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.737840][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.749375][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.762980][ T5815] veth0_macvtap: entered promiscuous mode [ 59.793929][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.808765][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.819655][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.829473][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.838622][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.848030][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.857003][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.868779][ T5814] veth0_vlan: entered promiscuous mode [ 59.881537][ T5815] veth1_macvtap: entered promiscuous mode [ 59.906721][ T5814] veth1_vlan: entered promiscuous mode [ 59.922238][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.930191][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.946125][ T5812] veth0_vlan: entered promiscuous mode [ 59.959498][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.973296][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.983508][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.994590][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.005605][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.024879][ T5812] veth1_vlan: entered promiscuous mode [ 60.041481][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.052166][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.062498][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.073274][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.084986][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.100237][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.109664][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.115342][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.119362][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.126788][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.142531][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.181804][ T5832] Bluetooth: hci3: command tx timeout [ 60.182403][ T5831] Bluetooth: hci0: command tx timeout [ 60.187240][ T5832] Bluetooth: hci1: command tx timeout [ 60.192920][ T5828] Bluetooth: hci2: command tx timeout [ 60.205911][ T5814] veth0_macvtap: entered promiscuous mode [ 60.214540][ T5814] veth1_macvtap: entered promiscuous mode [ 60.221807][ T29] audit: type=1400 audit(1737198272.036:112): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.DXPRQS/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.257057][ T29] audit: type=1400 audit(1737198272.066:113): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.275175][ T5812] veth0_macvtap: entered promiscuous mode [ 60.285180][ T5831] Bluetooth: hci4: command tx timeout [ 60.288398][ T29] audit: type=1400 audit(1737198272.066:114): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.DXPRQS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.316447][ T29] audit: type=1400 audit(1737198272.066:115): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.338795][ T29] audit: type=1400 audit(1737198272.076:116): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.DXPRQS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.366373][ T29] audit: type=1400 audit(1737198272.076:117): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.DXPRQS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.376109][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.394339][ T29] audit: type=1400 audit(1737198272.076:118): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.426041][ T29] audit: type=1400 audit(1737198272.076:119): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.428240][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.459346][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.470031][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.480169][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.490772][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.506303][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.507524][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.530278][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.541270][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.554863][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.565636][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.575708][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.587040][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.597924][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.612929][ T5812] veth1_macvtap: entered promiscuous mode [ 