last executing test programs: 13.40507019s ago: executing program 0 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x4800, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 12.521901187s ago: executing program 0 (id=74): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3, 0xfffffffffffffff7, 0x43, 0x8a310, 0x8, 0x7, 0x401, 0x6}, &(0x7f00000002c0), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x2, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x1f00]}}], 0xffc8) 11.187948388s ago: executing program 0 (id=76): readlink(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) r3 = socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) timer_create(0xefffffff, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r5, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r5, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x80, 0x8, 0xffffffff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r2, 0xfaac4106a1b87a7, 0x0, 0x25dfdbfe, {0xb}}, 0x14}}, 0x8004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r7}, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) 6.64722455s ago: executing program 4 (id=90): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) kcmp(r0, r1, 0x4, r2, r3) (async, rerun: 32) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x67, 0x80, 0xf8, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x238, 0x9, 0x1, {0x22, 0x90c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xf1, 0x1}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x4, 0x6, 0x10, 0xec}, 0x2a, &(0x7f0000000180)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "71a9ba197fb977fe9a651f7b5f362eac"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0xc, 0xc3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4d, 0xff, 0x5}]}, 0x6, [{0xd8, &(0x7f00000001c0)=@string={0xd8, 0x3, "c91ca0a8e10f54265868b6442685d0bfe5365002479e52f21ef60d7a1442d38164c638ed51846727f92be71975b0c70610ef5ede26e85321a77ac8bebc016eeb33f5b2729f0c7ee7d65fb1e255258875d70e4ac1e999507d942bf2618608854b24390354114a397a8a2910835ded35daf12ca8199c04fd1fe7628eeb2092a685d81e9fe48302de75e6a32f58b71fb079a6e055b0f2e9f63aa1cd8dead1e0c3455ff5558361bc160cf9aa743da23eb0d456df6c71052732f1cc7f2060c55e25229914514652e4bef35a6aa04677a7c6ad70d6825e6a31"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1004}}]}) (rerun: 32) splice(r3, &(0x7f0000000480)=0x1, r2, &(0x7f00000004c0)=0xa77, 0x1, 0xa) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000500)=""/46) (async) r5 = msgget(0x0, 0x0) msgctl$IPC_RMID(r5, 0x0) (async) r6 = geteuid() quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, r6, &(0x7f0000000540)='./file0\x00') msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000580)) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x50, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x90, 0x94, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x4d, 0xfd}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x3, 0x8, 0x8, 0x10, 0xb0}, 0x19, &(0x7f0000000640)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "2d6b76cf1c8a22a7fe03a3d186deb210"}]}, 0x5, [{0x71, &(0x7f0000000680)=@string={0x71, 0x3, "4011f9604679464c4d370e06b0a7f0780f3b8ce60ba3cb3254aabc3b03ce03502c848b75d23e66a24251a79ed8922abee1aba5f2f5081758a4de6729cb922dc8352e868c56ad5b83b708d79439358892c238f4512da74bb20bbf465e75ff5354fc5ac8b81b43c5e6f6ec65db1806b9"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x410}}, {0xe3, &(0x7f0000000780)=@string={0xe3, 0x3, "aa8d4db585e128d1eb15068bf713054aa79e7d7dcfc0080ec103796c007aed4d42c6a394585efa3bc4da6a634ec34a81a945873ac662adbf92a5b56be7018ad95c6bcdbe4c4c544cfec8a2a203d0fe249306c809927ab18cfbcff4ffcd4c5e068ab965c8b28ac58e7fd76de77492f986959086193a1b6f97b4d0121f38f5f07d4f81cc209db723cd3096ce2cf0bf351258e8d7a7d01dfca4b77e78925d73e8b7f395d48f0b4d9a83dabac42f0228072c6029f8ca74c3cbd427f4adf602ebb63757c5d31742a50e934a6e2772e2bfcb43a22574ba06715517d0ba290e5945058854"}}, {0x12, &(0x7f0000000880)=@string={0x12, 0x3, "77306c9cbf12bf79a060b29689327ac4"}}]}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000980)={@local, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@delqdisc={0x2c, 0x25, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0xffef}, {0xffff, 0x1}, {0x6, 0x5}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) pipe2$9p(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000c00)=0xe8) write$P9_RSTATu(r10, &(0x7f0000000c40)={0x6e, 0x7d, 0x1, {{0x0, 0x49, 0x3, 0x6, {0x2, 0x1, 0x6}, 0x8000000, 0xcd, 0x1, 0x9, 0x0, '', 0x4, 'atm\x00', 0x10, '/dev/mISDNtimer\x00', 0x2, '^+'}, 0x10, '/dev/mISDNtimer\x00', r6, 0x0, r11}}, 0x6e) (async) r12 = accept(r2, 0x0, &(0x7f0000000cc0)) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x0, 0xd0, 0x1f0, 0x1f0, 0x2f0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f0000000d00), {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x4}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x43}, [0xffffffff, 0xff, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 'veth1\x00', 'gretap0\x00', {0xff}, {0xff}, 0x29, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x2}, {0xffffffffffffffff, 0x3, 0x1}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x8001], 0x8, 0x2d, 0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'macvlan0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x3c, 0x2, 0x3, 0xa}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x2], 0x6, 0x20, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], 'bond_slave_0\x00', 'team_slave_0\x00', {}, {0xff}, 0x87, 0x9d, 0x3, 0x41}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) (rerun: 32) ppoll(&(0x7f00000013c0)=[{r7}], 0x1, &(0x7f0000001440)={r13, r14+60000000}, &(0x7f0000001480)={[0x4]}, 0x8) (async) setsockopt$inet6_mtu(r12, 0x29, 0x17, &(0x7f00000014c0), 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001500)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000002500)={r15, 0x9}) (async) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000003500)=""/90) 6.560001437s ago: executing program 4 (id=91): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3b, &(0x7f0000000180)=0xfffffffe, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xf84c, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) setsockopt$inet6_tcp_int(r1, 0x11a, 0x1, &(0x7f0000000140)=0xc8, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, 0x0, 0x800) socket$nl_audit(0x10, 0x3, 0x9) 6.209656087s ago: executing program 3 (id=92): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb655690000000000000000000100000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 5.631927192s ago: executing program 4 (id=94): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180) getpid() openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(r0, &(0x7f0000000280)=""/100, 0x64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000020000"], 0x50) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)={0x14, 0x0, 0x30b, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x30) 5.240782981s ago: executing program 2 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000000), 0x4800) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000080000000000007b8ffcef5f4a2d84c8b8658af8ff00000000bfa2000000f8ffffffb703000008000000b704000000000000850000000100000095582061e3042f2c620000875d1032bbc2c750fe56fbc38271d1a9ee861048a50200090af112ac66df450000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000040), &(0x7f0000000180)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000d7001c80431fc03529bd147fe0fecb0000000000006608f7b212b7fc07000000000000180000000600000000000000000000009500000000000000360a0244ad0000000000180100002020782500001400002020207b1af8ff00000000bfa100000000000007010000f8ffffff000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r9 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 4.772693824s ago: executing program 3 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000000), 0x4800) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000080000000000007b8ffcef5f4a2d84c8b8658af8ff00000000bfa2000000f8ffffffb703000008000000b704000000000000850000000100000095582061e3042f2c620000875d1032bbc2c750fe56fbc38271d1a9ee861048a50200090af112ac66df450000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000040), &(0x7f0000000180)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000d7001c80431fc03529bd147fe0fecb0000000000006608f7b212b7fc07000000000000180000000600000000000000000000009500000000000000360a0244ad0000000000180100002020782500001400002020207b1af8ff00000000bfa100000000000007010000f8ffffff000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r8 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 