last executing test programs: 11.573083781s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x100, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1000, "0000000000000000000100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4094}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000140)={0x300, 0x1, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}) 11.414492545s ago: executing program 0 (id=1): socket$packet(0x11, 0x3, 0x300) r0 = mq_open(&(0x7f00000003c0)='filter\x00\xd9\x83\xda\x88v|\bu\x90\xdf\x88\'\xcf\xa4\x06\xd0\x87\b\xff\xa0\xc6jB\x1fE\x9c\xea', 0x40, 0x9d, &(0x7f0000000100)={0xc5d, 0x8000000000003, 0x9, 0x7}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000240)=""/58, 0x3a, 0x4, &(0x7f0000000380)={r1, r2+10000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000280)=0x2) close(0x3) socket$inet(0x2, 0x80000, 0x4) r7 = syz_io_uring_setup(0x227, &(0x7f00000001c0)={0x0, 0x5325, 0x10000, 0x0, 0x259}, &(0x7f0000000000), 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r8, 0x5414, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) 11.347898405s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000040)={0x10, 0x7}) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x0, 0x42) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="9345f9739a000000000000"], 0x0}, 0x0) 11.002541192s ago: executing program 3 (id=8): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007", 0x51}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r3, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x56, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000002840)=""/4103, 0x1007) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, r8, 0x38}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004804}, 0x24004004) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x14, 0x2, 0x0, 0x20, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_sec_ctx={0x1e, 0x18, 0xbf, 0x0, 0xe7, "17374d4a6ed12a68191d319a1a3575ca79939bd865dfbd5678c89898071add68493b6af2c0dd571b8a93e77227fd39421c9d9a6960d073dfd9aaa7a775c1e9c85cc38edb82939700b4675b65ff11e2e6f82cdcf3a1209d03459c90b61a5167f1747ac1756e6554be1c732ec22beaacd30aaadb97b51bc7aff46d3c74550045df1a2ccd3eed5382eb9959e88b267ac10aa989aaa2a9112e50f9d7de8c3fd2d823515cc497ee00ae2dd515181ffd19c0429566661a9f41930bee26d5edc1660f693543b7007ba8b01937e46ccb79df87d6eca0a4be1e5725e9851d36e3dad497f0d19951f0e1e415"}]}, 0x100}}, 0x10001) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 10.385642366s ago: executing program 0 (id=9): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x1c8, 0x1f8, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) 8.921188069s ago: executing program 0 (id=10): r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2700) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r3}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000800)={0x10, 0x7, 0x5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000001c0)=""/65) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x20) write$cgroup_type(r7, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x41048, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) read(r6, &(0x7f0000000640)=""/4096, 0x1000) close_range(r0, r6, 0x0) 8.49225692s ago: executing program 2 (id=11): syz_open_dev$loop(&(0x7f0000000100), 0x400000040000006, 0x400a00) r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffc, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c) memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x6, @sliced={0x3, [0x0, 0x53, 0x405, 0x7, 0xe72b, 0x7, 0x5, 0x80, 0x3b2e, 0x8, 0x4, 0x800, 0xe81d, 0x6e, 0x1, 0x5, 0xd842, 0x7, 0xfff, 0x6, 0xba4, 0xffff, 0xfffd, 0x101, 0x7, 0x1, 0x2, 0xa, 0x12, 0x400, 0x5, 0xacf, 0x4, 0x3, 0xfffa, 0x800, 0x6433, 0x4, 0x2, 0x7e3, 0x9, 0x477a, 0x1dc, 0x8, 0xa4, 0x65, 0x1d47, 0x6], 0xffffffff}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=0x24) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="57957ec0f252a84416c89e9e470bd925ce1fd85a542b4b872c28be46001f62aebb2bfb9e510b7ac22be7682df3bf33dcc59c18a8b93271f5e3ef718f2542e5dc94dbc4d37637c069388e8c6de00231e0ad327a868b69706051a54283006a53d17235126aacd6ef70b31f0975550bd3200663b0c605312ad8d6d798540b09d85996e6af74649ef440e3847e825003381ed66be88531f6dc1eee6ffc2881f4cf28acd480bc85a635e9bd4a7814c6025e1ea6c0a47a142e84e16624e298a880e6de395aa4605a4d00d8ce1a2d133733322570ec0000000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080002000100000008000100000000001800088014000780080005000000000008000500ffffffff0800048004000b80"], 0x44}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000023, @multicast2, 0x0, 0x0, 'rr\x00', 0x15, 0x38, 0xc000067}, 0x2c) sendmsg$RDMA_NLDEV_CMD_SET(r4, 0x0, 0x40810) 8.33382707s ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x3}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002020000402505a1a440000102034109023f000101818009090400060202060004052406000005240003000d240f0146740000f8ff0300040424530409058202ff03080207090503020800dff9fd"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221c01c4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd00000000081a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x3ee8, 0x430b, 0x0, &(0x7f0000000080)={[0x5]}, 0x8) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="e3212abd7000ffdbdf253900000008000300", @ANYRES32=r9, @ANYBLOB="10005a"], 0x2c}, 0x1, 0x0, 0x0, 0x20044005}, 0x4004010) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) 7.876235434s ago: executing program 4 (id=13): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 7.797220631s ago: executing program 1 (id=14): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000002c0)=0x19) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) syz_clone(0xa088b100, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001b0000000d000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180004000000000000000000050000009500000000000000"], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) open(&(0x7f0000000000)='.\x00', 0x0, 0x11c) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 7.668421675s ago: executing program 2 (id=15): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000002c0)=0x19) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) syz_clone(0xa088b100, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001b0000000d000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180004000000000000000000050000009500000000000000"], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) open(&(0x7f0000000000)='.\x00', 0x0, 0x11c) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 7.469709177s ago: executing program 0 (id=16): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000700"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000180100002020752500000000002020207b94f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000007f9800000000000056080000000000008500000007000000b700000000000000950000004600"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf7, 0x51, 0xae, 0x40, 0x451, 0x3410, 0xef1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xaa, 0xf, 0x60, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x424000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x27, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r4, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r4, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r3, r4, 0x0) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) 7.233929699s ago: executing program 1 (id=17): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="490000000000000000000000000000006301e0ff0000000095000000bfb5eb02a52e00000000843f0d42129ef2c42331eec27b6f3c20db5cdbb9fb55de02b04c1138ef47a393d92d9880e86a3c756c8303c5cdb301ba0e44fe864b3d8f5d41d43540787a52c9d08a46b1b415306eb7146100fec2117dd2c5f949dfadd44f4eee75f8ca09a0129c955958689b553a6e555e1c8b53ffd4d5fc969dfcd22ca9"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd70906e9", 0x15}, {&(0x7f00000000c0)="4fb9dd96d8c362a05801022472a45f0e34145262b94a40", 0x17}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a21b6c92a601bc400d316859b89b8a790f954f83fcf444127c2c746d6a5081fb99c0f5934702f373", 0x28}], 0x1}}], 0x1, 0x2604002c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r7, 0xffffffffffffffff, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0xec, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffff}, @DEVLINK_ATTR_RATE_NODE_NAME={0xbc, 0xa8, @random="910b11d63f9a30c16dcf96ce41ee1eb727c168755fc64c70f5e9bf3b59cdc96b8c649aef6317ea799746e7134b5ce56386520573ffc42fc67e7c3cff5a1b1b3f2fa4a5dddc7a07cb8bcef3c9f5f80d1b245bfbffc560dab51980478f16270894d5473ea52cfa736af56e384d168dadfc081cd486b48939cc82836d7ebc16e249d833ea4779a6cb1b482839351121e46323b9bb4c62d42bccc306e98ec49e3eb6788458e826ce6271e85f5bbc8201b9d29256273e5a0f52a3"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x20044014) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0xf5) r8 = socket$pptp(0x18, 0x1, 0x2) getpeername(r8, 0x0, &(0x7f0000001580)) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xee00, 0x0) r9 = getuid() setreuid(0xee00, r9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9e}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.189655864s ago: executing program 2 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) 7.011022875s ago: executing program 3 (id=19): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000d00000084420200", @ANYRES32, @ANYBLOB="0000000000000009000000000000000000000000edda4ed230085026a0262fd359c6151e742d708c40ec4e27f3f624ab82214c71e62cc6e2769dabbf03013c5df8ea4459998b7ed5f468099e8bc4e85251fdbd418b13d89b23b4fe3d4c9cc101fb0cb052fe56910215ad1a65423e79c6713183ca46da3df39070599cd41079ace3b82580869389b9f1ee9c84fdaf4d5dff984cbcaceadee2deffab32565cc87d44d294cda4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000040), &(0x7f0000000540)}, 0x20) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000120009000200", 0x22) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r6, r7+60000000}}, &(0x7f0000000400)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 6.198224709s ago: executing program 1 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001"], 0x140}}, 0x0) 5.875358574s ago: executing program 2 (id=21): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a000200000000000000000008000340"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESHEX=r7], 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r9, &(0x7f0000004440)={0x2020}, 0x2020) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x27, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4e) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xa8, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb, 0xe9, 0x9c, 0x10, 0x499, 0x1018, 0xb2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x0, 0x1, 0x2c, 0xb3, 0xd8, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x3, 0x80}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x1fcf}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x5, 0x5}}]}}]}}]}}, 0x0) 5.83439258s ago: executing program 4 (id=22): mmap$KVM_VCPU(&(0x7f000000d000/0x3000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x173401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0x1000, 0x0, 0x0, r4}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 4.90228866s ago: executing program 3 (id=23): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000002c0)=0x19) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) syz_clone(0xa088b100, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001b0000000d000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180004000000000000000000050000009500000000000000"], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) open(&(0x7f0000000000)='.\x00', 0x0, 0x11c) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 4.772098752s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000140)={0x3, 0x0, @ioapic={0x2, 0x2, 0x6, 0x4, 0x0, [{0x7, 0x5, 0x6, '\x00', 0x7}, {0x3, 0x7, 0x7, '\x00', 0x40}, {0x0, 0x7, 0x1, '\x00', 0x4}, {0x72, 0x7f, 0xd, '\x00', 0x1}, {0x9, 0x9, 0x1, '\x00', 0x6}, {0xb, 0x53, 0x4, '\x00', 0x6}, {0x7, 0x4, 0xf, '\x00', 0x5}, {0x7d, 0x80, 0x6, '\x00', 0xe}, {0x9, 0x6, 0x6}, {0x35, 0x6, 0x4, '\x00', 0xf}, {0x1, 0x5, 0x2, '\x00', 0xf}, {0x3, 0xc, 0x6, '\x00', 0x81}, {0x1, 0x3, 0x2, '\x00', 0x1}, {0x9, 0x3, 0x80, '\x00', 0x5}, {0x74, 0x6, 0x2, '\x00', 0x5}, {0xff, 0x8, 0x7, '\x00', 0xff}, {0x6, 0x9, 0xf2, '\x00', 0x4}, {0xf, 0x1, 0x96, '\x00', 0x81}, {0x7, 0x2, 0x4f, '\x00', 0x8}, {0x1, 0x8, 0x3, '\x00', 0x80}, {0x74, 0xb, 0x8, '\x00', 0x8}, {0x8, 0x1, 0x9f, '\x00', 0x7}, {0x1, 0x8, 0x6, '\x00', 0xe2}, {0x40, 0xf8, 0x0, '\x00', 0x4}]}}) r5 = syz_open_dev$vbi(0x0, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(0x0, 0x7a, 0x400001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f00000000c0)={0x1, 0x1, @stop_pts=0x7}) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x5d8, &(0x7f0000000380)={0x0, 0xfbc6, 0x4, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) 4.738433284s ago: executing program 4 (id=25): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x60, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 4.39570674s ago: executing program 3 (id=26): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r3, 0x8000000000000001, 0x7, 0x3}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="010025bd700003000000010000000c00030003000000000000000c00050006000000000000000c000400b7050000000000000c00060000000000000000000c00078008000100", @ANYRES32=r3, @ANYBLOB="0c00080003000000000000000c000200ff010000000000000c0003000000000000000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32=r4], 0xa8}, 0x1, 0x0, 0x0, 0x20044885}, 0x804) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x101c802, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) migrate_pages(0x0, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.039966821s ago: executing program 4 (id=27): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000002c0)=0x19) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) syz_clone(0xa088b100, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001b0000000d000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180004000000000000000000050000009500000000000000"], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) open(&(0x7f0000000000)='.\x00', 0x0, 0x11c) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 3.845671515s ago: executing program 0 (id=28): setrlimit(0x8, &(0x7f0000000080)={0x7, 0x5}) timer_create(0x3, 0x0, &(0x7f0000000300)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000001c40)=""/227, 0xe3}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000640)=""/145, 0x91}, {0x0}, {&(0x7f00000018c0)=""/184, 0xb8}, {&(0x7f0000000840)=""/203, 0xcb}, {0x0}], 0x8, &(0x7f0000000740)=""/208, 0xd0}, 0x2001) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffd) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) 3.525633183s ago: executing program 1 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000480), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x9, 0xcb, 0xff}]}) syz_io_uring_setup(0x112, &(0x7f0000000400)={0x0, 0xfac6, 0x800, 0x3, 0x287}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x10, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd287100000000000001090224000100000000090401000103000000092102000001220500090581"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x5, {0x5, 0x22, "4a20ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00030d"], 0x0, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffff, 0x200) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f00000000c0)=0x2) 1.229220236s ago: executing program 2 (id=30): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001780)="322f0eed54e09460932d0d984a69189fecdfd0de4075180e88c8bb4a263193b513fa103e0f918900093edd1a9b9d527e18bf4e9e932ae9c282aebd29c22260bc4a710d5bb5ab6319bd6ca329355f41b2de448a04af2b867aa949c975e3608aba5f2bf1", 0x63}, {&(0x7f0000001800)="95805282cf69f3012665b43b752d45d761b8eb5e392646315bb828af19faf9f8387181215eef733a3789e4ad84a283df318455e82c3f89f8f12a099ac1a8726e516b0744cbdc0053e327bf5805a63b4403fdde38b0978531b02a1b87a3d282ae8f44d1c0c6e92a87e40fac3e96a0296de980a0ebee6b9685721fd294bdd66ad892a3f411d48231637f7ea35cd89a3eefe9d771382040fc8043b46a17829b6081a6b63451c1f4a7", 0xa7}, {&(0x7f00000018c0)="24672685a8d55c7af6c078d088e95eb108fc00e443ff6d1ee67e7bd8174c2e6c785e794e4eabeb3402b247d08ad56d39f32b846ed69655fa7a10fa47444b0eee83d50b010cd74529e5e318be58dc58033543cd33be6f53a66cd20287eb2d1a5d559e", 0x62}, {&(0x7f0000001940)="ed8d4854ca2013ab8acaaf7d52fcb667c4d22e2d1ae28c1b364596a89a06b8e4946fd766683d33d9ce4fdb2c42952864f01aaaa9b04577d799a403aad2f7ecc8d74f52d0db07d6f1b4194e378d8d471ea34fce819d947fd9dee6ab33edc654e4a2d63e1f6a027e72", 0x68}, {&(0x7f00000019c0)="f18bad3c34575aa37a2e023865fde737ceaba4f774a49fe0d70ccd88744434bae17d368cee15b23c7e3a11861d006bbf365cfa172a813731786a3f16af88a7ba610bc5887e53b73204f6f80045fbaa14de807abe4ba55753d5b10a516bbce501b445ccedda90f148a3729b4455c3245e178f4f88a8a45c091fbf0deb72fcaf411d92c25fe1a038d856f37b6328707c44e305210da9d77edb6e271c29b8", 0x9d}, {&(0x7f0000001a80)="5766dd9addf2ed978632e5bbb1fe09e36eccf090e0518655dceb43a5ae7bf28f08b6f5bb6448ae2c440a927392", 0x2d}, {&(0x7f0000001ac0)="1fb7464454eb6ac4f4732629d86253032e9b6260945e58a2d4a045fad7181acd89adbad21e805b3b2dbac4dab1", 0x2d}], 0x7, 0x0, 0x0, 0x10040}}, {{&(0x7f0000001b80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c00)="305727f0d290531666c60fa625a3e8cedb586cf413e72471d1f21390742ed297b8ce2b8646da2e7dc5b9c509f23e53699e949753f9f8aceff567d4571df3628f86b71a7da89b57e497de484c65a9343bb5ea3b885e8de00adcc4676381c3b397c498788e75992bb00a4f5b905be1b3b4f1725fd3a843176b353e1a2e99cfc3044c87228441e3ea650c16f565", 0x8c}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="eb5b8cd0b52b46c926f049ce026f911f37fd0ef23ac726354b0166d73387f0bd69766513b80193a971940f5cc9eb4feb1fb570eceb05b4a791d796f7fa1157f3bfa9a1b9e7ca4e22a6ad6cf5b4f085a2c7972085632297f1ae89551047df10f7cb3fa96006cc54bcf47ac09eb1334407846c9fe19e912236108560d11f4425d45ad1c3c97d1beeb618e0822d79da82f4a6a381a02e431420c1942e08aeab759f795e740c2e131f9bf8e473f4bcc520173288dea734e146500b4e861f2bc88c6deee9284c92cb8936be20583231a980e9a51c06941ace208e00e69e924ad0983057aeea70b155", 