60.631151][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.668183][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.678115][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.689715][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.689729][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.689744][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.689754][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.689765][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.690651][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.696512][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.696544][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.696568][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.696591][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.711529][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.711550][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.841428][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.981363][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.992427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.002453][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.013335][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.023580][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.034157][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.044778][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.055331][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.066984][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.086159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 61.096808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.138258][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.139138][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.155563][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.167505][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.176502][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.184757][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.244465][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.259820][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.279195][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.281124][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 61.281136][ T29] audit: type=1400 audit(1737198273.096:131): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.NDgYqW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.328340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.337023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.355867][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.421558][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.471634][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.671166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.715324][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.725777][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.763362][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.796706][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.886624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.914763][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.923232][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.131738][ T29] audit: type=1400 audit(1737198273.946:132): avc: denied { create } for pid=5969 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.197266][ T29] audit: type=1400 audit(1737198273.946:133): avc: denied { map } for pid=5969 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.397614][ T29] audit: type=1400 audit(1737198273.946:134): avc: denied { read write } for pid=5969 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.406746][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 62.431997][ T5820] hid (null): unknown global tag 0xe [ 62.444572][ T5820] hid (null): unknown global tag 0xc [ 62.474187][ T5820] hid-generic 001B:0009:FFFFFFF7.0001: unknown main item tag 0x3 [ 62.486503][ T5820] hid-generic 001B:0009:FFFFFFF7.0001: unknown global tag 0xe [ 62.495192][ T5820] hid-generic 001B:0009:FFFFFFF7.0001: item 0 2 1 14 parsing failed [ 62.520747][ T5820] hid-generic 001B:0009:FFFFFFF7.0001: probe with driver hid-generic failed with error -22 [ 62.541936][ T5831] Bluetooth: hci0: command tx timeout [ 62.552594][ T5831] Bluetooth: hci1: command tx timeout [ 62.558529][ T5831] Bluetooth: hci2: command tx timeout [ 62.565049][ T5831] Bluetooth: hci3: command tx timeout [ 62.572084][ T5831] Bluetooth: hci4: command tx timeout [ 62.648892][ T29] audit: type=1400 audit(1737198274.126:135): avc: denied { create } for pid=5972 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.720214][ T29] audit: type=1400 audit(1737198274.146:136): avc: denied { read write } for pid=5972 comm="syz.0.7" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.762298][ T29] audit: type=1400 audit(1737198274.146:137): avc: denied { open } for pid=5972 comm="syz.0.7" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.762339][ T29] audit: type=1400 audit(1737198274.216:138): avc: denied { create } for pid=5972 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.762366][ T29] audit: type=1400 audit(1737198274.216:139): avc: denied { write } for pid=5972 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.762394][ T29] audit: type=1400 audit(1737198274.216:140): avc: denied { connect } for pid=5972 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.012867][ T5988] xt_NFQUEUE: number of total queues is 0 [ 63.222226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.230722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.311849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.600357][ T6010] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 63.625649][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'. [ 64.415889][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.470337][ T6022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6022 comm=syz.0.11 [ 64.662912][ T5828] Bluetooth: hci4: command tx timeout [ 64.668451][ T5828] Bluetooth: hci3: command tx timeout [ 64.675566][ T5828] Bluetooth: hci2: command tx timeout [ 64.680983][ T5828] Bluetooth: hci1: command tx timeout [ 64.686724][ T5828] Bluetooth: hci0: command tx timeout [ 66.054397][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.163296][ T6050] block nbd2: shutting down sockets [ 66.264952][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 66.727540][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 66.742801][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.751277][ T9] usb 1-1: Product: syz [ 66.761071][ T9] usb 1-1: Manufacturer: syz [ 66.769447][ T9] usb 1-1: SerialNumber: syz [ 66.927456][ T6059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6059 comm=syz.3.22 [ 67.033097][ T9] usb 1-1: config 0 descriptor?? [ 67.181782][ T5865] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 67.262343][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 67.262359][ T29] audit: type=1400 audit(1737198279.086:205): avc: denied { create } for pid=6063 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.298606][ T29] audit: type=1400 audit(1737198279.116:206): avc: denied { create } for pid=6063 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 67.420893][ T29] audit: type=1400 audit(1737198279.236:207): avc: denied { read } for pid=6065 comm="syz.1.27" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.444760][ T29] audit: type=1400 audit(1737198279.236:208): avc: denied { open } for pid=6065 comm="syz.1.27" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.606338][ T5865] usb 3-1: device descriptor read/64, error -71 [ 67.790424][ T6072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25'. [ 67.799430][ T29] audit: type=1400 audit(1737198279.236:209): avc: denied { write } for pid=6042 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.841702][ T9] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 67.855596][ T9] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 67.862835][ T9] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 68.044197][ T9] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 68.070657][ T9] usb 1-1: USB disconnect, device number 2 [ 68.076924][ T5865] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 68.211906][ T5865] usb 3-1: device descriptor read/64, error -71 [ 68.269556][ T29] audit: type=1400 audit(1737198280.086:210): avc: denied { append } for pid=6079 comm="syz.4.30" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.323615][ T5865] usb usb3-port1: attempt power cycle [ 68.371389][ T29] audit: type=1400 audit(1737198280.156:211): avc: denied { open } for pid=6082 comm="syz.3.32" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.394946][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.443807][ T6086] ip6t_rpfilter: unknown options [ 68.761908][ T5865] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 69.107102][ T29] audit: type=1400 audit(1737198280.156:212): avc: denied { ioctl } for pid=6082 comm="syz.3.32" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 69.238638][ T5865] usb 3-1: device descriptor read/8, error -71 [ 69.418613][ T29] audit: type=1400 audit(1737198280.186:213): avc: denied { connect } for pid=6079 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.537858][ T29] audit: type=1400 audit(1737198280.186:214): avc: denied { name_connect } for pid=6079 comm="syz.4.30" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 70.173697][ T6090] Zero length message leads to an empty skb [ 71.155716][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.163640][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.807500][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.967324][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.989216][ T5896] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.061101][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.449573][ T5896] usb 4-1: config 0 descriptor?? [ 72.470223][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 72.570613][ T6149] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 73.009898][ T6149] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 73.043338][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 73.043351][ T29] audit: type=1400 audit(1737198284.386:222): avc: denied { write } for pid=6142 comm="syz.4.42" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.074158][ T29] audit: type=1400 audit(1737198284.386:223): avc: denied { open } for pid=6142 