4.170921236s ago: executing program 2 (id=98): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) (fail_nth: 2) 4.134024986s ago: executing program 3 (id=99): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x12f282) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x1, 0x0, &(0x7f0000000300), 0x80000000, 0x0) 4.044114454s ago: executing program 1 (id=100): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0x800, 0x6, 0x0}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, 0x0, 0xc8) 3.998943752s ago: executing program 1 (id=101): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000001000008000f0001000000", 0x24) 3.727424049s ago: executing program 2 (id=102): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000084102, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0x0, 0xd000}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0xffffffff, 0x2, 0x400053}) sendmsg$802154_dgram(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)="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", 0xc16}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, &(0x7f0000001440)=[{&(0x7f00000000c0)="fbfae5e5a186d0574a84b300fe91a0fb2ffd0807b82ea2112016276e5bbd884006aedb84cd0a2133626d07b1cf155a76e59404f80a8763d3070501cf0f68ec305beeb588a9ee9e40fde6502ebb9bbf308f5609637368732275afa05834831229f7501a7bf5f1c335f5a81ba319eab2a3af3e22ef9f26f70223ee30", 0x7b}, {&(0x7f0000000340)="96bf30432c91d26e9ded833b907802632630210673461f5e6524e3709cda2ce894549e8d2fac874b8f986ea671341f90114e92f7dc01f689ab52f9439c5e7403a531848ba974c735c39c7288a4269a50e6279459ba385a9b6f8f13b652cdd8b33a14818bc525eaa50a8b825ceda846ce93edecad948e6c675056f9467a3c32c4dfd6b5795643d98750", 0x89}, {&(0x7f0000000280)="3f5249a00c92b46c9f5da3192e2955fef41c79ea2d5097c05c67b58746d3cd8c7e51967576774f", 0x27}, {&(0x7f0000001080)="47f20d50dda2544ea7067307a4a4241f5a39c8676171b4867a25c9feb36ad8588650219e0098d9206e16e273d17115f1bc5d5615f66c0804b9e022660aa29c0e081c881914f504d1d9d362aa0e8868fb31b752d4f4318bb5885d86d85c5f09406c64aa87a1622c7fea59ee0b81e5e02b025a1974b6f1891e863804ba5925017797a59fee228452a504475f910b10652d4712a29e4a120f9ea93162a0721cf6dc6e70a8191b72602fc6fd4d53bf165737c6d098ed63f4d80aabd03b7cee4b75d85f17938c16d3d9434c899b9ca5086d81098a5243b6fe64568081a41fd6a128f0108b5f59", 0xe4}, {&(0x7f0000001500)="ff5cacc03f1b4b1d0c5f89508ddcc80773ab88127c24e806137b710e7abb41315447b8d0bc1f769240c90aa478", 0x2d}, {&(0x7f0000001540)="ab9651a209a6f3ee354e5dcbe40eed957cc412a0c4f9984f79de56a86b22b499d8b10e111270d979ce205e6f772b1eda64c142202915e6276a182a50eb861ca6d3e63449473e13805883958b59daf6019a1d758de1c711e7b32e0ba5a76ef191e71ba98a7d628a485394757c9e2456b6a5bfefa049bda19962fc0a74a0f7", 0x7e}, {&(0x7f0000001200)="95963e276c90b7ea0fd02eff04543e14c68d7acf9e273ff092e49faec94a0c5e2b55acea6392ed2e6e5a335c76962bf47b5effce04f23f24da091df7fc24efb002338807f9d45ed82d93810a640ab5dd4b86525dd85926b229aa7f15f025d327d1e28473c75043d35498d58378a7cf1863442f95e027e69c9407e90ef1b885fc91d6a9e97823dba5bd6ab405fea81a609dbe3a5fab7075285782fd37c8bd9e5b280c4e40de1dd0a4543198f6f2930c7ffd6917d113c2df5ea9d2cc402e5566323d04a97070d938b96fd4a0cb6f5d257a2d8ddb6b4eda593beeeb62", 0xdb}, {&(0x7f00000015c0)="4bfdecca8e7c7bbfe673414ca0696d044fa9a6404712fffdfd1c5bee777b0f00000000000000029ec4006d9fa782a913f174ef8a9a0f003ff261f8fffffffffffffffff8183058fcae184df1eedf1a2df593008e812cd4bd81f8af543a5f5fd1afa0ab6ce71d553df7f97dff0a958ea2c3ddd386862e0c4033efe33ef9af5176ad54275e654696f1060abcc62546a05b8461ceec434342b43ac59d96222b81d43d6ba9d67ae65d936bef0c494840bd7b581d3941b06362", 0xb7}, {&(0x7f00000013c0)="094b121364b0ec36e02d1594fef8abee47531cf83b75394d9d8a000000000000000de3995cc6718a7d9bd55b8291d9e0bca063e0ee7e35f7b729aaf5d9e666e19579019d3951078601a07d63e2e2da98803877300bda5f0b408d5fab6cd99b", 0x5f}], 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x10) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 3.675997291s ago: executing program 0 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c00000008002600"], 0x40}}, 0x0) 3.605051924s ago: executing program 0 (id=104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x189) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f0000000a80)) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f0000000480)="3e650cb668a0b25748381f7808c7f7869b4cf413b70e037cd0d27d50244dd929cfd354c462ed82a72e8029785c73ff10858232ffc0963634006980c2ca6f116683d17dbef184fa2843e8c08878e84f61d1b6996d7601525471e65104214595930be9d5cb21e418d07a2c2e1ef0cc321465fc3dfb9c323279300f3056a593d2f17990d1b54a1896877ebffc11ce5d7d01cb1734a641238513539e713bb19265f864d2c63cea71610eb4938c191040ffc7978d", &(0x7f0000000180)=@udp6, 0x1}, 0x20) mmap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) recvmmsg(r7, &(0x7f0000001400)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/136, 0x88}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x3}, {{&(0x7f0000000680)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000700)=""/7, 0x7}, {&(0x7f0000000740)=""/215, 0xd7}, {&(0x7f0000000840)=""/253, 0xfd}, {&(0x7f0000000a40)=""/17, 0x11}, {&(0x7f0000000a00)=""/31, 0x1f}], 0x5}, 0x31}, {{&(0x7f0000000ac0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b40)=""/235, 0xeb}, {&(0x7f0000000c40)=""/84, 0x54}, {&(0x7f0000000cc0)=""/116, 0x74}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000001500)=""/31, 0x1f}, {&(0x7f0000000dc0)=""/28, 0x1c}, {&(0x7f0000000e00)=""/51, 0x33}, {&(0x7f0000000e40)=""/178, 0xb2}, {&(0x7f0000000f00)=""/97, 0x61}], 0x9, &(0x7f0000001040)=""/137, 0x89}, 0x2f}, {{&(0x7f0000001100)=@xdp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000001180)=""/54, 0x36}, {&(0x7f00000011c0)=""/179, 0xb3}, {&(0x7f0000001280)=""/159, 0x9f}, {&(0x7f00000015c0)=""/98, 0x62}], 0x4, &(0x7f0000001380)=""/98, 0x62}}], 0x4, 0x40010160, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8b3e4746051fcee513d19d4e2a0a0abeed7b1c86c4bf16e4"}]]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c6d1e97d0471f5e4c509acb4d4a04008000", @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf253700000008000300", @ANYRES32=r10, @ANYBLOB="080057000100000008005700d52f0000080026008f09000008009f0006000000080027000200000008005700001000000800a00003000000080026006c090000"], 0x5c}, 0x1, 0x0, 0x0, 0x400800c}, 0x20004084) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r11 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002020}, 0x38, 0x0) 3.587463104s ago: executing program 1 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x26010a00) keyctl$session_to_parent(0x12) open(&(0x7f0000000000)='./file0\x00', 0x101, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet(0x2, 0x801, 0x0) pause() splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040), 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000f0ff0000040000000000"], 0x50) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x1}) 2.92443737s ago: executing program 3 (id=106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000380)="a292edb8d4c8a8edbd4db8bb7a9a4eb72de58fb1363285d7f184f7", 0x1b, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40080) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="200000000000000084000000"], 0x20}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r2, 0x301, 0xf000, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000) 2.922205328s ago: executing program 0 (id=107): syz_open_dev$ttys(0xc, 0x2, 0x0) timer_create(0x4, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) open(&(0x7f0000000100)='./file0\x00', 0x14f082, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x6, 0x4282) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) r6 = open(&(0x7f00000000c0)='\x00', 0x80821, 0x100) write$binfmt_elf32(r6, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x6, 0x5, 0x7, 0x6, 0x3, 0x3, 0x4, 0x241, 0x38, 0x189, 0x9, 0xa, 0x20, 0x3, 0x4, 0x46, 0x1}, [{0x60000000, 0xbb6, 0x3, 0x65a, 0xffff, 0x200, 0x0, 0x200}, {0x60000000, 0x8000, 0xffffffff, 0x0, 0x4, 0x8000, 0xffffffff, 0x1000}, {0x7474e557, 0x8, 0xc65fe7fc, 0x7fffffff, 0xa83, 0x3, 0x6, 0x2}], "9246d99c25cc51dea3b5c07f260e9fc4c210237f8b1943193d4e423c40d6c28f8aeff39e7dd9627a10c457cabb5f531fe89c668586d39694be316c9dc4d63dea1be7f894d6ee713f8ac61f433943ba3665c30a16e6012c2f4883df4bce55b492a694ced1688494dfad8bfe265ddbab1ba39dd47000290b6f3bca88a3fc0d6036e997a1fd9af77f3d3e930192f06ef6e5c4f013ff0f690db6d89c67", ['\x00', '\x00', '\x00']}, 0x433) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4044044}, 0x80) 2.831822352s ago: executing program 2 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000000), 