0xe6}], 0x3, &(0x7f0000002440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r3, r0, r4]}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r1, r0, r1, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x38, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r3, 0xffffffffffffffff, r0, r1, r1, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x150, 0x20004000}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000006200)="d2f8252492f3f06ef0b3f62060f52b882cdfffa1b48e64fd32d8e0d41fa10f3cfeff4748bc0cb841ecf49b9304007b05feb6f9e966c15eb64d7e696dbe41abc5c4b123d34b0938fd208c2e98b3dacc704ac30eb0db8ec15329025c4af000fba1293d894589411e0b74c2912578b4a46c05d5", 0x72}, {&(0x7f00000041c0)="687b56a568359f97f83b311d0d34c68a9a11321f4cd4a523d5163c4d868e7e6ba311df5f78588d", 0x27}], 0x2, &(0x7f0000006380), 0x0, 0x20000084}}], 0x3, 0x8010) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4, @fd=r5, 0xa, 0x0, 0x0, 0x16}) io_uring_enter(r5, 0x171f, 0xa66b, 0x7, 0x0, 0x0) futex(&(0x7f0000001700), 0xc, 0x1, 0x0, &(0x7f0000001740)=0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xd}, {0x480bd72125a0c189, 0xfff2}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4040801}, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r10, 0x5608, 0x1) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x15, "fee8a2ab780ef39fa3910d96072000001ea800000000fdffffff0000faffffffffffffff00", "2809e8dbe108598948224ad54aecfd20ad5397bdb22d0064b420a1a93c5240f45f819e01177d3d458dd4992861ac000018000000000000000000001700", "90be8bf4bd000000f56b5a3000000000000000100900", [0x18000000000]}}) syz_emit_vhci(&(0x7f0000001580)=ANY=[@ANYBLOB="0435060000d50eb9f37e5ef50ceb9e9af4d946ed119a30bf62b54d79327bc7746fbcf33e4acc7aa79f483daa43e2f47b56ab33c7f0cbddee4c710a81f8536af54ec0cc87d1b2a3e5a340962f8f4ce80448e4db53e97afbe6d09e9916d465517a3cbff74ca5af62c660c275c378a47cb82105d47ff488c5808e6646301268dda4809d7f05b3dc0947183877eece76ba00e01c8de15fa5d0d213d32cae736f125fd0c267aba4e1c81bafef9dc19656c9e61b38c890c0f8c7257893ed159bd2f496e7ea4a5f2ee70142b5ede03735c41dc5bf7b0495e041c7f19486fdbed4fa02635dba2a8d2892c31019ed445fa029f104c87304a18653cfa1000000000000000000000000000000807537349a3cc7dac940c4fd981052186625117d0898760108e64905000000000000b94b18239b16148ce361fd26b05e0c9cf04104fa8b01c412b0d271f3068de37f95571e4366de28820825f4781cd44fff18a037"], 0x9) 940.802247ms ago: executing program 3 (id=31): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001a00010000000000000000000a000000000ce3000000000206000400916c269d41c6099f2ed380447fbfde7eac0d0b2ad7035cb346e6c40b73390d9e419ad28afcc33d3a6bb73969c5354d603354c967024c0000000000000000dc3fb299c54a82d72a93db2f9606027208660d7370e768321d", @ANYRES32=0x0, @ANYBLOB="0000140004000000"], 0x38}, 0x1, 0x0, 0x0, 0x40804}, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x109001) 593.521416ms ago: executing program 4 (id=32): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd9d, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/165, 0xa5}, {&(0x7f0000000340)=""/196, 0xc4}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000000)=""/182) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, &(0x7f0000000140)) syz_clone(0x2ea9bea9e899a479, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x7) accept4$phonet_pipe(r4, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=33): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r2 = fanotify_init(0x4, 0x0) r3 = dup(r1) fanotify_mark(r2, 0x201, 0x48001003, r3, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88eeffffff1b0012800b00010067656e65766500000c00028008000100040000000a0001"], 0x48}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x60) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}}}, 0x24}}, 0x0) r11 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r12, 0x1, &(0x7f0000001d00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xfffc, r11, 0x0, 0x0, 0x0, 0x0, 0x4}]) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.51' (ED25519) to the list of known hosts. [ 55.109921][ T30] audit: type=1400 audit(1746610142.256:88): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.113659][ T5796] cgroup: Unknown subsys name 'net' [ 55.132878][ T30] audit: type=1400 audit(1746610142.256:89): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.161974][ T30] audit: type=1400 audit(1746610142.306:90): avc: denied { unmount } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.365938][ T5796] cgroup: Unknown subsys name 'cpuset' [ 55.373876][ T5796] cgroup: Unknown subsys name 'rlimit' [ 55.478934][ T30] audit: type=1400 audit(1746610142.626:91): avc: denied { setattr } for pid=5796 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.502499][ T30] audit: type=1400 audit(1746610142.626:92): avc: denied { create } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.545638][ T30] audit: type=1400 audit(1746610142.626:93): avc: denied { write } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.566356][ T30] audit: type=1400 audit(1746610142.626:94): avc: denied { read } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.587089][ T30] audit: type=1400 audit(1746610142.656:95): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.611376][ T5798] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 55.612296][ T30] audit: type=1400 audit(1746610142.656:96): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 55.644239][ T30] audit: type=1400 audit(1746610142.686:97): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 56.518474][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.152137][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 60.152150][ T30] audit: type=1400 audit(1746610147.296:103): avc: denied { create } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.184795][ T30] audit: type=1400 audit(1746610147.296:104): avc: denied { read write } for pid=5806 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.211603][ T30] audit: type=1400 audit(1746610147.296:105): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.235245][ T30] audit: type=1400 audit(1746610147.336:106): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="socket:[3648]" dev="sockfs" ino=3648 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.284109][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.292039][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.301333][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.310012][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.312982][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.317658][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.332048][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.339562][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.340031][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.348697][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.354545][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.368457][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.376214][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.383066][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.384889][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.394801][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.398360][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.404094][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.419296][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.419708][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.435050][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.439747][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.444519][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.450543][ T30] audit: type=1400 audit(1746610147.586:107): avc: denied { read } for pid=5806 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.456851][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.487795][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.515213][ T30] audit: type=1400 audit(1746610147.586:108): avc: denied { open } for pid=5806 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.547189][ T30] audit: type=1400 audit(1746610147.586:109): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 60.756591][ T30] audit: type=1400 audit(1746610147.906:110): avc: denied { module_request } for pid=5806 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.895889][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 60.971798][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 61.060108][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 61.123582][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 61.181869][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.189109][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.197605][ T5818] bridge_slave_0: entered allmulticast mode [ 61.204593][ T5818] bridge_slave_0: entered promiscuous mode [ 61.211892][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.219000][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.226155][ T5806] bridge_slave_0: entered allmulticast mode [ 61.232758][ T5806] bridge_slave_0: entered promiscuous mode [ 61.246082][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 61.269368][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.277192][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.284661][ T5818] bridge_slave_1: entered allmulticast mode [ 61.291262][ T5818] bridge_slave_1: entered promiscuous mode [ 61.298466][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.305635][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.312730][ T5806] bridge_slave_1: entered allmulticast mode [ 61.319671][ T5806] bridge_slave_1: entered promiscuous mode [ 61.384708][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.417819][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.425025][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.432124][ T5808] bridge_slave_0: entered allmulticast mode [ 61.439729][ T5808] bridge_slave_0: entered promiscuous mode [ 61.448504][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.467398][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.486874][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.494198][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.501300][ T5808] bridge_slave_1: entered allmulticast mode [ 61.508616][ T5808] bridge_slave_1: entered promiscuous mode [ 61.524463][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.568840][ T5818] team0: Port device team_slave_0 added [ 61.582666][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.589886][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.597322][ T5807] bridge_slave_0: entered allmulticast mode [ 61.604688][ T5807] bridge_slave_0: entered promiscuous mode [ 61.620159][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.631644][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.643429][ T5818] team0: Port device team_slave_1 added [ 61.651093][ T5806] team0: Port device team_slave_0 added [ 61.657428][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.664701][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.671806][ T5807] bridge_slave_1: entered allmulticast mode [ 61.678605][ T5807] bridge_slave_1: entered promiscuous mode [ 61.701746][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.708878][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.716064][ T5810] bridge_slave_0: entered allmulticast mode [ 61.722704][ T5810] bridge_slave_0: entered promiscuous mode [ 61.746805][ T5806] team0: Port device team_slave_1 added [ 61.768815][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.776111][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.783595][ T5810] bridge_slave_1: entered allmulticast mode [ 61.790207][ T5810] bridge_slave_1: entered promiscuous mode [ 61.830574][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.837654][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.865192][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.878155][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.890013][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.907113][ T5808] team0: Port device team_slave_0 added [ 61.913507][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.920470][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.946371][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.957753][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.964973][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.991370][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.011525][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.021912][ T5808] team0: Port device team_slave_1 added [ 62.036250][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.043557][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.069576][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.096027][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.127176][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.134193][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.160390][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.172433][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.179649][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.205722][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.219299][ T5807] team0: Port device team_slave_0 added [ 62.230608][ T5807] team0: Port device team_slave_1 added [ 62.246360][ T5810] team0: Port device team_slave_0 added [ 62.279678][ T5810] team0: Port device team_slave_1 added [ 62.307293][ T5818] hsr_slave_0: entered promiscuous mode [ 62.314071][ T5818] hsr_slave_1: entered promiscuous mode [ 62.338847][ T5806] hsr_slave_0: entered promiscuous mode [ 62.345350][ T5806] hsr_slave_1: entered promiscuous mode [ 62.351273][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.359561][ T5806] Cannot create hsr debugfs directory [ 62.372712][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.380401][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.406311][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.425397][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.432331][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.459151][ T53] Bluetooth: hci0: command tx timeout [ 62.461214][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.492537][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.499761][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.527037][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.533757][ T53] Bluetooth: hci4: command tx timeout [ 62.537760][ T5817] Bluetooth: hci1: command tx timeout [ 62.550795][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.557803][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.583956][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.598159][ T5808] hsr_slave_0: entered promiscuous mode [ 62.604631][ T5808] hsr_slave_1: entered promiscuous mode [ 62.610510][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.613115][ T5817] Bluetooth: hci3: command tx timeout [ 62.618241][ T5808] Cannot create hsr debugfs directory [ 62.623753][ T5817] Bluetooth: hci2: command tx timeout [ 62.706487][ T5810] hsr_slave_0: entered promiscuous mode [ 62.712621][ T5810] hsr_slave_1: entered promiscuous mode [ 62.718999][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.726620][ T5810] Cannot create hsr debugfs directory [ 62.802483][ T5807] hsr_slave_0: entered promiscuous mode [ 62.809124][ T5807] hsr_slave_1: entered promiscuous mode [ 62.815271][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.822812][ T5807] Cannot create hsr debugfs directory [ 63.065323][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.095448][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.116514][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.134709][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.181483][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.191892][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.207717][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.217374][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.262536][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.274808][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.293730][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.313495][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.388409][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.401949][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.423738][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.433654][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.468261][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.506158][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.526553][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.544265][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.557222][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.579024][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.586322][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.599598][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.629696][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.636855][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.665525][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.731766][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.752408][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.765086][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.772197][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.823204][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.830314][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.845785][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.852443][ T30] audit: type=1400 