comm="syz.4.42" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.103930][ T29] audit: type=1400 audit(1737198284.476:224): avc: denied { bind } for pid=6142 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.123010][ T29] audit: type=1400 audit(1737198284.476:225): avc: denied { accept } for pid=6142 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.142215][ T29] audit: type=1400 audit(1737198284.486:226): avc: denied { write } for pid=6142 comm="syz.4.42" path="socket:[9222]" dev="sockfs" ino=9222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.260649][ T29] audit: type=1400 audit(1737198285.076:227): avc: denied { setopt } for pid=6158 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.285786][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 73.298658][ T5896] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 73.311934][ T6157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.45'. [ 73.407238][ T5896] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input5 [ 73.486677][ T6163] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 73.495307][ T6163] netlink: 224 bytes leftover after parsing attributes in process `syz.2.47'. [ 73.498212][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.558874][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.659571][ T5896] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 73.682168][ T29] audit: type=1400 audit(1737198285.476:228): avc: denied { write } for pid=6158 comm="syz.4.46" name="fib_trie" dev="proc" ino=4026533197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.914406][ T29] audit: type=1400 audit(1737198285.476:229): avc: denied { read } for pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=2729 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.937178][ T29] audit: type=1400 audit(1737198285.476:230): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2729 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.960836][ T29] audit: type=1400 audit(1737198285.476:231): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2729 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.412789][ T9] usb 4-1: USB disconnect, device number 2 [ 75.146745][ T6177] .: renamed from bond0 (while UP) [ 75.241933][ T6183] ip6t_rpfilter: unknown options [ 76.548380][ T8] cfg80211: failed to load regulatory.db [ 77.120892][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.57'. [ 77.165507][ T6196] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.202109][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.209957][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.231997][ T5820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.244140][ T6201] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.295721][ T6196] bridge0: entered allmulticast mode [ 77.424599][ T5820] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.437395][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.447787][ T5820] usb 4-1: Product: syz [ 77.454699][ T5820] usb 4-1: Manufacturer: syz [ 77.459592][ T5820] usb 4-1: SerialNumber: syz [ 77.470516][ T6207] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 77.481815][ T6207] .: (slave netdevsim0): Enslaving as an active interface with an up link [ 77.549225][ T5820] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 77.575580][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.347693][ T6216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.366297][ T6216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.375209][ T6216] overlayfs: missing 'lowerdir' [ 78.935452][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 78.943064][ T8] ath9k_htc: Failed to initialize the device [ 78.985909][ T6215] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 79.063521][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 79.063542][ T29] audit: type=1400 audit(1737198290.866:236): avc: denied { write } for pid=6217 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.461458][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 79.783629][ T5820] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 79.851610][ T9] usb 4-1: USB disconnect, device number 3 [ 79.978221][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.004330][ T5820] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.050593][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.072092][ T29] audit: type=1400 audit(1737198291.886:237): avc: denied { bind } for pid=6239 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 80.101762][ T5820] usb 3-1: config 0 descriptor?? [ 80.110297][ T29] audit: type=1400 audit(1737198291.916:238): avc: denied { name_bind } for pid=6239 comm="syz.1.68" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 80.143425][ T29] audit: type=1400 audit(1737198291.916:239): avc: denied { node_bind } for pid=6239 comm="syz.1.68" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 80.165873][ T29] audit: type=1400 audit(1737198291.916:240): avc: denied { listen } for pid=6239 comm="syz.1.68" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.177205][ T29] audit: type=1400 