last executing test programs: 15.01874066s ago: executing program 4 (id=36): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={0x0, 0x30, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000440)={r7, 0x487d60c11958e32, 0x1, 0x1, &(0x7f0000000040)=[{0x9, 0x2, 0xb, 0x6}]}) r8 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772") sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c0100001000010000000000000000000a010101000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac141436000000000000000000000000000000000000000000010000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000e300000000000000fdffffffffffffff04000000000000000000000800000000000000000100000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd7000000000002abd700028bd7000000000004c001400636d6163286165732900"/344], 0x19c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11.705413415s ago: executing program 4 (id=41): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) splice(r0, &(0x7f0000000400)=0x7, r0, &(0x7f0000000480)=0x86, 0x2, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f0000000280)) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0/file0/file0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0x8000000000000000, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0x0, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0xd5b, 0xf65]}) unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 10.710431297s ago: executing program 1 (id=42): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000700)="e0cdc1ed484aae0736d6b9547ed3", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2a200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x20040, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = fsopen(&(0x7f0000000280)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000001a40)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)="608d", 0x2}], 0x1, &(0x7f0000000000)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x1}], 0x1, 0x0) 8.49580816s ago: executing program 1 (id=45): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000008c0)={0x34, 0x0, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "e952ab74d023e7e1d2b6e7128ffd6c29b62dee788ef7fecca0481d7106c4fc0047a742f468536f750fb36bb31ab6f5"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x2, 0x40, 0x1, 0x6, 0x8, 0xc2, 0x9, 0x1}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x171}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x70}}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1a, 0x1}, {0xe, 0xf}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040054) close(r4) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000200)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x1, 0x6, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={r3, r13, r12, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r14}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) 7.623832492s ago: executing program 4 (id=46): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000d060102020000000000000000000008050005000500000016000300686173683a6e65742c706f72742c6e65740000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x8044804) syz_usb_control_io(r0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x80001, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="9b4155b2ffc852a016406fde756ada4578e9f3280141b87b41f339b2cae3ede3d884ae296e92d5f0911b30b6cc7347b9fbdcc2ab14420e15b3242231a79b144e7b34c0179f51a5b3f0f9f0c1c77b595b0b8fb87bd7168af1550d995c79314643e07fab956ee80d5f4995583ab836d6e2679f3f7146a23ea9cd8a2f59a1a799c2cdcc0bb2012abf17af1ef30ef6678b8eb8"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x54022400, &(0x7f0000000280)="c1bdbe647411f7bb8796efb5045733bc6f065a6aa5fd46d7ba0871364aae20de8d4f833f40f465c8e16fac6c8cfbd842dc2d6a779c1813335b280eb1991281b34d160af261a8f52709f9ff69930a0ff54a7b2400094ff58264b09c694a597c589917b5bb008b1f5abfb4db02e8f3497f04de7ecdcc9a3f6604bebe8d3d3951354b196a9199132f73ac2e46954ef62e4c2a14e379306f41e006c92d3ebddf75866152dde27079", 0xa6, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="da26c12506694827742bd26f6bad524e184a6a3723864a0bde7538dc6de92909919db3725494ab3d485fe5f4dcb276a52a57e1e1843e2da293c722d486deabe81e0337ef6b1ee81c0186caaa4e3923104db63ff0f45befb5fb5fac0cb7cff9850a60465f66d9e29e1947c69266b3e9b73766d5dfdce9b417922d53547d1ba8021f10784555387992671c3e98267c8d314548a3d1d4d4d2146b36b81c9c405f056865f35aa6a60c0c05a28fa7e0c5029638ede2c28709a6514afc7aed53aa6636f14225074390d2654cc119f6737ccd1293727ebef0cbcbce2e") prlimit64(r3, 0x3, 0x0, &(0x7f0000000500)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000340)={0x18, 0x0, {0x88, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'bond0\x00'}}, 0x1e) 6.856254695s ago: executing program 0 (id=49): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) 6.681552696s ago: executing program 0 (id=50): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="890c88d324c131d26df99363a02f69d846aacb7242221935e29131957fb268fc579673b9fb971e7134c2937a25c1f6f90e918eeb3327c5", 0x37}], 0x2a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) read$FUSE(r3, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@empty, @in6=@loopback, 0x4e24, 0x0, 0x4e23, 0x8, 0xa, 0xa0, 0x80, 0x0, r4, r5}, {0x3602, 0x100000001, 0x1ff, 0x0, 0x1, 0x401, 0xffffffffffff7fff, 0x8}, {0xaf2243, 0x15, 0x2, 0x6705}, 0x4, 0x6e6bb3, 0x2, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x3501, 0x1, 0x1, 0x61, 0xffffffff, 0x2, 0x7ff}}, 0xe8) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000240)="6436f2dac481801bb9ffda0f1baf9100b86d000f00d0f3fa0f32b8cc008ee0f30f090fec4e150f01df", 0x29}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6020480) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r7 = syz_io_uring_setup(0x7465, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) recvmmsg(r10, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) 6.596721112s ago: executing program 3 (id=51): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6.344543959s ago: executing program 3 (id=52): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x16, 0x0, 0xc}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000008", @ANYRES8=r0, @ANYBLOB="010000e60000000000001b0000000700000061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)) eventfd2(0x80000002, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000062c000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/50, 0x32, 0x1, &(0x7f0000000100)}, &(0x7f0000000280)=0xfffffde8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01012bbd7000fedbdf250b000000180001800a00020076658c963f10a4cd7468315f74865f7465616d0000006b09c75052b38485d0d81cf29a0da62bd92bf52307d4e915ef26f8eeaec392a0a30331eb3b28a60a664aca74501ee1bbff2dcac5a313e8b5629b922c899b73ae1512f02555636ed3b3e54d3a302a55f509ec12fe9dd11a9fb7ef00ddfc3631d5436408ea14e0b3ed11e9d1d98b991f78e621548f43729c74a3444a7dac01e60865741257637711097dcf56c0"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000d801c208fd25b8010063e0f3be96127dcd2b5358fc17fa16913f93e6ea638c17fa5ff47f682b09f9093e85f2f60543c2852b7e508dd450d88ccffba054780b5dbd7c3e3b5789de9b8d7135a7b7e2b4463c2fdbb"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() 5.648262548s ago: executing program 1 (id=53): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000200)=""/85, 0xaa) getdents(r5, 0xfffffffffffffffd, 0x58) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000540000000000019078ac1e000183ac1414aa05009078e00000e04e0000000000000000110000e0001b59000000004424000300000000000000000000000000000000ac14140000000000ac"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) getpgrp(r1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200800ffff00"/20, @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.376138973s ago: executing program 0 (id=55): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r3}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}}}}}}, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xff, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x1, 0x40, 0xa, 0xc, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0xd6fb4b85f1208b75, 0x6, 0x20, 0x1, {0x7, 0x25, 0x1, 0x0, 0x6, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0x3, "000000020000000000"}, @as_header={0x7, 0x24, 0x1, 0x16, 0x5, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xff, 0x8, 0xff, {0x7, 0x25, 0x1, 0x0, 0x1, 0x5}}}}}}}]}}, 0x0) 4.931633721s ago: executing program 3 (id=56): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() getrlimit(0xf, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x32314152, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x80000002, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x5, 0x42e, 0x8, 0x3}}, 0xd31600) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x3, 0x1, 0x2, "d6629d03ac3b8f87aca8cfea360c309e42c75753b1ff7c7e26bd5200a7e2b7dd", 0x30323953}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x7f, 