0x4800) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000080000000000007b8ffcef5f4a2d84c8b8658af8ff00000000bfa2000000f8ffffffb703000008000000b704000000000000850000000100000095582061e3042f2c620000875d1032bbc2c750fe56fbc38271d1a9ee861048a50200090af112ac66df450000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000040), &(0x7f0000000180)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000d7001c80431fc03529bd147fe0fecb0000000000006608f7b212b7fc07000000000000180000000600000000000000000000009500000000000000360a0244ad0000000000180100002020782500001400002020207b1af8ff00000000bfa100000000000007010000f8ffffff000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r9 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 2.458989177s ago: executing program 1 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsopen(&(0x7f0000000400)='debugfs\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) vmsplice(r5, &(0x7f00000013c0)=[{&(0x7f0000000140)="a6", 0x1}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000060010880540007800800050000000000080005"], 0x1a0}}, 0x0) fsopen(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 1.826755697s ago: executing program 3 (id=110): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth0_virt_wifi\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x80000000) writev(r3, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="100000000614010428bd7000fbdbdf25e3b26e5dd666e11c6577f531defcfa88b690263bdbf3b13d05ed7a60084ba8fdbdf618086ef9902b8101fbc87f5539c0e07a12795bac25ed21d99860b394a1a25510e81ea4bea10f9648adf3e8ba02eef6fcd6f7819d0510d660221c14ecaf5f206363d979ea12ae81ebd9dc2b9eeeab1fd511bf0e24db0542c763e180fe3c8d14321124cf22b31d0180381a"], 0x10}, 0x1, 0x0, 0x0, 0xd1}, 0x4000) sendto$packet(r6, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140), 0x14) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5b}, 0x1, 0x0, 0x0, 0xa0}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) 1.728115985s ago: executing program 1 (id=111): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0x800, 0x6, 0x0}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, 0x0, 0xc8) 1.706381797s ago: executing program 2 (id=112): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0x9, 0xf}, {0x2, 0x9}, 0x10, [0x3ff, 0x5, 0x400000000000, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0x2c4, 0x5, 0x4, 0x40, 0xdaa, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) open(0x0, 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$sysctl(r7, 0x0, 0x0) open(0x0, 0xec902, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4919, 0x3}, {0x0, 0x0, 0x8, 0xfffffffffffffffe}, {0x0, 0x0, 0x40000}, 0xfffffffd}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) 1.590564333s ago: executing program 1 (id=113): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0x9, 0xf}, {0x2, 0x9}, 0x10, [0x3ff, 0x5, 0x400000000000, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0x2c4, 0x5, 0x4, 0x40, 0xdaa, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) open(0x0, 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$sysctl(r7, 0x0, 0x0) open(0x0, 0xec902, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4919, 0x3}, {0x0, 0x0, 0x8, 0xfffffffffffffffe}, {0x0, 0x0, 0x40000}, 0xfffffffd}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) 1.004023211s ago: executing program 4 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c00000008002600"], 0x40}}, 0x0) 630.693284ms ago: executing program 3 (id=115): socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x620000, 0x0) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{}, [@netrom, @default, @netrom, @null, @default, @netrom, @netrom, @netrom]}, &(0x7f0000000240)=0x48) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@null, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x67, 0x0, 0x0, 0x5}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}, 0x1, 0x100000000000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 520.875814ms ago: executing program 4 (id=116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000080)="b9ff030711a5268c019e14f088a847e0ffff00124000632177fbac141417e000030a94029f03", 0x0, 0x9, 0x60000000, 0x0, 0x1800, 0x0, 0x0}, 0x50) 371.94364ms ago: executing program 4 (id=117): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x4040000) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ec}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=118): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180) getpid() openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r1 = syz_io_uring_setup(0x629, &(0x7f0000000140)={0x0, 0x2117, 0x400, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(r0, &(0x7f0000000140)=""/30, 0x1e) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)={0x14, 0x0, 0x30b, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@ringbuf_query={{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r5, r5, 0x0, 0x30) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. [ 50.048852][ T29] audit: type=1400 audit(1734806560.321:88): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.053075][ T5802] cgroup: Unknown subsys name 'net' [ 50.071704][ T29] audit: type=1400 audit(1734806560.321:89): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.099067][ T29] audit: type=1400 audit(1734806560.351:90): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.244365][ T5802] cgroup: Unknown subsys name 'cpuset' [ 50.251892][ T5802] cgroup: Unknown subsys name 'rlimit' [ 50.367351][ T29] audit: type=1400 audit(1734806560.641:91): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.397982][ T29] audit: type=1400 audit(1734806560.641:92): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.430284][ T29] audit: type=1400 audit(1734806560.641:93): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.448173][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.450770][ T29] audit: type=1400 audit(1734806560.641:94): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.479827][ T29] audit: type=1400 audit(1734806560.641:95): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.504653][ T29] audit: type=1400 audit(1734806560.641:96): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 50.528695][ T29] audit: type=1400 audit(1734806560.671:97): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.412932][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.526589][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.528329][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.543910][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.551789][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.552417][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.559399][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.567047][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.581430][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.590272][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.597299][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.605489][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.610593][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.612954][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.628643][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.638255][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.641296][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.645967][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.653049][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.666848][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.674523][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.687098][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.692371][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.694778][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.701395][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.709187][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.715848][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.722475][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.729613][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.743342][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.743443][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.045063][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 54.114262][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 54.157216][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 54.178849][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 54.291730][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 54.314232][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.321456][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.328767][ T5823] bridge_slave_0: entered allmulticast mode [ 54.335880][ T5823] bridge_slave_0: entered promiscuous mode [ 54.346022][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.353867][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.361045][ T5813] bridge_slave_0: entered allmulticast mode [ 54.367489][ T5813] bridge_slave_0: entered promiscuous mode [ 54.378264][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.385500][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.393522][ T5813] bridge_slave_1: entered allmulticast mode [ 54.399940][ T5813] bridge_slave_1: entered promiscuous mode [ 54.425357][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.432543][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.439683][ T5823] bridge_slave_1: entered allmulticast mode [ 54.448675][ T5823] bridge_slave_1: entered promiscuous mode [ 54.500571][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.509810][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.517582][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.525191][ T5812] bridge_slave_0: entered allmulticast mode [ 54.532015][ T5812] bridge_slave_0: entered promiscuous mode [ 54.555226][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.571599][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.578631][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.586303][ T5812] bridge_slave_1: entered allmulticast mode [ 54.592815][ T5812] bridge_slave_1: entered promiscuous mode [ 54.600620][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.641655][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.657829][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.664982][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.673434][ T5821] bridge_slave_0: entered allmulticast mode [ 54.679864][ T5821] bridge_slave_0: entered promiscuous mode [ 54.686590][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.693916][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.701247][ T5819] bridge_slave_0: entered allmulticast mode [ 54.707762][ T5819] bridge_slave_0: entered promiscuous mode [ 54.715415][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.722576][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.729659][ T5819] bridge_slave_1: entered allmulticast mode [ 54.736317][ T5819] bridge_slave_1: entered promiscuous mode [ 54.745828][ T5813] team0: Port device team_slave_0 added [ 54.760289][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.771214][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.780448][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.787653][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.795067][ T5821] bridge_slave_1: entered allmulticast mode [ 54.801825][ T5821] bridge_slave_1: entered promiscuous mode [ 54.816862][ T5813] team0: Port device team_slave_1 added [ 54.863927][ T5823] team0: Port device team_slave_0 added [ 54.871683][ T5812] team0: Port device team_slave_0 added [ 54.885290][ T5812] team0: Port device team_slave_1 added [ 54.893149][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.904471][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.918859][ T5823] team0: Port device team_slave_1 added [ 54.926435][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.937884][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.965587][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.972880][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.999011][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.028708][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.036843][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.062921][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.076055][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.083123][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.109151][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.127652][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.134731][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.160698][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.176873][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.183918][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.215540][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.246220][ T5819] team0: Port device team_slave_0 added [ 55.253694][ T5819] team0: Port device team_slave_1 added [ 55.268659][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.275658][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.301942][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.315085][ T5821] team0: Port device team_slave_0 added [ 55.330045][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.337082][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.363542][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.380085][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.387272][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.413422][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.429400][ T5821] team0: Port device team_slave_1 added [ 55.461170][ T5823] hsr_slave_0: entered promiscuous mode [ 55.467252][ T5823] hsr_slave_1: entered promiscuous mode [ 55.511533][ T5812] hsr_slave_0: entered promiscuous mode [ 55.517896][ T5812] hsr_slave_1: entered promiscuous mode [ 55.524169][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.532407][ T5812] Cannot create hsr debugfs directory [ 55.538115][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.545181][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.571316][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.585363][ T5813] hsr_slave_0: entered promiscuous mode [ 55.591679][ T5813] hsr_slave_1: entered promiscuous mode [ 55.597763][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.605416][ T5813] Cannot create hsr debugfs directory [ 55.621117][ T5819] hsr_slave_0: entered promiscuous mode [ 55.627168][ T5819] hsr_slave_1: entered promiscuous mode [ 55.633590][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.641499][ T5819] Cannot create hsr debugfs directory [ 55.654832][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.661927][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.688088][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.696754][ T5827] Bluetooth: hci0: command tx timeout [ 55.751104][ T5827] Bluetooth: hci1: command tx timeout [ 55.820459][ T5821] hsr_slave_0: entered promiscuous mode [ 55.826613][ T5821] hsr_slave_1: entered promiscuous mode [ 55.832516][ T5830] Bluetooth: hci4: command tx timeout [ 55.832523][ T5831] Bluetooth: hci2: command tx timeout [ 55.837295][ T5827] Bluetooth: hci3: command tx timeout [ 55.839596][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.857352][ T5821] Cannot create hsr debugfs directory [ 56.033265][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.062968][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.074323][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.099473][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.129932][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.140646][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.164170][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.179895][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.212002][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.229015][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.246388][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.257271][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.318332][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.344905][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.354591][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.393663][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.442957][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.452802][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.466724][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.475258][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.490095][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.520124][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.545223][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.563210][ T3054] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.570424][ T3054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.594533][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.614452][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.623685][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.630758][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.659163][ T3054] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.666246][ T3054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.676228][ T3054] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.683328][ T3054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.720265][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.764174][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.783951][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.791048][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.813141][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.829569][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.836669][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.883387][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.890482][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.900300][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.907420][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.924530][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.932421][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.932434][ T29] audit: type=1400 audit(1734806567.211:111): avc: denied { sys_module } for pid=5813 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.009745][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.059562][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.066714][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.118753][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.125876][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.205314][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.284725][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.363417][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.385561][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.394781][ T5813] veth0_vlan: entered promiscuous mode [ 57.408208][ T5823] veth0_vlan: entered promiscuous mode [ 57.425864][ T5813] veth1_vlan: entered promiscuous mode [ 57.458801][ T5823] veth1_vlan: entered promiscuous mode [ 57.490701][ T5821] veth0_vlan: entered promiscuous mode [ 57.537117][ T5821] veth1_vlan: entered promiscuous mode [ 57.554019][ T5813] veth0_macvtap: entered promiscuous mode [ 57.575689][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.587200][ T5813] veth1_macvtap: entered promiscuous mode [ 57.618523][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.629752][ T5823] veth0_macvtap: entered promiscuous mode [ 57.640611][ T5823] veth1_macvtap: entered promiscuous mode [ 57.656705][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.670824][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.687291][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.696712][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.705968][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.728778][ T5821] veth0_macvtap: entered promiscuous mode [ 57.749654][ T5821] veth1_macvtap: entered promiscuous mode [ 57.755581][ T5827] Bluetooth: hci0: command tx timeout [ 57.780591][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.794649][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.806063][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.828038][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.844006][ T5827] Bluetooth: hci1: command tx timeout [ 57.849497][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.861484][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.903830][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.912930][ T5830] Bluetooth: hci2: command tx timeout [ 57.913495][ T5827] Bluetooth: hci3: command tx timeout [ 57.919086][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.924805][ T5830] Bluetooth: hci4: command tx timeout [ 57.937848][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.946723][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.960156][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.972159][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.982490][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.994153][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.004748][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.020530][ T5812] veth0_vlan: entered promiscuous mode [ 58.024609][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.031862][ T5812] veth1_vlan: entered promiscuous mode [ 58.050824][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.066850][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.077602][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.088227][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.099374][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.110478][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.120090][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.128848][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.137638][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.146360][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.184959][ T5819] veth0_vlan: entered promiscuous mode [ 58.200174][ T5812] veth0_macvtap: entered promiscuous mode [ 58.241391][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.246153][ T5812] veth1_macvtap: entered promiscuous mode [ 58.250165][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.273828][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.286669][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.308099][ T29] audit: type=1400 audit(1734806568.581:112): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.EgtNGU/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 58.333974][ T29] audit: type=1400 audit(1734806568.581:113): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.359838][ T29] audit: type=1400 audit(1734806568.581:114): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.EgtNGU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.401381][ T29] audit: type=1400 audit(1734806568.581:115): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.407362][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.429049][ T29] audit: type=1400 audit(1734806568.581:116): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.EgtNGU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.444758][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.478718][ T29] audit: type=1400 audit(1734806568.581:117): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.EgtNGU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.482716][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.516509][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.527900][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.528289][ T29] audit: type=1400 audit(1734806568.581:118): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.538118][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.563221][ T29] audit: type=1400 audit(1734806568.611:119): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.571647][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.598440][ T29] audit: type=1400 audit(1734806568.611:120): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=7665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.604115][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.635922][ T5819] veth1_vlan: entered promiscuous mode [ 58.648437][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.656375][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.668874][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.682238][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.694382][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.705083][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.715311][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.726200][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.746336][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.806617][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.817553][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.832037][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.841196][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.871741][ T5819] veth0_macvtap: entered promiscuous mode [ 58.882005][ T5819] veth1_macvtap: entered promiscuous mode [ 