audit(1737198292.356:241): avc: denied { accept } for pid=6239 comm="syz.1.68" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.198124][ T29] audit: type=1400 audit(1737198292.356:242): avc: denied { write } for pid=6239 comm="syz.1.68" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=39222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.520919][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.71'. [ 81.583226][ T5820] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 81.642022][ T29] audit: type=1400 audit(1737198293.456:243): avc: denied { read append } for pid=6249 comm="syz.0.70" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.933970][ T5820] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input7 [ 81.956457][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.001183][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.015427][ T29] audit: type=1400 audit(1737198293.456:244): avc: denied { open } for pid=6249 comm="syz.0.70" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.076554][ T29] audit: type=1400 audit(1737198293.896:245): avc: denied { read } for pid=6258 comm="syz.3.72" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.119156][ T5820] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 82.636449][ T25] usb 3-1: USB disconnect, device number 6 [ 84.063833][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 84.078433][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 85.149842][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 85.282115][ T25] libceph: connect (1)[c::]:6789 error -101 [ 85.293032][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 85.424124][ T6287] ceph: No mds server is up or the cluster is laggy [ 85.581754][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 85.581769][ T29] audit: type=1400 audit(1737198297.396:253): avc: denied { write } for pid=6297 comm="syz.2.84" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.628046][ T29] audit: type=1400 audit(1737198297.436:254): avc: denied { ioctl } for pid=6297 comm="syz.2.84" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.495601][ T6333] loop9: detected capacity change from 0 to 6 [ 88.511177][ T5831] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 88.521492][ T29] audit: type=1400 audit(1737198300.346:255): avc: denied { create } for pid=6332 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.311864][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.637911][ T29] audit: type=1400 audit(1737198301.456:256): avc: denied { create } for pid=6351 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.680259][ T29] audit: type=1400 audit(1737198301.456:257): avc: denied { connect } for pid=6351 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.721749][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 89.728591][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.740008][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.768394][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.793908][ T29] audit: type=1400 audit(1737198301.456:258): avc: denied { shutdown } for pid=6351 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.159644][ T6357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.96'. [ 90.704065][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.713199][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.723855][ T25] usb 1-1: config 0 descriptor?? [ 90.979621][ T6370] ip6t_rpfilter: unknown options [ 91.029061][ T6372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.155895][ T29] audit: type=1400 audit(1737198302.976:259): avc: denied { create } for pid=6367 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.472475][ T29] audit: type=1400 audit(1737198303.016:260): avc: denied { setopt } for pid=6367 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.514018][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 91.520117][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 91.545889][ T25] usb 1-1: USB disconnect, device number 3 [ 91.670175][ T6381] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 91.685296][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.693435][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.802911][ T6381] bridge0: entered allmulticast mode [ 91.836141][ T6382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.403493][ T6390] ip6t_rpfilter: unknown options [ 93.678098][ T6400] block nbd3: shutting down sockets [ 95.028341][ T29] audit: type=1400 audit(1737198305.966:261): avc: denied { execute } for pid=6406 comm="syz.0.108" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 95.291497][ T6423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.112'. [ 95.921761][ T6439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.113'. [ 98.236202][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.799367][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.806672][ T6471] block nbd4: shutting down sockets [ 98.812082][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 98.821081][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.851485][ T8] usb 1-1: config 0 descriptor?? [ 99.880755][ T8] (null): keene_cmd_main failed (-71) [ 99.898896][ T8] video4linux radio48: keene_cmd_main failed (-71) [ 100.264316][ T8] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 100.298202][ T8] usb 1-1: USB disconnect, device number 4 [ 100.752124][ T6490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.126'. [ 101.252883][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.518378][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 101.592751][ T6498] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.631923][ T29] audit: type=1400 audit(1737198313.406:262): avc: denied { shutdown } for pid=6496 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.904708][ T5896] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 101.913070][ T5896] usb 2-1: config 0 has no interface number 0 [ 101.919341][ T5896] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 101.950618][ T5896] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 101.960236][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.969340][ T5896] usb 2-1: Product: syz [ 101.969369][ T5896] usb 2-1: Manufacturer: syz [ 101.989568][ T29] audit: type=1400 audit(1737198313.786:263): avc: denied { name_bind } for pid=6499 comm="syz.2.130" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 102.053567][ T5896] usb 2-1: SerialNumber: syz [ 102.055286][ T5896] usb 2-1: config 0 descriptor?? [ 102.055938][ T6482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.058284][ T5896] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 102.058327][ T5896] em28xx 2-1:0.132: Video interface 132 found: bulk [ 103.215919][ T5896] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 103.505967][ T6513] block nbd2: shutting down sockets [ 103.689997][ T5896] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 103.962754][ T5896] em28xx 2-1:0.132: board has no eeprom [ 104.062320][ T5896] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 104.074985][ T5896] em28xx 2-1:0.132: analog set to bulk mode. [ 104.264965][ T5968] em28xx 2-1:0.132: Registering V4L2 extension [ 104.418618][ T5968] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 104.429730][ T5968] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 104.440096][ T5896] usb 2-1: USB disconnect, device number 2 [ 104.447729][ T5896] em28xx 2-1:0.132: Disconnecting em28xx [ 104.464671][ T5968] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 104.585089][ T5968] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 104.601942][ T5968] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 104.609192][ T5968] em28xx 2-1:0.132: No AC97 audio processor [ 105.076827][ T5968] usb 2-1: Decoder not found [ 105.081595][ T5968] em28xx 2-1:0.132: failed to create media graph [ 105.088154][ T5968] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 105.227470][ T5968] em28xx 2-1:0.132: Remote control support is not available for this card. [ 105.232072][ T29] audit: type=1400 audit(1737198317.056:264): avc: denied { ioctl } for pid=6551 comm="syz.1.142" path="socket:[10320]" dev="sockfs" ino=10320 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.241856][ T5831] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 105.260916][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.771877][ T6553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.141'. [ 106.052060][ T5896] em28xx 2-1:0.132: Closing input extension [ 106.292180][ T5896] em28xx 2-1:0.132: Freeing device [ 107.654799][ T6578] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 108.567808][ T6584] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 109.161448][ T5968] IPVS: starting estimator thread 0... [ 109.766797][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.798999][ T5820] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.801796][ T6592] IPVS: using max 56 ests per chain, 134400 per kthread [ 110.571924][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 110.878567][ T5820] usb 4-1: device descriptor read/all, error -71 [ 110.910444][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.813063][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.822929][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 111.834443][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.950023][ T9] usb 1-1: config 0 descriptor?? [ 112.090049][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 112.096171][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.111287][ T9] usb 1-1: USB disconnect, device number 5 [ 112.224656][ T6622] fuse: Bad value for 'fd' [ 112.250379][ T29] audit: type=1400 audit(1737198324.036:265): avc: denied { read write } for pid=6615 comm="syz.3.159" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.431880][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.770598][ T29] audit: type=1400 audit(1737198324.046:266): avc: denied { open } for pid=6615 comm="syz.3.159" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.982269][ T5865] usb 5-1: device descriptor read/64, error -71 [ 113.029943][ T29] audit: type=1400 