0x1a2cc2) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x5) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="350000000000001fabc4c52db53acd4893ab5224", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) 4.652511109s ago: executing program 4 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) lstat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=@v1={0x1000000, [{0x2, 0x2}]}, 0xc, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xc34c6, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 4.284793995s ago: executing program 1 (id=58): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffeb, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c8}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x403, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x20001, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x0, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x4000000, 0x5, 0x800, 0x4, 0x6, 0x8, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x1, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff7, 0x8, 0xfffffff4, 0xc, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0xfffffff5, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0x40000e, 0x2000401, 0x2, 0x8cc5, 0x8, 0x159, 0xd0c, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x20000005, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x9, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 4.018539086s ago: executing program 1 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r0, &(0x7f0000000780)={@void, @void, @ipv6=@generic={0x9, 0x6, "9fafae", 0x1e1, 0x73, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x2, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x89, 0xc, 0x4, 0x6, 0x5, 0x10, 0x1000, [@private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @local, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x2c, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x9, 0x78, "3756cacb739df68b7fb9651e6ba66c705e48a3666afc167e5f8925268e44011230dd6b9ff512c4c6116988f074c967176700aef8fbeed9f2193d9725fdd3c457c44dd6d8882bbe2cad8997520338d8fe18e44409d3a86db7f5674f65c6590e016261172d6d542747af4204ecb3234e2445cb3b7393895836"}, @enc_lim={0x4, 0x1, 0x7e}]}], "75aba5d5eb2b9a5760d23b6a39c6f56e2945711292bf5d453e37deaee681b464500fe1751925bc16f3684e5a59a2a2616c8b12bb6cca4f77ab23d1b70b8d4bb53cfd49051f3acbefe8"}}}, 0x209) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = epoll_create(0x3ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x20000008}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x2008000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x41, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff81}, {0x807, 0x80}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3.395748955s ago: executing program 3 (id=61): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000000000000001, 0x0, 0x2, 0x0, 0x10000000, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000"]) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$UHID_CREATE(r0, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/208, 0xd0, 0x4, 0x3, 0x1, 0x5, 0x8000}}, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) 3.300053638s ago: executing program 4 (id=62): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.947040996s ago: executing program 1 (id=64): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000000)={0x0, 0xd, 0x2, "08a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x101, 0x6, 0x0, 0x2, 0x8, 0xb03, 0x0, 0x8, 0xa40, 0x6, 0x401, 0x2, 0x2, 0x2, 0x6, 0x4, 0x2936, 0x761, 0x6, 0xa5b, 0x7, 0x0, 0x6, 0x0, 0x1, 0x9d63, 0x9, 0x5, 0x1ff, 0x4, 0xd, 0x1ff, 0x1, 0x9, 0x1, 0x3, 0x7ebeb998, 0x3, 0x80000000, 0x9, 0x2, 0x3, 0x4, 0x8, 0xbdf, 0x6, 0x7, 0x1, 0x3, 0x1, 0x5, 0xa0c, 0x8, 0x5, 0xd, 0x6, 0x7, 0x1, 0x1, 0x10001, 0x8, 0xe0e, 0xda38, 0x80000001, 0x7, 0x100, 0x200, 0xed1, 0x4, 0x6, 0x8000, 0x2, 0x3, 0x6, 0x1ff, 0x8, 0x0, 0x1ff, 0x7f, 0x5, 0x0, 0x8, 0x80, 0x8, 0x8, 0x101, 0x3, 0x2, 0x21, 0xfffffffe, 0x81, 0xfffffff1, 0x3, 0xb, 0xcfa, 0xa, 0x3, 0xfffff801, 0xffffffff, 0xfbb, 0x1, 0x6, 0x3, 0x0, 0x5, 0x7, 0x9, 0x7, 0xd, 0x4, 0x4, 0xffffffff, 0x401, 0x2, 0x40, 0xfff, 0x100, 0x71d, 0xfffffff6, 0xc1, 0x8000, 0x83ee, 0x1, 0x6, 0x8, 0x4f, 0x0, 0x7ff, 0x3, 0xa, 0x7, 0x2, 0xfffffff4, 0x0, 0x8, 0xe, 0xad, 0x4000004, 0x54, 0x7, 0x9, 0x0, 0x401, 0x1ca8, 0x0, 0xfff, 0x7, 0x9, 0x7fffffff, 0x4, 0x7, 0x7ffffffd, 0x7, 0x7fffffff, 0x3, 0x4, 0x1, 0x1, 0x5, 0x1, 0x1, 0xf73f, 0x6, 0x81, 0x0, 0x2, 0x0, 0x4, 0x3, 0x6, 0x10000, 0x2, 0x7, 0x0, 0x8e2, 0x8, 0x221, 0x1884, 0x3, 0x38, 0x2, 0x40, 0x7, 0x6, 0x4, 0x4, 0x6, 0x8, 0x7, 0x5, 0x6a, 0x5, 0x5, 0x101, 0x6, 0xa5d5, 0xc3, 0x7, 0x5, 0x8, 0x1, 0x6, 0xc, 0xffffffff, 0x999, 0x3, 0x6, 0x8, 0x9, 0x3, 0x9, 0x68c1, 0x8, 0xfffffffc, 0x9, 0x0, 0x9, 0x900000, 0x3, 0x6, 0x7, 0x0, 0x100, 0x8, 0x7, 0x0, 0x1000, 0x800, 0x477a432f, 0x6, 0x100, 0xfffffff7, 0x3ff, 0x6, 0x7, 0x7fff, 0x68, 0x9, 0x7, 0x5, 0x9, 0x4, 0x2, 0xfffffff7, 0x0, 0x7, 0x401, 0x3, 0xfffffffb, 0x7, 0x8, 0x1, 0x3, 0x10000, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40898}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a40), 0x5d, 0x4000000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010a27bd7000fdffffff800000001400a800fe80000000000000000000000000ffffad8b19fc299aa4ec222d5ad3651a326a175b2e1ba82e1675d3d0e3b5b008c0570400b4ebf31a585fd14b29242bc92047080de64c5f16d40f5f76c60bf39bdc84eebeaae7f8f1dfbfac48db129321e15c58330d9ad91f2a7cddd8722a32da62c6a3f777558612d20d4f2eb60e345aa09e8fe7b2d6836594b25f2bb7d8a84e6cccee637f5038c90b3a4887c38a7d55000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000240)={&(0x7f0000000440)="e2194c6d8dc565fbdf4f14777afb0200c6cd7c0a493634c42f594040add9d65e62d06a66520e34bfcfdcb95511c08ef235bd70672037988000be3d53c528915f7d1aa78ed9b9324e51cc8bf625c90bc51c8c92847ab97adf14f290568f9d306cf815ce1a565f18fc5912f99edbdb1c4111db413187514c58f850b20aeddebbdd182e941c1754c02397090e0ae9224592c8ca179a8fe921855b2e72606cb486dc574b9c9a7a769f07832c6ca6e65de8e6dd81c615ca9feca16e9411d839a00d64d7eb8b00cd0333fab93a2698d5598e2f289217845be510a79c4905f514e5f64238a2", 0xe2}, 0x1, 0x0, 0x0, 0x40044}, 0x4805) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) 2.660757898s ago: executing program 3 (id=65): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000002240)='-', 0x1, 0x4004085, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc989, 0x0, 0x1, 0x274}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$netlink(0x10, 0x3, 0x1a) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000200)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x4e14, 0x912e, 0x41, 0x0, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$MSR(&(0x7f0000000100), 0x4, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="3f2329bd7000fbdbdf250100a1ffbf46eb6b513942c858187415821c62a7ac9eef35c2c817129063ea6f17f9cde24334f123703ab1101c329d1bb30c4b488c1b1302bc4515f3a48189b3ae27fdf7d48d76570a53aa764054f8af2da0976534a45c78d9dc0236200fb32ce9b8fde3306d70d0096baca5557fb552599eece2580e3f1c775e0810b3217c382091c10130679e7e518485816f9ce4ea84e28b871e3109049106c89bbd36d5a87a96d7ac36a003a60d60e56c7176f593d203647f126c8d761b25ede250958560"], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x10) 2.654160799s ago: executing program 2 (id=66): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe37a, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create1(0x6000000) 1.69041886s ago: executing program 0 (id=67): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f00000003c0)=0x10000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x4000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000780068000001889078ac1414bbac1414aafdfe4e2400649078020000740b5621542cf97d02a9ac51000200000004000000a91e619d0e585fa4bfb3df7ec935f8420effb231577a95bf6747e87846e78914c12879e7cdfdddba37eee8e9ed7743104055eb6ba23931509939391a0400000000000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) r6 = syz_pidfd_open(r5, 0x0) process_mrelease(r6, 0x700000000000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x40448d4) r8 = syz_io_uring_setup(0x1d23, &(0x7f0000000200)={0x0, 0xcd1d, 0x2000, 0x0, 0x2aa}, &(0x7f0000000000), &(0x7f0000000140)) r9 = eventfd2(0x6, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000040)=r9, 0x1) io_uring_enter(r8, 0x474a, 0xdfffeff8, 0x48, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sched_getattr(0x0, &(0x7f00000002c0)={0x38}, 0x38, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000040)) 1.391783643s ago: executing program 2 (id=68): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b000000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0xbc}}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.154123765s ago: executing program 3 (id=69): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b000000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0xbc}}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 940.252445ms