58.916346][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.965450][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.004292][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.015338][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.029302][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.038723][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.054172][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.106229][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.120475][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.132361][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.145049][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.167252][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.188262][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.211514][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.227880][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.246206][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.373230][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.388435][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.400258][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.413597][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.640993][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.711191][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.831097][ T5830] Bluetooth: hci0: command tx timeout [ 59.911848][ T5830] Bluetooth: hci1: command tx timeout [ 59.979536][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.991775][ T5830] Bluetooth: hci4: command tx timeout [ 59.997694][ T5827] Bluetooth: hci3: command tx timeout [ 59.997755][ T5831] Bluetooth: hci2: command tx timeout [ 60.015841][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.028534][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.055802][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.222270][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.230104][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.282669][ T5911] binder: 5910:5911 ioctl c0306201 20000bc0 returned -14 [ 60.339109][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.365233][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.557816][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.584048][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.780487][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.808702][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.830535][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11'. [ 60.904548][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.595339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.633510][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.669759][ T5934] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 61.853975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.862297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.870555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.878903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.045006][ T5831] Bluetooth: hci0: command tx timeout [ 62.050436][ T5831] Bluetooth: hci1: command tx timeout [ 62.056753][ T5934] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 62.071446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.077582][ T5827] Bluetooth: hci2: command tx timeout [ 62.085778][ T5827] Bluetooth: hci3: command tx timeout [ 62.091346][ T5827] Bluetooth: hci4: command tx timeout [ 62.099690][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 62.099705][ T29] audit: type=1400 audit(1734806572.131:185): avc: denied { map_create } for pid=5931 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.144036][ T29] audit: type=1400 audit(1734806572.131:186): avc: denied { mount } for pid=5931 comm="syz.0.13" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 62.189470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 62.259910][ T29] audit: type=1400 audit(1734806572.531:187): avc: denied { create } for pid=5938 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.281364][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.312327][ T5939] veth1_macvtap: left promiscuous mode [ 62.316351][ T29] audit: type=1400 audit(1734806572.531:188): avc: denied { ioctl } for pid=5938 comm="syz.3.16" path="socket:[8134]" dev="sockfs" ino=8134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.351578][ T29] audit: type=1400 audit(1734806572.621:189): avc: denied { write } for pid=5942 comm="syz.4.17" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.381219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.401570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.461982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.719808][ T5944] random: crng reseeded on system resumption [ 62.758611][ T29] audit: type=1400 audit(1734806572.991:190): avc: denied { write } for pid=5942 comm="syz.4.17" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.785181][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 62.880183][ T29] audit: type=1400 audit(1734806572.991:191): avc: denied { open } for pid=5942 comm="syz.4.17" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.909476][ T25] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 62.938631][ T25] usb 2-1: config 0 has no interface number 0 [ 62.979876][ T25] usb 2-1: config 0 interface 184 has no altsetting 0 [ 62.991036][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 63.000257][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.010547][ T25] usb 2-1: Product: syz [ 63.030025][ T25] usb 2-1: Manufacturer: syz [ 63.090660][ T25] usb 2-1: SerialNumber: syz [ 63.202908][ T25] usb 2-1: config 0 descriptor?? [ 63.260652][ T25] smsc75xx v1.0.0 [ 63.566555][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 63.585528][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 64.040526][ T29] audit: type=1400 audit(1734806573.871:192): avc: denied { create } for pid=5950 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.108443][ T29] audit: type=1400 audit(1734806573.881:193): avc: denied { ioctl } for pid=5950 comm="syz.3.19" path="socket:[8161]" dev="sockfs" ino=8161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.201594][ T29] audit: type=1400 audit(1734806574.421:194): avc: denied { sys_module } for pid=5950 comm="syz.3.19" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.159249][ T5965] loop8: detected capacity change from 0 to 7 [ 65.224850][ T5967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.580590][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 65.595594][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 65.605333][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 65.615810][ T25] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 65.651387][ T5965] Dev loop8: unable to read RDB block 7 [ 65.657549][ T5965] loop8: unable to read partition table [ 65.663365][ T5965] loop8: partition table beyond EOD, truncated [ 65.669793][ T5965] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 65.669793][ T5965] ) failed (rc=-5) [ 65.800623][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22'. [ 66.816962][ T25] usb 2-1: USB disconnect, device number 2 [ 67.982411][ T5998] FAULT_INJECTION: forcing a failure. [ 67.982411][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.996612][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.4.29 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 68.007136][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.017210][ T5998] Call Trace: [ 68.020497][ T5998] [ 68.023440][ T5998] dump_stack_lvl+0x16c/0x1f0 [ 68.028144][ T5998] should_fail_ex+0x497/0x5b0 [ 68.032840][ T5998] _copy_from_user+0x2e/0xd0 [ 68.037448][ T5998] kstrtouint_from_user+0xd7/0x1c0 [ 68.042570][ T5998] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 68.048308][ T5998] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 68.053950][ T5998] proc_fail_nth_write+0x84/0x250 [ 68.058985][ T5998] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.064626][ T5998] ? ksys_write+0x12b/0x250 [ 68.069140][ T5998] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.074781][ T5998] vfs_write+0x24c/0x1150 [ 68.079116][ T5998] ? __fget_files+0x1fc/0x3a0 [ 68.083799][ T5998] ? __pfx___mutex_lock+0x10/0x10 [ 68.088834][ T5998] ? __pfx_vfs_write+0x10/0x10 [ 68.093610][ T5998] ? __fget_files+0x206/0x3a0 [ 68.098307][ T5998] ksys_write+0x12b/0x250 [ 68.102645][ T5998] ? __pfx_ksys_write+0x10/0x10 [ 68.107508][ T5998] do_syscall_64+0xcd/0x250 [ 68.112023][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.117926][ T5998] RIP: 0033:0x7f62adf847df [ 68.122347][ T5998] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 68.141961][ T5998] RSP: 002b:00007f62abdf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.150373][ T5998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f62adf847df [ 68.158327][ T5998] RDX: 0000000000000001 RSI: 00007f62abdf60a0 RDI: 0000000000000007 [ 68.166283][ T5998] RBP: 00007f62abdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 68.174234][ T5998] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 68.182185][ T5998] R13: 0000000000000000 R14: 00007f62ae176160 R15: 00007ffcc6e612e8 [ 68.190151][ T5998] [ 68.604720][ T6002] random: crng reseeded on