audit(1746610150.996:111): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.876396][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.889321][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.937487][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.944704][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.999862][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.028888][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.036070][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.068326][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.086237][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.105801][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.118075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.125204][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.147667][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.154820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.163548][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.170589][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.187154][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.204573][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.211669][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.279491][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.419769][ T5818] veth0_vlan: entered promiscuous mode [ 64.439069][ T5808] veth0_vlan: entered promiscuous mode [ 64.479477][ T5818] veth1_vlan: entered promiscuous mode [ 64.501886][ T5808] veth1_vlan: entered promiscuous mode [ 64.533604][ T5817] Bluetooth: hci0: command tx timeout [ 64.598022][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.616123][ T5817] Bluetooth: hci4: command tx timeout [ 64.621595][ T5817] Bluetooth: hci1: command tx timeout [ 64.628757][ T5808] veth0_macvtap: entered promiscuous mode [ 64.648176][ T5818] veth0_macvtap: entered promiscuous mode [ 64.659701][ T5818] veth1_macvtap: entered promiscuous mode [ 64.668834][ T5808] veth1_macvtap: entered promiscuous mode [ 64.693158][ T5817] Bluetooth: hci2: command tx timeout [ 64.693522][ T53] Bluetooth: hci3: command tx timeout [ 64.711809][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.732253][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.744684][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.760358][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.775311][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.785251][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.796576][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.806008][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.836392][ T5806] veth0_vlan: entered promiscuous mode [ 64.846825][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.860505][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.874764][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.895534][ T5806] veth1_vlan: entered promiscuous mode [ 64.920630][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.931206][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.942632][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.969387][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.978411][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.988159][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.997767][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.091987][ T5807] veth0_vlan: entered promiscuous mode [ 65.092376][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.106356][ T5807] veth1_vlan: entered promiscuous mode [ 65.112240][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.129677][ T5806] veth0_macvtap: entered promiscuous mode [ 65.181430][ T5806] veth1_macvtap: entered promiscuous mode [ 65.219490][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.229738][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.242629][ T5810] veth0_vlan: entered promiscuous mode [ 65.249921][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.259925][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.297786][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.298695][ T5810] veth1_vlan: entered promiscuous mode [ 65.314307][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.317289][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.335967][ T30] audit: type=1400 audit(1746610152.486:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.10hDcK/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.349767][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.370285][ T30] audit: type=1400 audit(1746610152.486:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.370524][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.403751][ T30] audit: type=1400 audit(1746610152.486:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.10hDcK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.430087][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.431816][ T30] audit: type=1400 audit(1746610152.486:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.444272][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.465609][ T30] audit: type=1400 audit(1746610152.486:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.10hDcK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.485036][ T5807] veth0_macvtap: entered promiscuous mode [ 65.502018][ T30] audit: type=1400 audit(1746610152.496:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.10hDcK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.532864][ T30] audit: type=1400 audit(1746610152.496:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.558885][ T30] audit: type=1400 audit(1746610152.586:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.561158][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.585252][ T30] audit: type=1400 audit(1746610152.586:120): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=6921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.607755][ T5807] veth1_macvtap: entered promiscuous mode [ 65.629632][ T30] audit: type=1400 audit(1746610152.616:121): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.655240][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.666149][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.676725][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.687502][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.699356][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.747536][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.759234][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.770955][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.783088][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.815052][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.829445][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.841181][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.858025][ T5810] veth0_macvtap: entered promiscuous mode [ 65.867218][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.876840][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.885730][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.895714][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.920438][ T5895] syz_tun: entered allmulticast mode [ 65.929703][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.941574][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.952371][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.963033][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.973435][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.986942][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.997993][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.014494][ T5810] veth1_macvtap: entered promiscuous mode [ 66.030501][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.039620][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.048892][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.058472][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.161396][ T5899] SELinux: failed to load policy [ 66.195279][ T5896] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.269185][ T5892] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.295687][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.320635][ T5892] xt_bpf: check failed: parse error [ 66.330159][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.351767][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.369600][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.388946][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.400722][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.413990][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.430794][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.447753][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.508041][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.520192][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.542960][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.556583][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.568802][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.585943][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.599495][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.610868][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.621036][ T53] Bluetooth: hci0: command tx timeout [ 66.650281][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.693187][ T53] Bluetooth: hci4: command tx timeout [ 66.693414][ T5817] Bluetooth: hci1: command tx timeout [ 66.742263][ T5891] syz_tun: left allmulticast mode [ 66.761940][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.773801][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.773887][ T5817] Bluetooth: hci2: command tx timeout [ 66.782500][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.788042][ T5817] Bluetooth: hci3: command tx timeout [ 66.802483][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.858843][ T3914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.899167][ T3914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.964237][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.972620][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.982102][ T4932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.990273][ T3914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.008567][ T4932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.008882][ T3914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.026634][ T5908] ======================================================= [ 67.026634][ T5908] WARNING: The mand mount option has been deprecated and [ 67.026634][ T5908] and is ignored by this kernel. Remove the mand [ 67.026634][ T5908] option from the mount to silence this warning. [ 67.026634][ T5908] ======================================================= [ 67.066143][ T5908] syz.3.6: attempt to access beyond end of device [ 67.066143][ T5908] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 67.079863][ T5908] syz.3.6: attempt to access beyond end of device [ 67.079863][ T5908] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 67.100494][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 67.111096][ T5908] syz.3.6: attempt to access beyond end of device [ 67.111096][ T5908] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 67.126868][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 67.140586][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.144060][ T5908] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 67.154978][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.156249][ T5908] UDF-fs: Scanning with blocksize 512 failed [ 67.171111][ T5908] syz.3.6: attempt to access beyond end of device [ 67.171111][ T5908] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 67.194050][ T81] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.222008][ T5908] syz.3.6: attempt to access beyond end of device [ 67.222008][ T5908] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 67.237197][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.243152][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 67.246914][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.280172][ T5908] syz.3.6: attempt to access beyond end of device [ 67.280172][ T5908] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 67.294977][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 67.305708][ T5908] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 67.341265][ T5908] UDF-fs: Scanning with blocksize 1024 failed [ 67.373016][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 67.383965][ T81] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 67.393419][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.393961][ T5908] syz.3.6: attempt to access beyond end of device [ 67.393961][ T5908] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 67.401397][ T81] usb 3-1: Product: syz [ 67.401420][ T81] usb 3-1: Manufacturer: syz [ 67.401432][ T81] usb 3-1: SerialNumber: syz [ 67.421273][ T81] usb 3-1: config 0 descriptor?? [ 67.450922][ T5908] syz.3.6: attempt to access beyond end of device [ 67.450922][ T5908] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 67.466641][ T81] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 67.469413][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 67.485597][ T81] usb 3-1: setting power ON [ 67.496454][ T81] dvb-usb: bulk message failed: -22 (2/0) [ 67.498641][ T5908] syz.3.6: attempt to access beyond end of device [ 67.498641][ T5908] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 67.507974][ T81] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 67.527828][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 67.534236][ T81] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 67.541390][ T5908] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 67.548969][ T81] usb 3-1: media controller created [ 67.564477][ T5908] UDF-fs: Scanning with blocksize 2048 failed [ 67.571161][ T5908] syz.3.6: attempt to access beyond end of device [ 67.571161][ T5908] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 67.585493][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 67.604280][ T5908] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 67.616876][ T5908] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 67.625376][ T5908] UDF-fs: Scanning with blocksize 4096 failed [ 67.631672][ T5908] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 67.692861][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.718019][ T81] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.745113][ T81] usb 3-1: selecting invalid altsetting 6 [ 67.750971][ T81] usb 3-1: digital interface selection failed (-22) [ 67.760225][ T5905] dvb-usb: bulk message failed: -22 (3/0) [ 67.766703][ T5905] usb 3-1: gpio_write failed. [ 67.771497][ T5905] dvb-usb: bulk message failed: -22 (3/0) [ 67.778695][ T81] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 67.797653][ T81] usb 3-1: setting power OFF [ 67.802858][ T81] dvb-usb: bulk message failed: -22 (2/0) [ 67.808716][ T81] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 67.822414][ T81] (NULL device *): no alternate interface [ 67.962936][ T5919] use of bytesused == 0 is deprecated and will be removed in the future, [ 67.978812][ T5919] use the actual size instead. [ 68.008155][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.022950][ T5816] usb 2-1: Using ep0 maxpacket: 32 [ 68.105589][ T5816] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 68.171374][ T5816] usb 2-1: config 0 has no interface number 0 [ 68.189372][ T5816] usb 2-1: config 0 interface 12 has no altsetting 0 [ 68.199010][ T5905] xt_connbytes: Forcing CT accounting to be enabled [ 68.205772][ T5905] Cannot find set identified by id 0 to match [ 68.214320][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 68.228052][ T5910] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.247942][ T5816] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 68.259727][ T5910] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.277510][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.324302][ T81] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 68.334236][ T5816] usb 2-1: Product: syz [ 68.338406][ T5816] usb 2-1: Manufacturer: syz [ 68.343405][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.350734][ T5816] usb 2-1: SerialNumber: syz [ 68.365116][ T5910] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 68.398629][ T81] usb 3-1: USB disconnect, device number 2 [ 68.428052][ T5816] usb 2-1: config 0 descriptor?? [ 68.443107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.443340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.451562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.459976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.468124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.477478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.485028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 68.496500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.501399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.509207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.665585][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.694476][ T5817] Bluetooth: hci0: command tx timeout [ 68.768282][ T5910] usb 5-1: config 0 descriptor?? [ 68.773912][ T5817] Bluetooth: hci1: command tx timeout [ 68.783555][ T5817] Bluetooth: hci4: command tx timeout [ 68.854063][ T5821] Bluetooth: hci2: command tx timeout [ 68.859814][ T5817] Bluetooth: hci3: command tx timeout [ 69.747508][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.755290][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.790406][ T5816] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 69.799065][ T5816] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 69.809019][ T5816] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 69.874165][ T5816] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 69.915162][ T5816] usb 2-1: USB disconnect, device number 2 [ 69.931357][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 69.976239][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 70.162168][ T5910] usb 5-1: USB disconnect, device number 2 [ 70.366287][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 70.366302][ T30] audit: type=1400 audit(1746610157.516:176): avc: denied { create } for pid=5944 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.448606][ T30] audit: type=1400 audit(1746610157.546:177): avc: denied { shutdown } for pid=5944 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.750543][ T30] audit: type=1400 audit(1746610157.546:178): avc: denied { getopt } for pid=5944 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.795002][ T30] audit: type=1400 audit(1746610157.626:179): avc: denied { create } for pid=5944 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.830275][ T5945] IPVS: set_ctl: invalid protocol: 35 224.0.0.2:0 [ 70.854811][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 70.873018][ T30] audit: type=1400 audit(1746610157.636:180): avc: denied { write } for pid=5944 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.901405][ T30] audit: type=1400 audit(1746610157.886:181): avc: denied { mounton } for pid=5941 comm="syz.0.10" path="/2/file0/file1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.020285][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.026985][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.059921][ T30] audit: type=1400 audit(1746610158.206:182): avc: denied { setopt } for pid=5948 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.140785][ T30] audit: type=1400 audit(1746610158.286:183): avc: denied { ioctl } for pid=5948 comm="syz.3.12" path="socket:[7434]" dev="sockfs" ino=7434 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.234272][ T5910] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.392985][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 71.400325][ T5910] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 71.493867][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.563934][ T5910] usb 5-1: config 0 descriptor?? [ 71.858678][ T5968] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.906510][ T30] audit: type=1400 audit(1746610159.026:184): avc: denied { write } for pid=5965 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.185112][ T81] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.193707][ T5910] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 72.212529][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.243663][ T30] audit: type=1400 audit(1746610159.046:185): avc: denied { connect } for pid=5965 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.265865][ T5910] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 72.280644][ T5910] usb 5-1: media controller created [ 72.301532][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.349279][ T5910] az6027: usb out operation failed. (-71) [ 72.365474][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 72.385764][ T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 72.401269][ T5910] az6027: usb out operation failed. (-71) [ 72.413207][ T5910] stb0899_attach: Driver disabled by Kconfig [ 72.421624][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.431622][ T5910] az6027: no front-end attached [ 72.431622][ T5910] [ 72.449170][ T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 72.459422][ T5910] az6027: usb out operation failed. (-71) [ 72.467648][ T5910] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 72.486807][ T81] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 72.502066][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 72.527087][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.554561][ T81] usb 1-1: Product: syz [ 72.563557][ T5910] dvb-usb: schedule remote query interval to 400 msecs. [ 72.575098][ T81] usb 1-1: Manufacturer: syz [ 72.579990][ T81] usb 1-1: SerialNumber: syz [ 72.607418][ T5910] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 72.617707][ T81] usb 1-1: config 0 descriptor?? [ 72.644603][ T81] ti_usb_3410_5052 1-1:0.0: TI USB 3410 1 port adapter converter detected [ 72.676480][ T5910] usb 5-1: USB disconnect, device number 3 [ 72.693075][ T81] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 72.777762][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.785804][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.886002][ T5910] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 72.893839][ T5978] bridge0: entered allmulticast mode [ 73.063552][ T5982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.073261][ T5982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.084100][ T5982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.417381][ T5976] Lens B: ================= START STATUS ================= [ 73.424911][ T5976] Lens B: Focus, Absolute: 0 [ 73.430200][ T5976] Lens B: ================== END STATUS ================== [ 73.810327][ T5982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.820137][ T5982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.831293][ T5982] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.856284][ T5991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21'. [ 73.896899][ T81] usb 1-1: USB disconnect, device number 2 [ 73.923813][ T81] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 73.944819][ T81] ti_usb_3410_5052 1-1:0.0: device disconnected [ 74.232968][ T5910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.416010][ T6012] process 'syz.1.24' launched './file0' with NULL argv: empty string added [ 74.506542][ T5910] usb 3-1: device descriptor read/64, error -71 [ 74.891349][ T6016] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26'. [ 74.900414][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 75.295333][ T5910] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.819901][ T973] cfg80211: failed to load regulatory.db [ 77.460618][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 77.460635][ T30] audit: type=1400 audit(1746610164.336:227): avc: denied { read write } for pid=6027 comm="syz.1.29" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.542467][ T30] audit: type=1400 audit(1746610164.346:228): avc: denied { open } for pid=6027 comm="syz.1.29" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.568730][ T30] audit: type=1400 audit(1746610164.446:229): avc: denied { ioctl } for pid=6027 comm="syz.1.29" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.637021][ T30] audit: type=1400 audit(1746610164.776:230): avc: denied { search } for pid=6034 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.737546][ T30] audit: type=1400 audit(1746610164.786:231): avc: denied { read } for pid=6035 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.903798][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.965290][ T30] audit: type=1400 audit(1746610164.786:232): avc: denied { open } for pid=6035 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.995418][ T6039] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 78.003013][ T6039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.30'. [ 78.013035][ T30] audit: type=1400 audit(1746610164.786:233): avc: denied { getattr } for pid=6035 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.073367][ T30] audit: type=1400 audit(1746610164.786:234): avc: denied { getattr } for pid=6035 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1743 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.073409][ T30] audit: type=1400 audit(1746610164.976:235): avc: denied { read } for pid=6037 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1743 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.073437][ T30] audit: type=1400 audit(1746610164.976:236): avc: denied { open } for pid=6037 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1743 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.128867][ T6043] netlink: 'syz.3.31': attribute type 4 has an invalid length. [ 78.323109][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 78.334541][ T5858] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.342581][ T5858] usb 2-1: config 0 has no interface number 0 [ 78.403838][ T5858] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.437466][ T5858] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 78.478776][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.532555][ T5858] usb 2-1: config 0 descriptor?? [ 78.560006][ T5858] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 78.919435][ T6024] ------------[ cut here ]------------ [ 78.925017][ T6024] WARNING: CPU: 1 PID: 6024 at kernel/kcov.c:872 kcov_remote_start+0xf7/0x6d0 [ 78.933857][ T6024] Modules linked in: [ 78.937822][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.0.28 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 78.949602][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 78.959654][ T6024] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 78.965269][ T6024] Code: 65 4c 8b 3d 23 ce e8 11 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 29 ce e8 11 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 71 9a b1 09 44 8b 1d ba 23 f8 18 89 c0 48 03 1c c5 00 [ 78.984868][ T6024] RSP: 0018:ffffc9000c3af470 EFLAGS: 00010002 [ 78.990915][ T6024] RAX: 0000000080000200 RBX: ffffffff93a49528 RCX: 0000000000000001 [ 78.998863][ T6024] RDX: 0000000000000002 RSI: ffffffff8dbbbc4f RDI: ffffffff8bf482a0 [ 79.006824][ T6024] RBP: ffff888036922440 