ago: executing program 2 (id=70): syz_emit_ethernet(0x4e, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x18a, 0x0, 0x0, 0x1000, 0xffff, @loopback}}}}}}, 0x0) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 730.984115ms ago: executing program 0 (id=71): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8915, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 580.40441ms ago: executing program 2 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000010401010000000000000000090002000500014001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000004000004000500010001"], 0x1c}}, 0x0) 502.673501ms ago: executing program 0 (id=73): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x20, 0x17, 0x2, 'pP'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0xf, 0x4, {0x4, 0xa, "867e"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0xf, 0xa7, "2edf209d90cd5eb545d59c36abcd18feca5ff1ea61ad4f30b574e2061fbada429c32c4f9b354b3504efe35a358894bb0fe8d27cef0166322daedb5e900f30332107d754d7b40a27c1e95409737ae77cbdf052c213eaddeae24a776e48b0a3690fc35f431d12ad1f2f9e149c224aabc96aa1a45402b90cdda8187fce86fe2d7df0bfa1273c7d3783ee38f6dfe114d9bd8f49635b1a406bb13f358ba65d0fb2c921e7a40355bd77a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xa, 0x5, 0x81, 0x2, 0x8, 0x5, 0x74, 0x56, 0x0, 0x81, 0x1, 0xf20d}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x62}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 498.063562ms ago: executing program 2 (id=74): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x1c, &(0x7f0000000800)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfdff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) 234.878107ms ago: executing program 4 (id=75): syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x81cbb78d) (fail_nth: 1) 0s ago: executing program 2 (id=76): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x10000000004, 0x0, 0x200, 0x1ff}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x2003ff}, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r6, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) gettid() (async) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe(&(0x7f0000000440)) (async) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x10000000004, 0x0, 0x200, 0x1ff}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x2003ff}, 0x0, 0x0) (async) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r6, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 56.341217][ T30] audit: type=1400 audit(1766940433.058:62): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.364474][ T30] audit: type=1400 audit(1766940433.088:63): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.366690][ T5800] cgroup: Unknown subsys name 'net' [ 56.395200][ T30] audit: type=1400 audit(1766940433.118:64): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.514772][ T5800] cgroup: Unknown subsys name 'cpuset' [ 56.522366][ T5800] cgroup: Unknown subsys name 'rlimit' [ 56.661336][ T30] audit: type=1400 audit(1766940433.378:65): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.687158][ T30] audit: type=1400 audit(1766940433.378:66): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.728055][ T30] audit: type=1400 audit(1766940433.378:67): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.749290][ T30] audit: type=1400 audit(1766940433.408:68): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.770097][ T30] audit: type=1400 audit(1766940433.418:69): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.799457][ T30] audit: type=1400 audit(1766940433.418:70): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.817299][ T5802] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.833692][ T30] audit: type=1400 audit(1766940433.558:71): avc: denied { relabelto } for pid=5802 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 57.765168][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.871745][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.879648][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.887287][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.922164][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.930663][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.937972][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.938324][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.945889][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.953754][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.964361][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.966519][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.980337][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.982321][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.988048][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.995160][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.001833][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.008980][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.022551][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.022898][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.037503][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.042798][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.046053][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.051789][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.066441][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.081504][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.504074][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 60.515779][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 60.538608][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 60.653920][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 60.726910][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 60.756511][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.763673][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.770891][ T5813] bridge_slave_0: entered allmulticast mode [ 60.778267][ T5813] bridge_slave_0: entered promiscuous mode [ 60.789462][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.796651][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.803783][ T5812] bridge_slave_0: entered allmulticast mode [ 60.810449][ T5812] bridge_slave_0: entered promiscuous mode [ 60.817301][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.824392][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.831470][ T5814] bridge_slave_0: entered allmulticast mode [ 60.838207][ T5814] bridge_slave_0: entered promiscuous mode [ 60.850912][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.858031][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.865107][ T5813] bridge_slave_1: entered allmulticast mode [ 60.871624][ T5813] bridge_slave_1: entered promiscuous mode [ 60.884420][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.891516][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.898838][ T5812] bridge_slave_1: entered allmulticast mode [ 60.905474][ T5812] bridge_slave_1: entered promiscuous mode [ 60.912510][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.919537][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.926639][ T5814] bridge_slave_1: entered allmulticast mode [ 60.933240][ T5814] bridge_slave_1: entered promiscuous mode [ 61.008310][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.022719][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.034598][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.043975][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.051077][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.058416][ T5810] bridge_slave_0: entered allmulticast mode [ 61.065138][ T5810] bridge_slave_0: entered promiscuous mode [ 61.073690][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.086844][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.097136][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.106799][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.113994][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.121059][ T5810] bridge_slave_1: entered allmulticast mode [ 61.127790][ T5810] bridge_slave_1: entered promiscuous mode [ 61.202986][ T5813] team0: Port device team_slave_0 added [ 61.208655][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.215763][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.222976][ T5811] bridge_slave_0: entered allmulticast mode [ 61.229557][ T5811] bridge_slave_0: entered promiscuous mode [ 61.237690][ T5812] team0: Port device team_slave_0 added [ 61.244372][ T5814] team0: Port device team_slave_0 added [ 61.251988][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.262435][ T5813] team0: Port device team_slave_1 added [ 61.268161][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.275427][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.282786][ T5811] bridge_slave_1: entered allmulticast mode [ 61.289350][ T5811] bridge_slave_1: entered promiscuous mode [ 61.297062][ T5814] team0: Port device team_slave_1 added [ 61.303784][ T5812] team0: Port device team_slave_1 added [ 61.310509][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.387430][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.394649][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.420843][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.434176][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.443730][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.450657][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.476638][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.488172][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.495163][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.521310][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.533606][ T5810] team0: Port device team_slave_0 added [ 61.539648][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.546666][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.572568][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.590134][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.599772][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.607504][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.633546][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.644744][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.651673][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.677708][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.691987][ T5810] team0: Port device team_slave_1 added [ 61.739592][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.746572][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.772810][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.784857][ T5811] team0: Port device team_slave_0 added [ 61.805297][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.812458][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.838365][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.850151][ T5811] team0: Port device team_slave_1 added [ 61.896806][ T5812] hsr_slave_0: entered promiscuous mode [ 61.902929][ T5812] hsr_slave_1: entered promiscuous mode [ 61.913611][ T5813] hsr_slave_0: entered promiscuous mode [ 61.920276][ T5813] hsr_slave_1: entered promiscuous mode [ 61.926320][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 61.932064][ T5813] Cannot create hsr debugfs directory [ 61.947966][ T5814] hsr_slave_0: entered promiscuous mode [ 61.953950][ T5814] hsr_slave_1: entered promiscuous mode [ 61.959786][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 61.965805][ T5814] Cannot create hsr debugfs directory [ 61.975275][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.982325][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.008500][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.034334][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.041277][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.067299][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.083053][ T5817] Bluetooth: hci0: command tx timeout [ 62.088625][ T5827] Bluetooth: hci3: command tx timeout [ 62.092296][ T5831] Bluetooth: hci2: command tx timeout [ 62.094596][ T5832] Bluetooth: hci4: command tx timeout [ 62.130067][ T5810] hsr_slave_0: entered promiscuous mode [ 62.136125][ T5810] hsr_slave_1: entered promiscuous mode [ 62.141949][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 62.147834][ T5810] Cannot create hsr debugfs directory [ 62.162547][ T5832] Bluetooth: hci1: command tx timeout [ 62.257409][ T5811] hsr_slave_0: entered promiscuous mode [ 62.263468][ T5811] hsr_slave_1: entered promiscuous mode [ 62.269320][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 62.275774][ T5811] Cannot create hsr debugfs directory [ 62.506186][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.523535][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.533815][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.553527][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.581117][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.593820][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.605955][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.623941][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.679009][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.690385][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.701429][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.719634][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.786750][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.797943][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.808431][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.821010][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.890860][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.906020][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.917187][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.930296][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.945677][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.959536][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.990395][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.015050][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.030018][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.037166][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.051947][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.059007][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.076691][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.083753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.105033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.112082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.126770][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.155934][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.176397][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.183538][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.210263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.217324][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.234571][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.303695][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.316422][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.330515][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 63.330527][ T30] audit: type=1400 audit(1766940440.048:84): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.384198][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.404652][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.444670][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.451788][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.496987][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.526008][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.533140][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.561174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.568286][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.604587][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.614089][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.621194][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.688837][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.718022][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.778313][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.810719][ T5810] veth0_vlan: entered promiscuous mode [ 63.851926][ T5810] veth1_vlan: entered promiscuous mode [ 63.951945][ T5812] veth0_vlan: entered promiscuous mode [ 63.984443][ T5810] veth0_macvtap: entered promiscuous mode [ 63.996564][ T5812] veth1_vlan: entered promiscuous mode [ 64.003748][ T5813] veth0_vlan: entered promiscuous mode [ 64.010889][ T5810] veth1_macvtap: entered promiscuous mode [ 64.035978][ T5813] veth1_vlan: entered promiscuous mode [ 64.071367][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.086797][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.098239][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.120855][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.133719][ T5812] veth0_macvtap: entered promiscuous mode [ 64.144413][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.154252][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.162932][ T5827] Bluetooth: hci3: command tx timeout [ 64.163228][ T5827] Bluetooth: hci2: command tx timeout [ 64.163306][ T5817] Bluetooth: hci0: command tx timeout [ 64.163359][ T5832] Bluetooth: hci4: command tx timeout [ 64.186225][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.198054][ T5812] veth1_macvtap: entered promiscuous mode [ 64.232255][ T5813] veth0_macvtap: entered promiscuous mode [ 64.242016][ T5813] veth1_macvtap: entered promiscuous mode [ 64.248881][ T5831] Bluetooth: hci1: command tx timeout [ 64.260109][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.277227][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.293843][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.336464][ T4118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.346229][ T4118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.359144][ T4118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.368765][ T4118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.378398][ T5814] veth0_vlan: entered promiscuous mode [ 64.384498][ T4118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.391302][ T5814] veth1_vlan: entered promiscuous mode [ 64.399319][ T4118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.402026][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.438088][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.470642][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.479534][ T4118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.482200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.490761][ T4118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.510339][ T4118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.523896][ T4118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.536020][ T30] audit: type=1400 audit(1766940441.258:85): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.GEATBf/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.561311][ T30] audit: type=1400 audit(1766940441.258:86): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.588896][ T30] audit: type=1400 audit(1766940441.258:87): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.GEATBf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.616633][ T30] audit: type=1400 audit(1766940441.258:88): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.652049][ T30] audit: type=1400 audit(1766940441.258:89): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.GEATBf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.658948][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.681055][ T30] audit: type=1400 audit(1766940441.288:90): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.GEATBf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.725740][ T5811] veth0_vlan: entered promiscuous mode [ 64.735106][ T30] audit: type=1400 audit(1766940441.288:91): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.744915][ T5814] veth0_macvtap: entered promiscuous mode [ 64.761987][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.767894][ T30] audit: type=1400 audit(1766940441.308:92): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.771165][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.792768][ T30] audit: type=1400 audit(1766940441.308:93): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="gadgetfs" ino=7498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.847224][ T5814] veth1_macvtap: entered promiscuous mode [ 64.859677][ T5811] veth1_vlan: entered promiscuous mode [ 64.941232][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.959250][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.965063][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.979601][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.996141][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.997665][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.012167][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.025276][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.036854][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.066167][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.177485][ T5811] veth0_macvtap: entered promiscuous mode [ 65.206750][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.230394][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.231203][ T5811] veth1_macvtap: entered promiscuous mode [ 65.429989][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.530049][ T5935] atomic_op ffff8880767c9998 conn xmit_atomic 0000000000000000 [ 65.892018][ T4960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.908627][ T4960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.919880][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.931646][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.990999][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.139605][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.269498][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.272265][ T5831] Bluetooth: hci4: command tx timeout [ 66.283436][ T5817] Bluetooth: hci2: command tx timeout [ 66.283602][ T5831] Bluetooth: hci3: command tx timeout [ 66.288978][ T5832] Bluetooth: hci0: command tx timeout [ 66.315302][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.429494][ T5832] Bluetooth: hci1: command tx timeout [ 67.518733][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.454231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.454260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.555681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.556478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.564457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.047487][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 69.047503][ T30] audit: type=1400 audit(1766940444.998:123): avc: denied { read } for pid=5951 comm="syz.1.7" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.082794][ T5827] Bluetooth: hci3: command tx timeout [ 69.083334][ T5817] Bluetooth: hci4: command tx timeout [ 69.088174][ T5138] Bluetooth: hci1: command tx timeout [ 69.098898][ T5832] Bluetooth: hci0: command tx timeout [ 69.104351][ T5831] Bluetooth: hci2: command tx timeout [ 69.123549][ T30] audit: type=1400 audit(1766940444.998:124): avc: denied { open } for pid=5951 comm="syz.1.7" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.149247][ T30] audit: type=1400 audit(1766940445.158:125): avc: denied { write } for pid=5951 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.212084][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.228467][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.339633][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.348293][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.354157][ T30] audit: type=1400 audit(1766940446.078:126): avc: denied { create } for pid=5957 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.417642][ T30] audit: type=1400 audit(1766940446.108:127): avc: denied { create } for pid=5957 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.496716][ T5960] kvm: user requested TSC rate below hardware speed [ 69.590399][ T30] audit: type=1400 audit(1766940446.108:128): avc: denied { read } for pid=5957 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.612394][ T30] audit: type=1400 audit(1766940446.128:129): avc: denied { append } for pid=5957 comm="syz.4.9" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.655439][ T30] audit: type=1400 audit(1766940446.178:130): avc: denied { create } for pid=5959 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.062651][ T30] audit: type=1400 audit(1766940446.188:131): avc: denied { write } for pid=5959 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.146803][ T5958] netlink: 830 bytes leftover after parsing attributes in process `syz.4.9'. [ 70.372574][ T30] audit: type=1400 audit(1766940446.198:132): avc: denied { setopt } for pid=5959 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.489186][ T5974] overlayfs: missing 'workdir' [ 70.603710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.706043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.258161][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.266854][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.833834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.943615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.027649][ T5981] overlayfs: missing 'workdir' [ 72.082290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.952268][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.512319][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 74.577628][ T24] usb 1-1: device descriptor read/all, error -71 [ 74.592279][ T5923] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.683075][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 74.683091][ T30] audit: type=1400 audit(1766940451.408:147): avc: denied { bind } for pid=5992 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.719228][ T30] audit: type=1400 audit(1766940451.438:148): avc: denied { setopt } for pid=5992 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.756590][ T30] audit: type=1400 audit(1766940451.438:149): avc: denied { write } for pid=5992 comm="syz.4.16" path="socket:[8769]" dev="sockfs" ino=8769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.787776][ T30] audit: type=1400 audit(1766940451.438:150): avc: denied { read } for pid=5992 