system resumption [ 69.151267][ T6008] block nbd2: not configured, cannot reconfigure [ 69.876488][ T5982] syz.3.25 (5982): drop_caches: 2 [ 69.899800][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 69.899816][ T29] audit: type=1400 audit(1734806580.171:205): avc: denied { map_read map_write } for pid=6013 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.050645][ T5979] syz.3.25 (5979): drop_caches: 2 [ 70.061834][ T29] audit: type=1400 audit(1734806580.211:206): avc: denied { setopt } for pid=6014 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.164690][ T29] audit: type=1400 audit(1734806580.241:207): avc: denied { read } for pid=6014 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.357991][ T29] audit: type=1400 audit(1734806580.631:208): avc: denied { call } for pid=6020 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.498543][ T29] audit: type=1400 audit(1734806581.771:209): avc: denied { execute } for pid=6030 comm="syz.0.40" path="/9/cgroup.controllers" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.636720][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.643504][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.692539][ T29] audit: type=1400 audit(1734806581.811:210): avc: denied { create } for pid=6019 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.651120][ T5866] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.706515][ T29] audit: type=1400 audit(1734806582.341:211): avc: denied { write } for pid=6040 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.745052][ T5898] IPVS: starting estimator thread 0... [ 72.811042][ T29] audit: type=1400 audit(1734806582.351:212): avc: denied { bind } for pid=6040 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.836402][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.45'. [ 72.853059][ T29] audit: type=1400 audit(1734806583.131:213): avc: denied { create } for pid=6045 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.876573][ T6044] IPVS: using max 25 ests per chain, 60000 per kthread [ 72.885681][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 72.898152][ T6050] input: syz0 as /devices/virtual/input/input5 [ 72.908172][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.927366][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.956914][ T5866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.966345][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.981016][ T29] audit: type=1400 audit(1734806583.141:214): avc: denied { read write } for pid=6049 comm="syz.0.44" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.022777][ T5866] usb 2-1: Product: syz [ 73.026974][ T5866] usb 2-1: Manufacturer: syz [ 73.036913][ T5866] usb 2-1: SerialNumber: syz [ 73.333758][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.712568][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 74.052909][ T5866] usb 2-1: 0:2 : does not exist [ 74.089378][ T25] usb 4-1: config 8 has an invalid interface number: 226 but max is 0 [ 74.097745][ T25] usb 4-1: config 8 has no interface number 0 [ 74.108522][ T25] usb 4-1: config 8 interface 226 altsetting 1 endpoint 0x7 has invalid maxpacket 38637, setting to 64 [ 74.121987][ T25] usb 4-1: config 8 interface 226 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 74.133085][ T25] usb 4-1: config 8 interface 226 has no altsetting 0 [ 74.196013][ T25] usb 4-1: New USB device found, idVendor=2304, idProduct=0207, bcdDevice=68.a7 [ 74.205292][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.213372][ T25] usb 4-1: Product: syz [ 74.217562][ T25] usb 4-1: Manufacturer: syz [ 74.222376][ T25] usb 4-1: SerialNumber: syz [ 74.479048][ T25] usb 4-1: USB disconnect, device number 2 [ 74.645909][ T6076] input: syz0 as /devices/virtual/input/input6 [ 74.715605][ T5868] usb 2-1: USB disconnect, device number 3 [ 75.354113][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 75.354129][ T29] audit: type=1400 audit(1734806585.631:224): avc: denied { write } for pid=6081 comm="syz.2.54" name="ip6_flowlabel" dev="proc" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.261060][ T29] audit: type=1400 audit(1734806586.491:225): avc: denied { read write } for pid=6086 comm="syz.0.56" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.356228][ T29] audit: type=1400 audit(1734806586.491:226): avc: denied { open } for pid=6086 comm="syz.0.56" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.444102][ T29] audit: type=1400 audit(1734806586.591:227): avc: denied { map } for pid=6086 comm="syz.0.56" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.496588][ T46] cfg80211: failed to load regulatory.db [ 76.516752][ T29] audit: type=1400 audit(1734806586.771:228): avc: denied { setopt } for pid=6098 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.590590][ T29] audit: type=1400 audit(1734806586.771:229): avc: denied { create } for pid=6098 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.672259][ T29] audit: type=1400 audit(1734806586.771:230): avc: denied { write } for pid=6098 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.704858][ T29] audit: type=1400 audit(1734806586.841:231): avc: denied { create } for pid=6102 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.731059][ T29] audit: type=1400 audit(1734806586.861:232): avc: denied { read } for pid=6102 comm="syz.1.60" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.787741][ T6103] mmap: syz.1.60 (6103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.828415][ T29] audit: type=1400 audit(1734806586.861:233): avc: denied { open } for pid=6102 comm="syz.1.60" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.950010][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 77.661574][ T6118] binder: 6116:6118 ioctl c004510e 20000000 returned -22 [ 78.573708][ T6129] 9pnet_fd: Insufficient options for proto=fd [ 79.858128][ T6143] netlink: 152 bytes leftover after parsing attributes in process `syz.4.73'. [ 80.375704][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 80.375720][ T29] audit: type=1400 audit(1734806590.641:239): avc: denied { create } for pid=6128 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.557712][ T29] audit: type=1400 audit(1734806590.821:240): avc: denied { create } for pid=6146 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.940487][ T6161] netlink: 52 bytes leftover after parsing attributes in process `syz.1.80'. [ 81.714365][ T29] audit: type=1400 audit(1734806590.821:241): avc: denied { setopt } for pid=6146 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.013556][ T29] audit: type=1400 audit(1734806591.031:242): avc: denied { read write } for pid=6156 comm="syz.1.80" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 82.036955][ T29] audit: type=1400 audit(1734806591.031:243): avc: denied { open } for pid=6156 comm="syz.1.80" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 82.412642][ T6168] warning: `syz.3.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.426919][ T29] audit: type=1400 audit(1734806592.671:244): avc: denied { create } for pid=6165 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.844896][ T29] audit: type=1400 audit(1734806592.681:245): avc: denied { create } for pid=6165 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.018120][ T29] audit: type=1400 audit(1734806592.691:246): avc: denied { ioctl } for pid=6165 comm="syz.3.82" path="socket:[9549]" dev="sockfs" ino=9549 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.162812][ T29] audit: type=1400 audit(1734806593.371:247): avc: denied { setopt } for pid=6169 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.193973][ T29] audit: type=1400 audit(1734806593.421:248): avc: denied { open } for pid=6175 comm="syz.1.81" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 86.494589][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.400229][ T6226] FAULT_INJECTION: forcing a failure. [ 87.400229][ T6226] name failslab, interval 1, probability 0, space 0, times 1 [ 87.417320][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.2.98 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 87.425621][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 87.425635][ T29] audit: type=1400 audit(1734806597.671:255): avc: denied { create } for pid=6225 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.427819][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.463262][ T6226] Call Trace: [ 87.466549][ T6226] [ 87.469484][ T6226] dump_stack_lvl+0x16c/0x1f0 [ 87.474180][ T6226] should_fail_ex+0x497/0x5b0 [ 87.478870][ T6226] ? fs_reclaim_acquire+0xae/0x150 [ 87.483994][ T6226] should_failslab+0xc2/0x120 [ 87.488682][ T6226] __kmalloc_noprof+0xcb/0x510 [ 87.493460][ T6226] ? rcu_is_watching+0x12/0xc0 [ 87.498239][ T6226] tomoyo_encode2+0x100/0x3e0 [ 87.502935][ T6226] tomoyo_encode+0x29/0x50 [ 87.507362][ T6226] tomoyo_realpath_from_path+0x19d/0x720 [ 87.513017][ T6226] ? tomoyo_path_number_perm+0x235/0x590 [ 87.518658][ T6226] tomoyo_path_number_perm+0x248/0x590 [ 87.524127][ T6226] ? tomoyo_path_number_perm+0x235/0x590 [ 87.529783][ T6226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.535816][ T6226] ? __pfx_lock_release+0x10/0x10 [ 87.540853][ T6226] ? trace_lock_acquire+0x14e/0x1f0 [ 87.546065][ T6226] ? lock_acquire+0x2f/0xb0 [ 87.550576][ T6226] ? __fget_files+0x40/0x3a0 [ 87.555180][ T6226] ? __fget_files+0x206/0x3a0 [ 87.559871][ T6226] security_file_ioctl+0x9b/0x240 [ 87.564907][ T6226] __x64_sys_ioctl+0xb7/0x200 [ 87.569600][ T6226] do_syscall_64+0xcd/0x250 [ 87.574122][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.580029][ T6226] RIP: 0033:0x7fde5ff85d29 [ 87.584454][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.604073][ T6226] RSP: 002b:00007fde60de2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.612489][ T6226] RAX: ffffffffffffffda RBX: 00007fde60175fa0 RCX: 00007fde5ff85d29 [ 87.620453][ T6226] RDX: 0000000020000240 RSI: 000000000000541b RDI: 0000000000000003 [ 87.628418][ T6226] RBP: 00007fde60de2090 R08: 0000000000000000 R09: 0000000000000000 [ 87.636387][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.644351][ T6226] R13: 0000000000000000 R14: 00007fde60175fa0 R15: 00007ffec5d27ed8 [ 87.652330][ T6226] [ 87.721361][ T6226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.794927][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 88.026316][ T29] audit: type=1400 audit(1734806598.301:256): avc: denied { read write } for pid=6235 comm="syz.2.102" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.079216][ T29] audit: type=1400 audit(1734806598.301:257): avc: denied { open } for pid=6235 comm="syz.2.102" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.293714][ T29] audit: type=1400 audit(1734806598.571:258): avc: denied { getopt } for pid=6238 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.418070][ T29] audit: type=1400 audit(1734806598.591:259): avc: denied { ioctl } for pid=6238 comm="syz.0.104" path="socket:[8907]" dev="sockfs" ino=8907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.657586][ T29] audit: type=1400 audit(1734806599.931:260): avc: denied { map } for pid=6260 comm="syz.1.109" path="socket:[9712]" dev="sockfs" ino=9712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.725023][ T29] audit: type=1400 audit(1734806599.931:261): avc: denied { read write } for pid=6260 comm="syz.1.109" path="socket:[9712]" dev="sockfs" ino=9712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.952570][ T29] audit: type=1400 audit(1734806600.231:262): avc: denied { write } for pid=6269 comm="syz.3.110" path="socket:[8953]" dev="sockfs" ino=8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.981490][ T6271] Bluetooth: MGMT ver 1.23 [ 90.147618][ T6272] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.253795][ T6272] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.876847][ T6270] syz.2.112 (6270): drop_caches: 2 [ 90.887512][ T6276] syz.2.112 (6276): drop_caches: 2 [ 90.933085][ T6276] syz.2.112 (6276): drop_caches: 2 [ 90.992823][ T6278] siw: device registration error -23 [ 91.537318][ T6280] syz.1.113 (6280): drop_caches: 2 [ 91.568171][ T6280] syz.1.113 (6280): drop_caches: 2 [ 91.570403][ T6277] syz.1.113 (6277): drop_caches: 2 [ 91.839148][ T6293] [ 91.841486][ T6293] ============================= [ 91.846309][ T6293] [ BUG: Invalid wait context ] [ 91.851133][ T6293] 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted [ 91.858215][ T6293] ----------------------------- [ 91.863028][ T6293] syz.2.118/6293 is trying to lock: [ 91.868194][ T6293] ffff88802e133798 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 91.877821][ T6293] other info that might help us debug this: [ 91.883679][ T6293] context-{5:5} [ 91.887125][ T6293] 4 locks held by syz.2.118/6293: [ 91.892118][ T6293] #0: ffff88805a0e60a8 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xd38/0x1620 [ 91.902632][ T6293] #1: ffff88807b1378c0 (&acct->lock){+.+.}-{2:2}, at: io_wq_enqueue+0x20a/0xb30 [ 91.911744][ T6293] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 91.921109][ T6293] #3: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 91.930835][ T6293] stack backtrace: [ 91.934525][ T6293] CPU: 0 UID: 0 PID: 6293 Comm: syz.2.118 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 91.945082][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.955127][ T6293] Call Trace: [ 91.958381][ T6293] [ 91.961291][ T6293] dump_stack_lvl+0x116/0x1f0 [ 91.965957][ T6293] __lock_acquire+0x878/0x3c40 [ 91.970696][ T6293] ? __pfx___lock_acquire+0x10/0x10 [ 91.975865][ T6293] ? __pfx___lock_acquire+0x10/0x10 [ 91.981038][ T6293] ? arch_irq_work_raise+0x4f/0x70 [ 91.986138][ T6293] lock_acquire.part.0+0x11b/0x380 [ 91.991226][ T6293] ? __lock_task_sighand+0xc2/0x340 [ 91.996409][ T6293] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 92.002016][ T6293] ? rcu_is_watching+0x12/0xc0 [ 92.006767][ T6293] ? trace_lock_acquire+0x14e/0x1f0 [ 92.011942][ T6293] ? trace_lock_acquire+0x14e/0x1f0 [ 92.017114][ T6293] ? __lock_task_sighand+0xc2/0x340 [ 92.022297][ T6293] ? lock_acquire+0x2f/0xb0 [ 92.026774][ T6293] ? __lock_task_sighand+0xc2/0x340 [ 92.031957][ T6293] _raw_spin_lock_irqsave+0x3a/0x60 [ 92.037129][ T6293] ? __lock_task_sighand+0xc2/0x340 [ 92.042304][ T6293] __lock_task_sighand+0xc2/0x340 [ 92.047301][ T6293] group_send_sig_info+0x290/0x300 [ 92.052388][ T6293] ? __pfx_group_send_sig_info+0x10/0x10 [ 92.058009][ T6293] ? __pfx___lock_acquire+0x10/0x10 [ 92.063196][ T6293] bpf_send_signal_common+0x3d3/0x530 [ 92.068547][ T6293] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 92.074424][ T6293] ? trace_lock_acquire+0x14e/0x1f0 [ 92.079607][ T6293] ? bpf_trace_run2+0x1c2/0x590 [ 92.084436][ T6293] bpf_send_signal+0x1d/0x30 [ 92.089009][ T6293] bpf_prog_631417f49dd64198+0x25/0x48 [ 92.094447][ T6293] bpf_trace_run2+0x231/0x590 [ 92.099101][ T6293] ? __pfx_mark_lock+0x10/0x10 [ 92.103840][ T6293] ? __pfx_bpf_trace_run2+0x10/0x10 [ 92.109014][ T6293] __bpf_trace_contention_end+0xca/0x110 [ 92.114621][ T6293] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 92.120843][ T6293] ? hlock_class+0x4e/0x130 [ 92.125323][ T6293] ? __lock_acquire+0x15a9/0x3c40 [ 92.130329][ T6293] trace_contention_end.constprop.0+0xf0/0x170 [ 92.136472][ T6293] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 92.142520][ T6293] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 92.149094][ T6293] ? lock_acquire.part.0+0x11b/0x380 [ 92.154357][ T6293] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 92.159968][ T6293] do_raw_spin_lock+0x210/0x2c0 [ 92.164810][ T6293] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 92.170165][ T6293] ? lock_acquire+0x2f/0xb0 [ 92.174659][ T6293] ? io_wq_enqueue+0x20a/0xb30 [ 92.179404][ T6293] io_wq_enqueue+0x20a/0xb30 [ 92.183972][ T6293] ? __check_object_size+0x488/0x710 [ 92.189331][ T6293] ? __pfx_io_wq_enqueue+0x10/0x10 [ 92.194425][ T6293] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 92.200209][ T6293] ? io_prep_async_work+0x3c3/0x770 [ 92.205395][ T6293] io_queue_iowq+0x28b/0x5c0 [ 92.209963][ T6293] io_queue_sqe_fallback+0xcd/0x9f0 [ 92.215150][ T6293] io_submit_sqes+0x135c/0x25c0 [ 92.219989][ T6293] __do_sys_io_uring_enter+0xd43/0x1620 [ 92.225520][ T6293] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 92.230610][ T6293] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 92.236586][ T6293] ? __x64_sys_futex+0x1e1/0x4c0 [ 92.241506][ T6293] ? __x64_sys_futex+0x1ea/0x4c0 [ 92.246424][ T6293] ? xfd_validate_state+0x5d/0x180 [ 92.251513][ T6293] ? rcu_is_watching+0x12/0xc0 [ 92.256259][ T6293] do_syscall_64+0xcd/0x250 [ 92.260749][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.266636][ T6293] RIP: 0033:0x7fde5ff85d29 [ 92.271031][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.290621][ T6293] RSP: 002b:00007fde60de2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 92.299009][ T6293] RAX: ffffffffffffffda RBX: 00007fde60175fa0 RCX: 00007fde5ff85d29 [ 92.306952][ T6293] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000004 [ 92.314897][ T6293] RBP: 00007fde60001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 92.322841][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.330796][ T6293] R13: 0000000000000000 R14: 00007fde60175fa0 R15: 00007ffec5d27ed8 [ 92.338746][ T6293]