R08: 766ddf967d16b52d R09: 0000000000000016 [ 79.014782][ T6024] R10: ffffc9000c3af328 R11: 0000000000000000 R12: ffff8880b8528528 [ 79.022736][ T6024] R13: 0000000000000200 R14: 0000000000000000 R15: ffff888036922440 [ 79.030688][ T6024] FS: 00007fb3ee6536c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 79.039604][ T6024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.046167][ T6024] CR2: 00007feeacae56c0 CR3: 00000000318bc000 CR4: 00000000003526f0 [ 79.054118][ T6024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.062076][ T6024] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.070026][ T6024] Call Trace: [ 79.073285][ T6024] [ 79.076198][ T6024] ieee80211_rx_list+0x45f/0x2980 [ 79.081213][ T6024] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 79.086656][ T6024] ? __lock_acquire+0xaa4/0x1ba0 [ 79.091581][ T6024] ? lock_acquire+0x179/0x350 [ 79.096246][ T6024] ieee80211_rx_napi+0xdc/0x410 [ 79.101087][ T6024] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 79.106534][ T6024] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.111712][ T6024] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.117497][ T6024] ieee80211_handle_queued_frames+0xd5/0x130 [ 79.123466][ T6024] ? ieee80211_stop_device+0x14/0x110 [ 79.128824][ T6024] ieee80211_stop_device+0x32/0x110 [ 79.134005][ T6024] ieee80211_do_stop+0x1acf/0x2510 [ 79.139102][ T6024] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 79.144541][ T6024] ? do_raw_spin_lock+0x12c/0x2b0 [ 79.149549][ T6024] ? mark_held_locks+0x49/0x80 [ 79.154305][ T6024] ieee80211_stop+0x11d/0x670 [ 79.158962][ T6024] ? __pfx_ieee80211_stop+0x10/0x10 [ 79.164139][ T6024] __dev_close_many+0x298/0x770 [ 79.168969][ T6024] ? __pfx___dev_close_many+0x10/0x10 [ 79.174334][ T6024] ? __mutex_trylock_common+0xe9/0x250 [ 79.179778][ T6024] dev_close_many+0x233/0x630 [ 79.184433][ T6024] ? rcu_is_watching+0x12/0xc0 [ 79.189176][ T6024] ? trace_contention_end+0xdd/0x130 [ 79.194443][ T6024] ? __pfx_dev_close_many+0x10/0x10 [ 79.199707][ T6024] ? __mutex_lock+0x1ca/0xb90 [ 79.204364][ T6024] ? __lock_acquire+0xaa4/0x1ba0 [ 79.209284][ T6024] ? cfg80211_rfkill_set_block+0x29/0x50 [ 79.214894][ T6024] netif_close+0x17f/0x230 [ 79.219291][ T6024] ? __pfx_netif_close+0x10/0x10 [ 79.224230][ T6024] dev_close+0xaa/0x240 [ 79.228375][ T6024] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 79.234509][ T6024] cfg80211_rfkill_set_block+0x35/0x50 [ 79.239943][ T6024] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 79.246070][ T6024] rfkill_set_block+0x1fb/0x550 [ 79.250900][ T6024] rfkill_fop_write+0x2c0/0x580 [ 79.255749][ T6024] ? __pfx_rfkill_fop_write+0x10/0x10 [ 79.261109][ T6024] ? __sanitizer_cov_trace_pc+0x10/0x70 [ 79.266632][ T6024] ? rw_verify_area+0xcf/0x680 [ 79.271377][ T6024] vfs_write+0x25c/0x1180 [ 79.275699][ T6024] ? __pfx_rfkill_fop_write+0x10/0x10 [ 79.281053][ T6024] ? __pfx_vfs_write+0x10/0x10 [ 79.285808][ T6024] ? find_held_lock+0x2b/0x80 [ 79.290461][ T6024] ? __fget_files+0x204/0x3c0 [ 79.295121][ T6024] ? __fget_files+0x20e/0x3c0 [ 79.299780][ T6024] ksys_write+0x205/0x240 [ 79.304091][ T6024] ? __pfx_ksys_write+0x10/0x10 [ 79.308932][ T6024] ? rcu_is_watching+0x12/0xc0 [ 79.313677][ T6024] do_syscall_64+0xcd/0x260 [ 79.318159][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.324027][ T6024] RIP: 0033:0x7fb3ed78e969 [ 79.328428][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.348209][ T6024] RSP: 002b:00007fb3ee653038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.356614][ T6024] RAX: ffffffffffffffda RBX: 00007fb3ed9b5fa0 RCX: 00007fb3ed78e969 [ 79.364562][ T6024] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 79.372506][ T6024] RBP: 00007fb3ed810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 79.380452][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.388398][ T6024] R13: 0000000000000000 R14: 00007fb3ed9b5fa0 R15: 00007fff8c540b98 [ 79.396360][ T6024] [ 79.399356][ T6024] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.406731][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.0.28 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 79.418519][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 79.428560][ T6024] Call Trace: [ 79.431828][ T6024] [ 79.434738][ T6024] dump_stack_lvl+0x3d/0x1f0 [ 79.439311][ T6024] panic+0x71c/0x800 [ 79.443198][ T6024] ? __pfx_panic+0x10/0x10 [ 79.447603][ T6024] ? show_trace_log_lvl+0x29b/0x3e0 [ 79.452779][ T6024] ? kcov_remote_start+0xf7/0x6d0 [ 79.457786][ T6024] check_panic_on_warn+0xab/0xb0 [ 79.462702][ T6024] __warn+0xf6/0x3c0 [ 79.466570][ T6024] ? kcov_remote_start+0xf7/0x6d0 [ 79.471567][ T6024] report_bug+0x3c3/0x580 [ 79.475872][ T6024] ? kcov_remote_start+0xf7/0x6d0 [ 79.480869][ T6024] handle_bug+0x184/0x210 [ 79.485178][ T6024] exc_invalid_op+0x17/0x50 [ 79.489659][ T6024] asm_exc_invalid_op+0x1a/0x20 [ 79.494484][ T6024] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 79.500089][ T6024] Code: 65 4c 8b 3d 23 ce e8 11 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 29 ce e8 11 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 71 9a b1 09 44 8b 1d ba 23 f8 18 89 c0 48 03 1c c5 00 [ 79.519672][ T6024] RSP: 0018:ffffc9000c3af470 EFLAGS: 00010002 [ 79.525713][ T6024] RAX: 0000000080000200 RBX: ffffffff93a49528 RCX: 0000000000000001 [ 79.533662][ T6024] RDX: 0000000000000002 RSI: ffffffff8dbbbc4f RDI: ffffffff8bf482a0 [ 79.541607][ T6024] RBP: ffff888036922440 R08: 766ddf967d16b52d R09: 0000000000000016 [ 79.549554][ T6024] R10: ffffc9000c3af328 R11: 0000000000000000 R12: ffff8880b8528528 [ 79.557500][ T6024] R13: 0000000000000200 R14: 0000000000000000 R15: ffff888036922440 [ 79.565472][ T6024] ieee80211_rx_list+0x45f/0x2980 [ 79.570501][ T6024] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 79.575944][ T6024] ? __lock_acquire+0xaa4/0x1ba0 [ 79.580868][ T6024] ? lock_acquire+0x179/0x350 [ 79.585532][ T6024] ieee80211_rx_napi+0xdc/0x410 [ 79.590361][ T6024] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 79.595797][ T6024] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.600973][ T6024] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.606758][ T6024] ieee80211_handle_queued_frames+0xd5/0x130 [ 79.612728][ T6024] ? ieee80211_stop_device+0x14/0x110 [ 79.618089][ T6024] ieee80211_stop_device+0x32/0x110 [ 79.623275][ T6024] ieee80211_do_stop+0x1acf/0x2510 [ 79.628371][ T6024] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 79.633813][ T6024] ? do_raw_spin_lock+0x12c/0x2b0 [ 79.638820][ T6024] ? mark_held_locks+0x49/0x80 [ 79.643566][ T6024] ieee80211_stop+0x11d/0x670 [ 79.648235][ T6024] ? __pfx_ieee80211_stop+0x10/0x10 [ 79.653411][ T6024] __dev_close_many+0x298/0x770 [ 79.658243][ T6024] ? __pfx___dev_close_many+0x10/0x10 [ 79.663602][ T6024] ? __mutex_trylock_common+0xe9/0x250 [ 79.669055][ T6024] dev_close_many+0x233/0x630 [ 79.673711][ T6024] ? rcu_is_watching+0x12/0xc0 [ 79.678465][ T6024] ? trace_contention_end+0xdd/0x130 [ 79.683731][ T6024] ? __pfx_dev_close_many+0x10/0x10 [ 79.688904][ T6024] ? __mutex_lock+0x1ca/0xb90 [ 79.693569][ T6024] ? __lock_acquire+0xaa4/0x1ba0 [ 79.698484][ T6024] ? cfg80211_rfkill_set_block+0x29/0x50 [ 79.704093][ T6024] netif_close+0x17f/0x230 [ 79.708496][ T6024] ? __pfx_netif_close+0x10/0x10 [ 79.713414][ T6024] dev_close+0xaa/0x240 [ 79.717551][ T6024] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 79.723681][ T6024] cfg80211_rfkill_set_block+0x35/0x50 [ 79.729125][ T6024] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 79.735255][ T6024] rfkill_set_block+0x1fb/0x550 [ 79.740082][ T6024] rfkill_fop_write+0x2c0/0x580 [ 79.744916][ T6024] ? __pfx_rfkill_fop_write+0x10/0x10 [ 79.750260][ T6024] ? __sanitizer_cov_trace_pc+0x10/0x70 [ 79.755780][ T6024] ? rw_verify_area+0xcf/0x680 [ 79.760521][ T6024] vfs_write+0x25c/0x1180 [ 79.764829][ T6024] ? __pfx_rfkill_fop_write+0x10/0x10 [ 79.770177][ T6024] ? __pfx_vfs_write+0x10/0x10 [ 79.774928][ T6024] ? find_held_lock+0x2b/0x80 [ 79.779580][ T6024] ? __fget_files+0x204/0x3c0 [ 79.784239][ T6024] ? __fget_files+0x20e/0x3c0 [ 79.788897][ T6024] ksys_write+0x205/0x240 [ 79.793212][ T6024] ? __pfx_ksys_write+0x10/0x10 [ 79.798040][ T6024] ? rcu_is_watching+0x12/0xc0 [ 79.802783][ T6024] do_syscall_64+0xcd/0x260 [ 79.807268][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.813136][ T6024] RIP: 0033:0x7fb3ed78e969 [ 79.817537][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.837121][ T6024] RSP: 002b:00007fb3ee653038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.845512][ T6024] RAX: ffffffffffffffda RBX: 00007fb3ed9b5fa0 RCX: 00007fb3ed78e969 [ 79.853470][ T6024] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 79.861415][ T6024] RBP: 00007fb3ed810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 79.869361][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.877309][ T6024] R13: 0000000000000000 R14: 00007fb3ed9b5fa0 R15: 00007fff8c540b98 [ 79.885264][ T6024] [ 79.888457][ T6024] Kernel Offset: disabled [ 79.892770][ T6024] Rebooting in 86400 seconds..