comm="syz.4.16" path="socket:[8769]" dev="sockfs" ino=8769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.819901][ T5923] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 74.819945][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.848708][ T30] audit: type=1400 audit(1766940451.558:151): avc: denied { create } for pid=5992 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.848750][ T30] audit: type=1400 audit(1766940451.558:152): avc: denied { write } for pid=5992 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.891992][ T5999] syz.0.17 (5999): attempted to duplicate a private mapping with mremap. This is not supported. [ 74.921183][ T5999] futex_wake_op: syz.0.17 tries to shift op by -1; fix this program [ 74.976457][ T5998] infiniband syz1: set active [ 74.976484][ T5998] infiniband syz1: added syz_tun [ 74.983734][ T30] audit: type=1400 audit(1766940451.708:153): avc: denied { create } for pid=6000 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.010203][ T30] audit: type=1400 audit(1766940451.728:154): avc: denied { create } for pid=5991 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.092693][ T5998] RDS/IB: syz1: added [ 75.092834][ T5998] smc: adding ib device syz1 with port count 1 [ 75.092871][ T5998] smc: ib device syz1 port 1 has no pnetid [ 75.685112][ T5923] usb 3-1: config 0 descriptor?? [ 75.878838][ T30] audit: type=1400 audit(1766940452.508:155): avc: denied { create } for pid=6000 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.883031][ T30] audit: type=1400 audit(1766940452.578:156): avc: denied { unlink } for pid=6000 comm="syz.1.8" name="#1" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.034209][ T5923] kaweth 3-1:0.0: Firmware present in device. [ 76.104876][ T5923] kaweth 3-1:0.0: Statistics collection: 0 [ 76.104890][ T5923] kaweth 3-1:0.0: Multicast filter limit: 0 [ 76.104898][ T5923] kaweth 3-1:0.0: MTU: 0 [ 76.104905][ T5923] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 76.275556][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 76.324969][ T5994] team1: entered promiscuous mode [ 76.325001][ T5994] team1: entered allmulticast mode [ 76.394283][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 76.779672][ T5994] team2: entered promiscuous mode [ 76.902250][ T5994] team2: entered allmulticast mode [ 76.973166][ T5923] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 76.978507][ T5994] Zero length message leads to an empty skb [ 77.000846][ T5923] usb 3-1: USB disconnect, device number 2 [ 77.382713][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.555374][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 77.583798][ T5825] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 77.612021][ T5825] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 77.639591][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.962277][ T49] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.339235][ T89] cfg80211: failed to load regulatory.db [ 82.471291][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 82.471305][ T30] audit: type=1400 audit(1766940459.188:167): avc: denied { open } for pid=6010 comm="syz.1.18" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.543001][ T5825] usb 2-1: string descriptor 0 read error: -71 [ 82.553995][ T49] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 82.568516][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.620817][ T49] usb 5-1: config 0 descriptor?? [ 82.662841][ T30] audit: type=1400 audit(1766940459.378:168): avc: denied { read } for pid=6032 comm="syz.2.20" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.806149][ T49] kaweth 5-1:0.0: Firmware present in device. [ 83.082333][ T5825] usb 2-1: USB disconnect, device number 2 [ 83.102444][ T49] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 83.128839][ T30] audit: type=1400 audit(1766940459.378:169): avc: denied { open } for pid=6032 comm="syz.2.20" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.209127][ T6044] tmpfs: Unknown parameter 'gI' [ 83.228828][ T6044] warning: `syz.0.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.242507][ T49] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 83.311061][ T49] usb 5-1: USB disconnect, device number 3 [ 83.464364][ T30] audit: type=1400 audit(1766940459.848:170): avc: denied { open } for pid=6040 comm="syz.1.25" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 83.488000][ T30] audit: type=1400 audit(1766940460.018:171): avc: denied { mounton } for pid=6040 comm="syz.1.25" path="/5/bus" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.511678][ T6041] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 83.540433][ T30] audit: type=1400 audit(1766940460.048:172): avc: denied { name_bind } for pid=6035 comm="syz.3.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.684763][ T30] audit: type=1400 audit(1766940460.048:173): avc: denied { node_bind } for pid=6035 comm="syz.3.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.210699][ T30] audit: type=1400 audit(1766940461.918:174): avc: denied { relabelfrom } for pid=6055 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.262441][ T30] audit: type=1400 audit(1766940461.918:175): avc: denied { relabelto } for pid=6055 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.292217][ T49] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.463146][ T49] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 85.612592][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.633265][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.707616][ T49] usb 3-1: config 0 descriptor?? [ 85.834644][ T6057] gre1: entered promiscuous mode [ 85.992333][ T30] audit: type=1400 audit(1766940462.678:176): avc: denied { read write } for pid=6059 comm="syz.0.31" name="vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 86.368868][ T49] kaweth 3-1:0.0: Firmware present in device. [ 86.452278][ T49] kaweth 3-1:0.0: Statistics collection: 0 [ 86.478235][ T49] kaweth 3-1:0.0: Multicast filter limit: 0 [ 86.502271][ T49] kaweth 3-1:0.0: MTU: 0 [ 86.506540][ T49] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 86.823900][ T6064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.839960][ T6064] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 87.073724][ T6065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.122336][ T6065] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.200092][ T49] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 87.222519][ T49] usb 3-1: USB disconnect, device number 3 [ 87.336969][ T6065] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.545455][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 87.545469][ T30] audit: type=1400 audit(1766940464.268:184): avc: denied { create } for pid=6070 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 87.644207][ T6064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.650838][ T6065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.662164][ T6064] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 87.689818][ T6065] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.868056][ T6065] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.046410][ T30] audit: type=1400 audit(1766940464.768:185): avc: denied { append } for pid=6070 comm="syz.1.32" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.190349][ T6085] overlayfs: missing 'workdir' [ 89.237334][ T6065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.245665][ T6065] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.255843][ T6064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.261721][ T6064] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 89.272300][ T30] audit: type=1400 audit(1766940465.948:186): avc: denied { open } for pid=6070 comm="syz.1.32" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.346975][ T6064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.385141][ T6064] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 89.436461][ T30] audit: type=1400 audit(1766940466.078:187): avc: denied { ioctl } for pid=6070 comm="syz.1.32" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.700113][ T6065] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.861634][ T6064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.869071][ T6064] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 90.349974][ T30] audit: type=1400 audit(1766940467.018:188): avc: denied { append } for pid=6088 comm="syz.2.33" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.545254][ T30] audit: type=1400 audit(1766940467.038:189): avc: denied { shutdown } for pid=6089 comm="syz.4.36" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.670210][ T30] audit: type=1400 audit(1766940467.038:190): avc: denied { read } for pid=6089 comm="syz.4.36" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.822186][ T30] audit: type=1400 audit(1766940467.208:191): avc: denied { mounton } for pid=6088 