audit(1737198324.046:267): avc: denied { mounton } for pid=6615 comm="syz.3.159" path="/35/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.087024][ T29] audit: type=1400 audit(1737198324.906:268): avc: denied { append } for pid=6626 comm="syz.3.162" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.111859][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.264892][ T5865] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.291825][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 113.300765][ T8] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.338734][ T8] usb 1-1: config 0 has no interface number 0 [ 113.353034][ T8] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 113.381855][ T8] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.416437][ T8] usb 1-1: config 0 interface 41 has no altsetting 0 [ 113.452906][ T5865] usb 5-1: device descriptor read/64, error -71 [ 113.482407][ T8] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 113.491736][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.501789][ T8] usb 1-1: Product: syz [ 113.511927][ T8] usb 1-1: Manufacturer: syz [ 113.518682][ T8] usb 1-1: SerialNumber: syz [ 113.572286][ T5865] usb usb5-port1: attempt power cycle [ 113.589165][ T8] usb 1-1: config 0 descriptor?? [ 113.597612][ T6625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.607804][ T6625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.966220][ T6625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.002400][ T6625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.012167][ T5865] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.043310][ T5865] usb 5-1: device descriptor read/8, error -71 [ 114.058647][ T29] audit: type=1400 audit(1737198325.856:269): avc: denied { connect } for pid=6640 comm="syz.1.166" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.233335][ T29] audit: type=1400 audit(1737198326.056:270): avc: denied { wake_alarm } for pid=6624 comm="syz.0.161" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.236219][ T6625] ip6t_srh: unknown srh invflags 7D00 [ 114.357469][ T51] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.457570][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.481174][ T8] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 114.491309][ T8] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 114.500789][ T5865] usb 5-1: device descriptor read/8, error -71 [ 114.512408][ T8] usb 1-1: USB disconnect, device number 6 [ 114.524791][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.536736][ T51] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.550656][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.613457][ T5865] usb usb5-port1: unable to enumerate USB device [ 115.142873][ T51] usb 4-1: config 0 descriptor?? [ 115.392392][ T6660] ip6t_rpfilter: unknown options [ 116.484688][ T51] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 116.535182][ T51] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input9 [ 116.731558][ T51] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 116.731897][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.787515][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.272317][ T5968] [ 117.272328][ T5968] ====================================================== [ 117.272333][ T5968] WARNING: possible circular locking dependency detected [ 117.272340][ T5968] 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 Not tainted [ 117.272350][ T5968] ------------------------------------------------------ [ 117.272355][ T5968] kworker/1:6/5968 is trying to acquire lock: [ 117.272364][ T5968] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 117.272416][ T5968] [ 117.272416][ T5968] but task is already holding lock: [ 117.272420][ T5968] ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 117.272461][ T5968] [ 117.272461][ T5968] which lock already depends on the new lock. [ 117.272461][ T5968] [ 117.272465][ T5968] [ 117.272465][ T5968] the existing dependency chain (in reverse order) is: [ 117.272471][ T5968] [ 117.272471][ T5968] -> #2 (console_lock){+.+.}-{0:0}: [ 117.272494][ T5968] console_lock+0x7a/0xa0 [ 117.272514][ T5968] con_flush_chars+0x5e/0x80 [ 117.272537][ T5968] n_tty_receive_buf_common+0xa99/0x1980 [ 117.272558][ T5968] tty_ldisc_receive_buf+0xa2/0x190 [ 117.272580][ T5968] tty_port_default_receive_buf+0x70/0xb0 [ 117.272596][ T5968] flush_to_ldisc+0x264/0x780 [ 117.272610][ T5968] process_one_work+0x9c5/0x1ba0 [ 117.272628][ T5968] worker_thread+0x6c8/0xf00 [ 117.272644][ T5968] kthread+0x2c1/0x3a0 [ 117.272664][ T5968] ret_from_fork+0x45/0x80 [ 117.272680][ T5968] ret_from_fork_asm+0x1a/0x30 [ 117.272705][ T5968] [ 117.272705][ T5968] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 117.272728][ T5968] down_write+0x93/0x200 [ 117.272752][ T5968] n_tty_flush_buffer+0x25/0x1b0 [ 117.272771][ T5968] tty_buffer_flush+0x236/0x310 [ 117.272786][ T5968] tty_ldisc_flush+0x64/0xe0 [ 117.272807][ T5968] tty_port_close_start+0x337/0x540 [ 117.272824][ T5968] tty_port_close+0x26/0x160 [ 117.272841][ T5968] uart_close+0x7b/0x220 [ 117.272862][ T5968] tty_release+0x3a8/0x1410 [ 117.272877][ T5968] __fput+0x3f8/0xb60 [ 117.272898][ T5968] task_work_run+0x14e/0x250 [ 117.272915][ T5968] syscall_exit_to_user_mode+0x27b/0x2a0 [ 117.272937][ T5968] do_syscall_64+0xda/0x250 [ 117.272959][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.272982][ T5968] [ 117.272982][ T5968] -> #0 (&buf->lock){+.