comm="syz.2.33" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 91.039783][ T6104] netlink: 72 bytes leftover after parsing attributes in process `syz.4.36'. [ 91.060853][ T6094] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd2": -EINTR [ 91.469889][ T30] audit: type=1400 audit(1766940467.268:192): avc: denied { setopt } for pid=6088 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.658222][ T30] audit: type=1400 audit(1766940467.268:193): avc: denied { create } for pid=6088 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.748427][ T30] audit: type=1400 audit(1766940467.268:194): avc: denied { ioctl } for pid=6088 comm="syz.2.33" path="socket:[8886]" dev="sockfs" ino=8886 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.906844][ T30] audit: type=1400 audit(1766940467.738:195): avc: denied { read write } for pid=6102 comm="syz.0.37" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.984756][ T30] audit: type=1400 audit(1766940467.738:196): avc: denied { open } for pid=6102 comm="syz.0.37" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.012227][ T5984] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.184413][ T30] audit: type=1400 audit(1766940467.898:197): avc: denied { write } for pid=6102 comm="syz.0.37" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.243676][ T5984] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 93.260548][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.299371][ T30] audit: type=1400 audit(1766940467.898:198): avc: denied { open } for pid=6102 comm="syz.0.37" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.395681][ T5984] usb 3-1: config 0 descriptor?? [ 93.424297][ T30] audit: type=1400 audit(1766940467.898:199): avc: denied { ioctl } for pid=6102 comm="syz.0.37" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.569051][ T30] audit: type=1400 audit(1766940467.968:200): avc: denied { create } for pid=6102 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.645568][ T30] audit: type=1400 audit(1766940467.978:201): avc: denied { getopt } for pid=6102 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.727205][ T30] audit: type=1400 audit(1766940468.288:202): avc: denied { connect } for pid=6106 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.789573][ T30] audit: type=1400 audit(1766940468.288:203): avc: denied { setopt } for pid=6106 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.789591][ T5984] kaweth 3-1:0.0: Firmware present in device. [ 94.009518][ T5984] kaweth 3-1:0.0: Statistics collection: 0 [ 94.028892][ T5984] kaweth 3-1:0.0: Multicast filter limit: 0 [ 94.141824][ T5984] kaweth 3-1:0.0: MTU: 0 [ 94.155081][ T5984] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 94.803855][ T5984] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 96.684269][ T5984] usb 3-1: USB disconnect, device number 4 [ 97.052262][ T5984] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.273321][ T5984] usb 2-1: Using ep0 maxpacket: 32 [ 97.343377][ T5984] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 97.372222][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.394209][ T5984] usb 2-1: config 0 descriptor?? [ 97.422803][ T5984] gspca_main: sunplus-2.14.0 probing 041e:400b [ 97.982262][ T5955] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.101128][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 98.101142][ T30] audit: type=1400 audit(1766940474.818:225): avc: denied { write } for pid=6166 comm="syz.0.47" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.191659][ T30] audit: type=1400 audit(1766940474.908:226): avc: denied { ioctl } for pid=6166 comm="syz.0.47" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.236634][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 98.266330][ T5955] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.296437][ T5955] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.327234][ T5955] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 98.352208][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.372019][ T5955] usb 5-1: config 0 descriptor?? [ 98.400324][ T30] audit: type=1400 audit(1766940475.118:227): avc: denied { mounton } for pid=6173 comm="syz.0.49" path="/11/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.429161][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 98.499968][ T30] audit: type=1400 audit(1766940475.178:228): avc: denied { watch watch_reads } for pid=6176 comm="syz.3.48" path="/" dev="mqueue" ino=4899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.572810][ T5984] gspca_sunplus: reg_w_riv err -71 [ 98.590392][ T5984] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 98.622551][ T5984] usb 2-1: USB disconnect, device number 3 [ 98.764484][ T30] audit: type=1400 audit(1766940475.488:229): avc: denied { create } for pid=6181 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.837205][ T30] audit: type=1400 audit(1766940475.488:230): avc: denied { connect } for pid=6181 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.012259][ T30] audit: type=1400 audit(1766940475.588:231): avc: denied { append } for pid=6191 comm="syz.3.52" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 99.494951][ T5955] usbhid 5-1:0.0: can't add hid device: -71 [ 99.504103][ T5955] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.515044][ T5955] usb 5-1: USB disconnect, device number 4 [ 99.878679][ T30] audit: type=1400 audit(1766940476.558:232): avc: denied { connect } for pid=6198 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.279407][ T30] audit: type=1400 audit(1766940476.958:233): avc: denied { block_suspend } for pid=6204 comm="syz.2.54" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.332612][ T30] audit: type=1400 audit(1766940477.058:234): avc: denied { read write } for pid=6204 comm="syz.2.54" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.547318][ T5955] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.642363][ T6218] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 100.666629][ T6218] loop7: detected capacity change from 0 to 2640 [ 100.678033][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.686182][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.694665][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.702668][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.716645][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.724785][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.732816][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.740729][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.748592][ T6218] ldm_validate_partition_table(): Disk read failed. [ 100.755297][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.862207][ T6218] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.870079][ T6218] Dev loop7: unable to read RDB block 0 [ 100.875809][ T6218] loop7: unable to read partition table [ 100.881570][ T6218] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 100.965544][ T6219] Invalid logical block size (5) [ 100.982593][ T6222] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 101.036254][ T6224] ======================================================= [ 101.036254][ T6224] WARNING: The mand mount option has been deprecated and [ 101.036254][ T6224] and is ignored by this kernel. Remove the mand [ 101.036254][ T6224] option from the mount to silence this warning. [ 101.036254][ T6224] ======================================================= [ 101.168639][ T5955] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.180126][ T5955] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.195164][ T5955] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.209562][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.766539][ T6207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.841438][ T5955] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.092696][ T6241] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 102.154461][ T3956] smc: removing ib device syz1 [ 102.175784][ T9] usb 1-1: USB disconnect, device number 4 [ 102.247481][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.258187][ T5955] syz1: Port: 1 Link DOWN [ 102.274557][ T6242] erspan1: entered allmulticast mode [ 102.279906][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.303712][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.324633][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.345382][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.355044][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.376801][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.392567][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.404755][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.412629][ T49] hid-generic 0004:0003:0001.0001: unknown main item tag 0x0 [ 102.442270][ T49] hid-generic 0004:0003:0001.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 102.582208][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.660457][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.742362][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.751026][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.823583][ T5923] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 102.842208][ T5923] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 102.886694][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.904631][ T5923] usb 2-1: config 0 descriptor?? [ 102.977540][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.012471][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.047000][ T9] usb 1-1: config 1 has no interface number 1 [ 103.071609][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 103.384149][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 103.434273][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 103.462199][ T9] usb 1-1: string descriptor 0 read error: -71 [ 103.468546][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.495556][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.562297][ T9] usb 1-1: can't set config #1, error -71 [ 103.596377][ T9] usb 1-1: USB disconnect, device number 5 [ 103.666869][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 103.666883][ T30] audit: type=1400 audit(1766940480.388:243): avc: denied { ioctl } for pid=6250 comm="syz.1.64" path="socket:[9957]" dev="sockfs" ino=9957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.724756][ T30] audit: type=1400 audit(1766940480.428:244): avc: denied { bind } for pid=6271 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.799825][ T30] audit: type=1400 audit(1766940480.428:245): avc: denied { name_bind } for pid=6271 comm="syz.0.67" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.886137][ T30] audit: type=1400 audit(1766940480.428:246): avc: denied { node_bind } for pid=6271 comm="syz.0.67" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 103.960002][ T30] audit: type=1400 audit(1766940480.438:247): avc: denied { bind } for pid=6271 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.026951][ T30] audit: type=1400 audit(1766940480.438:248): avc: denied { name_bind } for pid=6271 comm="syz.0.67" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.129576][ T30] audit: type=1400 audit(1766940480.438:249): avc: denied { node_bind } for pid=6271 comm="syz.0.67" saddr=172.30.1.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 104.192533][ T30] audit: type=1400 audit(1766940480.438:250): avc: denied { setopt } for pid=6271 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.310591][ T30] audit: type=1400 audit(1766940480.438:251): avc: denied { write } for pid=6271 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.379991][ T30] audit: type=1400 audit(1766940480.438:252): avc: denied { connect } for pid=6271 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.082216][ T49] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.215701][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.269114][ T49] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 105.300235][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.332047][ T3956] ------------[ cut here ]------------ [ 105.337931][ T3956] GID entry ref leak for dev syz1 index 2 ref=1 [ 105.344216][ T3956] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#1: kworker/u8:11/3956 [ 105.355965][ T3956] Modules linked in: [ 105.360106][ T3956] CPU: 1 UID: 0 PID: 3956 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 105.369830][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.379937][ T3956] Workqueue: ib-unreg-wq ib_unregister_work [ 105.385855][ T3956] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 105.391919][ T3956] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 da 65 4d f9 48 8d 3d 43 ad 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 c0 65 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 105.411605][ T3956] RSP: 0018:ffffc9000d917ac8 EFLAGS: 00010293 [ 105.417773][ T3956] RAX: 0000000000000000 RBX: ffff88807b5d1e00 RCX: 0000000000000001 [ 105.425755][ T3956] RDX: 0000000000000002 RSI: ffff8880333b5640 RDI: ffffffff90952e30 [ 105.433727][ T3956] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100f6c2f80 [ 105.441684][ T3956] R10: ffff88807b617c03 R11: ffffffff8228bf3b R12: ffffed100f6ba3db [ 105.449802][ T3956] R13: ffff888079454000 R14: 0000000000000002 R15: dffffc0000000000 [ 105.457825][ T3956] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 105.466766][ T3956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.473340][ T3956] CR2: 00007f7454d156c0 CR3: 000000005e843000 CR4: 00000000003526f0 [ 105.481288][ T3956] Call Trace: [ 105.484565][ T3956] [ 105.487486][ T3956] ib_device_release+0xef/0x1e0 [ 105.492337][ T3956] ? __pfx_ib_device_release+0x10/0x10 [ 105.497780][ T3956] device_release+0xa4/0x240 [ 105.502386][ T3956] kobject_put+0x1ef/0x6f0 [ 105.506786][ T3956] put_device+0x1f/0x30 [ 105.510914][ T3956] process_one_work+0x9ba/0x1b20 [ 105.515851][ T3956] ? __pfx_process_one_work+0x10/0x10 [ 105.521232][ T3956] ? assign_work+0x1a0/0x250 [ 105.525845][ T3956] worker_thread+0x6c8/0xf10 [ 105.530432][ T3956] ? __kthread_parkme+0x19e/0x250 [ 105.535446][ T3956] ? __pfx_worker_thread+0x10/0x10 [ 105.540533][ T3956] kthread+0x3c5/0x780 [ 105.544592][ T3956] ? __pfx_kthread+0x10/0x10 [ 105.549169][ T3956] ? rcu_is_watching+0x12/0xc0 [ 105.553940][ T3956] ? __pfx_kthread+0x10/0x10 [ 105.558521][ T3956] ret_from_fork+0x983/0xb10 [ 105.563117][ T3956] ? __pfx_ret_from_fork+0x10/0x10 [ 105.568210][ T3956] ? __switch_to+0x7af/0x10d0 [ 105.572883][ T3956] ? __pfx_kthread+0x10/0x10 [ 105.577466][ T3956] ret_from_fork_asm+0x1a/0x30 [ 105.582234][ T3956] [ 105.585244][ T3956] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.592506][ T3956] CPU: 1 UID: 0 PID: 3956 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 105.602014][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.612046][ T3956] Workqueue: ib-unreg-wq ib_unregister_work [ 105.617933][ T3956] Call Trace: [ 105.621185][ T3956] [ 105.624093][ T3956] dump_stack_lvl+0x3d/0x1f0 [ 105.628671][ T3956] vpanic+0x640/0x6f0 [ 105.632628][ T3956] ? gid_table_release_one+0x1ad/0x450 [ 105.638057][ T3956] panic+0xca/0xd0 [ 105.641769][ T3956] ? __pfx_panic+0x10/0x10 [ 105.646181][ T3956] ? check_panic_on_warn+0x1f/0xb0 [ 105.651293][ T3956] check_panic_on_warn+0xab/0xb0 [ 105.656216][ T3956] __warn+0x108/0x3c0 [ 105.660176][ T3956] __report_bug+0x2a0/0x520 [ 105.664652][ T3956] ? gid_table_release_one+0x1ad/0x450 [ 105.670099][ T3956] ? __pfx___report_bug+0x10/0x10 [ 105.675110][ T3956] report_bug_entry+0xe1/0x290 [ 105.679848][ T3956] ? gid_table_release_one+0x1b6/0x450 [ 105.685296][ T3956] handle_bug+0x18a/0x260 [ 105.689610][ T3956] exc_invalid_op+0x17/0x50 [ 105.694109][ T3956] asm_exc_invalid_op+0x1a/0x20 [ 105.698950][ T3956] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 105.705005][ T3956] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 da 65 4d f9 48 8d 3d 43 ad 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 c0 65 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 105.724593][ T3956] RSP: 0018:ffffc9000d917ac8 EFLAGS: 00010293 [ 105.730639][ T3956] RAX: 0000000000000000 RBX: ffff88807b5d1e00 RCX: 0000000000000001 [ 105.738587][ T3956] RDX: 0000000000000002 RSI: ffff8880333b5640 RDI: ffffffff90952e30 [ 105.746535][ T3956] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100f6c2f80 [ 105.754485][ T3956] R10: ffff88807b617c03 R11: ffffffff8228bf3b R12: ffffed100f6ba3db [ 105.762437][ T3956] R13: ffff888079454000 R14: 0000000000000002 R15: dffffc0000000000 [ 105.770387][ T3956] ? kasan_save_free_info+0x3b/0x60 [ 105.775571][ T3956] ? gid_table_release_one+0x1a6/0x450 [ 105.781025][ T3956] ib_device_release+0xef/0x1e0 [ 105.785864][ T3956] ? __pfx_ib_device_release+0x10/0x10 [ 105.791309][ T3956] device_release+0xa4/0x240 [ 105.795875][ T3956] kobject_put+0x1ef/0x6f0 [ 105.800270][ T3956] put_device+0x1f/0x30 [ 105.804397][ T3956] process_one_work+0x9ba/0x1b20 [ 105.809321][ T3956] ? __pfx_process_one_work+0x10/0x10 [ 105.814679][ T3956] ? assign_work+0x1a0/0x250 [ 105.819249][ T3956] worker_thread+0x6c8/0xf10 [ 105.823817][ T3956] ? __kthread_parkme+0x19e/0x250 [ 105.828821][ T3956] ? __pfx_worker_thread+0x10/0x10 [ 105.833925][ T3956] kthread+0x3c5/0x780 [ 105.837992][ T3956] ? __pfx_kthread+0x10/0x10 [ 105.842588][ T3956] ? rcu_is_watching+0x12/0xc0 [ 105.847327][ T3956] ? __pfx_kthread+0x10/0x10 [ 105.851910][ T3956] ret_from_fork+0x983/0xb10 [ 105.856477][ T3956] ? __pfx_ret_from_fork+0x10/0x10 [ 105.861560][ T3956] ? __switch_to+0x7af/0x10d0 [ 105.866214][ T3956] ? __pfx_kthread+0x10/0x10 [ 105.870775][ T3956] ret_from_fork_asm+0x1a/0x30 [ 105.875532][ T3956] [ 105.878840][ T3956] Kernel Offset: disabled [ 105.883143][ T3956] Rebooting in 86400 seconds..