+.}-{4:4}: [ 117.273007][ T5968] __lock_acquire+0x249e/0x3c40 [ 117.273025][ T5968] lock_acquire.part.0+0x11b/0x380 [ 117.273043][ T5968] __mutex_lock+0x19b/0xa60 [ 117.273063][ T5968] tty_buffer_flush+0x72/0x310 [ 117.273077][ T5968] tty_ldisc_flush+0x64/0xe0 [ 117.273100][ T5968] __do_SAK+0x6a1/0x800 [ 117.273116][ T5968] vc_SAK+0x7f/0x310 [ 117.273135][ T5968] process_one_work+0x9c5/0x1ba0 [ 117.273152][ T5968] worker_thread+0x6c8/0xf00 [ 117.273168][ T5968] kthread+0x2c1/0x3a0 [ 117.273188][ T5968] ret_from_fork+0x45/0x80 [ 117.273203][ T5968] ret_from_fork_asm+0x1a/0x30 [ 117.273222][ T5968] [ 117.273222][ T5968] other info that might help us debug this: [ 117.273222][ T5968] [ 117.273227][ T5968] Chain exists of: [ 117.273227][ T5968] &buf->lock --> &tty->termios_rwsem --> console_lock [ 117.273227][ T5968] [ 117.273255][ T5968] Possible unsafe locking scenario: [ 117.273255][ T5968] [ 117.273260][ T5968] CPU0 CPU1 [ 117.273264][ T5968] ---- ---- [ 117.273269][ T5968] lock(console_lock); [ 117.273280][ T5968] lock(&tty->termios_rwsem); [ 117.273298][ T5968] lock(console_lock); [ 117.273309][ T5968] lock(&buf->lock); [ 117.273320][ T5968] [ 117.273320][ T5968] *** DEADLOCK *** [ 117.273320][ T5968] [ 117.273324][ T5968] 4 locks held by kworker/1:6/5968: [ 117.273335][ T5968] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 117.273376][ T5968] #1: ffffc90003397d80 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 117.273418][ T5968] #2: ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 117.273459][ T5968] #3: ffff88805b4a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 117.273503][ T5968] [ 117.273503][ T5968] stack backtrace: [ 117.273509][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: kworker/1:6 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 117.273526][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 117.273536][ T5968] Workqueue: events vc_SAK [ 117.273554][ T5968] Call Trace: [ 117.273559][ T5968] [ 117.273565][ T5968] dump_stack_lvl+0x116/0x1f0 [ 117.273587][ T5968] print_circular_bug+0x419/0x5d0 [ 117.273604][ T5968] check_noncircular+0x31a/0x400 [ 117.273621][ T5968] ? __pfx_check_noncircular+0x10/0x10 [ 117.273641][ T5968] ? lockdep_lock+0xc6/0x200 [ 117.273665][ T5968] ? __pfx_lockdep_lock+0x10/0x10 [ 117.273689][ T5968] __lock_acquire+0x249e/0x3c40 [ 117.273710][ T5968] ? __pfx___lock_acquire+0x10/0x10 [ 117.273731][ T5968] lock_acquire.part.0+0x11b/0x380 [ 117.273750][ T5968] ? tty_buffer_flush+0x72/0x310 [ 117.273766][ T5968] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 117.273786][ T5968] ? rcu_is_watching+0x12/0xc0 [ 117.273810][ T5968] ? trace_lock_acquire+0x14e/0x1f0 [ 117.273833][ T5968] ? __pfx___lock_acquire+0x10/0x10 [ 117.273851][ T5968] ? tty_buffer_flush+0x72/0x310 [ 117.273867][ T5968] ? lock_acquire+0x2f/0xb0 [ 117.273884][ T5968] ? tty_buffer_flush+0x72/0x310 [ 117.273900][ T5968] __mutex_lock+0x19b/0xa60 [ 117.273923][ T5968] ? tty_buffer_flush+0x72/0x310 [ 117.273940][ T5968] ? tty_buffer_flush+0x72/0x310 [ 117.273955][ T5968] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 117.273973][ T5968] ? __pfx___mutex_lock+0x10/0x10 [ 117.273993][ T5968] ? trace_lock_acquire+0x14e/0x1f0 [ 117.274018][ T5968] ? lock_acquire.part.0+0x11b/0x380 [ 117.274036][ T5968] ? tty_ldisc_flush+0x1c/0xe0 [ 117.274060][ T5968] ? ldsem_down_read_trylock+0x11b/0x180 [ 117.274082][ T5968] ? tty_buffer_flush+0x72/0x310 [ 117.274097][ T5968] tty_buffer_flush+0x72/0x310 [ 117.274114][ T5968] tty_ldisc_flush+0x64/0xe0 [ 117.274135][ T5968] __do_SAK+0x6a1/0x800 [ 117.274149][ T5968] ? lock_acquire+0x2f/0xb0 [ 117.274164][ T5968] ? vc_SAK+0x13/0x310 [ 117.274183][ T5968] vc_SAK+0x7f/0x310 [ 117.274202][ T5968] process_one_work+0x9c5/0x1ba0 [ 117.274221][ T5968] ? __pfx_console_callback+0x10/0x10 [ 117.274235][ T5968] ? __pfx_process_one_work+0x10/0x10 [ 117.274251][ T5968] ? rcu_is_watching+0x12/0xc0 [ 117.274274][ T5968] ? assign_work+0x1a0/0x250 [ 117.274298][ T5968] worker_thread+0x6c8/0xf00 [ 117.274320][ T5968] ? __pfx_worker_thread+0x10/0x10 [ 117.274338][ T5968] kthread+0x2c1/0x3a0 [ 117.274358][ T5968] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.274378][ T5968] ? __pfx_kthread+0x10/0x10 [ 117.274400][ T5968] ret_from_fork+0x45/0x80 [ 117.274418][ T5968] ? __pfx_kthread+0x10/0x10 [ 117.274439][ T5968] ret_from_fork_asm+0x1a/0x30 [ 117.274468][ T5968] [ 117.275798][ T5968] tty tty1: SAK: killed process 6662 (syz.2.172): by fd#3 [ 117.275826][ T5968] tty tty1: SAK: killed process 6663 (syz.2.172): by fd#3 [ 117.275840][ T5968] tty tty1: SAK: killed process 6668 (syz.2.172): by fd#3 [ 118.303784][ T5865] usb 4-1: USB disconnect, device number 6