last executing test programs: 14.163780452s ago: executing program 3 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x0, @private2}}, 0x0, 0x0, 0x47, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0xfffffffffffffffe, &(0x7f0000000200)=@secondary) ioctl$XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f00000004c0)={r3, &(0x7f0000000040)='/dev/kvm\x00', 0x2e0002, &(0x7f0000000080)={@_ha_fsid={[0xd8b3, 0x5]}, {0x79, 0x6, 0x4, 0x1d}}, 0x5, 0x0, 0x0}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80400004000080, 0x0, 0x8, 0x0, 0x4, 0xffffffffffffffff, 0xc000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000340)="c462119e2e470f06c4e3d16d8e74db0000bb0fc718260f01c5450fc72e0fc71b470f00d9c744240000000080c7442402c0000000c7442406000000000f01142426470f07", 0x44}], 0x1, 0x8, &(0x7f0000000540)=[@cr4={0x1, 0x2580}], 0x1) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66edd9ee0f01c3", 0x30}], 0x40, 0x14, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff030000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000048156efbb970f448131ec209cfcb54bbfc71dda6a29542166769f2cd869c699c05d09466014ee4497a4a2d499114db7b5ef9b71df99d2ca26e422dd9f3adb368369925827b50329e89bc5c021f47e7b68fec302a0533e934fd97814781d185a3565396debc634f390a8b6da17034f6ee3519580d2fe89481f031e9137224c1a1e5d9382e759c8b8bd3d4bd6a3f7944881a534ca6413257ee75f2ee5d06eb29e103454530ff124aeee50e30d30b09ac"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000081c) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x76}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x324) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11.91897406s ago: executing program 4 (id=26): mknod(0x0, 0x0, 0x4001000) r0 = fanotify_init(0x0, 0x0) io_setup(0xedf, &(0x7f0000001740)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x5, 0x4, {{0x5, 0x4, 0x2, 0x1f, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast1, @empty}}}}) 10.995709019s ago: executing program 3 (id=29): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) setreuid(0x0, 0xee01) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac141430d34f"], 0x50}}], 0x1, 0x10) 9.924828753s ago: executing program 2 (id=30): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f0000001080)={0x5a7ccc6daee55235, r0}, &(0x7f0000001100)={0x9, 0x5, 0xb61, 0x7, 0x3, 0xdf}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a0000009bc8a3d0e8da39b17993ff43ad778013978839ed10c4d05be78a46f2db36edeef6a3a781c46a9fce73d48e6bf738c89ef2ae19dc8b0a1f95c5883fa8d6bbb319f3907e0ae3dd2264386fbe7c683de00a16ca4e829acbba52c7473a8723bcc1cbe786f7e7db0886506cfd7f6305aa7481c9c916cd31e3c10a70d3ec1182eb95ad3e5fcfb8cc36ecfed1604887e0b4e8bb255556670bb276d5e61cc51ec7d71221bd1ace6e"], 0x44}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 9.89554143s ago: executing program 3 (id=31): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7fdffff1810ef00", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000500000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b326a01020301090224000100041000090456100289f0b40809050602ff0309000009058206"], 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 9.691479721s ago: executing program 4 (id=33): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r6}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002000010000000000fbd3df250a106b00060000031f00020014000200fc02000000000000000000000000000149000100200100"/68], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x18080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\xa2'}, {0x20, '\x00'}, {0x20, '[,'}, {}]}, 0xef9) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 8.116895153s ago: executing program 2 (id=34): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4}, 0x38) 7.642077264s ago: executing program 1 (id=35): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb, 0x80000) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x80000000}}, 0x0, 0x80ea, 0x439, 0x0, 0x12}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 6.417132626s ago: executing program 1 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000003680)={0x0, 0x5f, &(0x7f0000003140)}, 0x4004810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x44094) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) 5.892190458s ago: executing program 3 (id=37): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mlock(&(0x7f00007a9000/0x3000)=nil, 0x3000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6080, 0x0) syz_emit_vhci(&(0x7f0000000a00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x428}}}, 0x7) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04001220"], 0x7) r4 = socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)=0xffffffffffffff3c) sendmsg$nl_route(r4, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.451230343s ago: executing program 0 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x46, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x200}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0xfe}}, 0x8f8c, 0x3ff, @device_a, {}, @val, @val={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x5}}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = gettid() prlimit64(r3, 0x4, &(0x7f0000000040)={0x7, 0x2}, &(0x7f00000000c0)) 5.194347914s ago: executing program 0 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$unix(0x1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x1000000) 5.016301364s ago: executing program 2 (id=40): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/cgroups\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4105, 0x1009}], 0x1, 0x3b, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r2, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="39b73c23faa621f10c9457864265483377c393230402c600d5e422df31033a", 0x1f}, {&(0x7f0000000340)="3ae5be9f", 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="72753efaf7fbc6d9bbb3e910c50720d42aae3bbd6903ceda57ae854dbb0b6d0a5dd0be", 0x23}], 0x1}}], 0x2, 0x48045) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) recvmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)=""/140, 0x8c}, {&(0x7f0000000140)}], 0x2}, 0xb}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000580)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/157, 0x9d}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f0000000680)=""/102, 0x66}], 0x4, &(0x7f00000019c0)=""/198, 0xc6}, 0xfff}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)=""/17, 0x11}, {&(0x7f0000001ac0)=""/176, 0xb0}, {&(0x7f0000000900)=""/11, 0xb}], 0x3}, 0x7}, {{&(0x7f0000001bc0)=@caif=@dgm, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c40)=""/109, 0x6d}, {&(0x7f0000001cc0)=""/255, 0xff}, {&(0x7f0000001dc0)=""/86, 0x56}, {&(0x7f0000001e40)=""/197, 0xc5}, {&(0x7f0000001f40)=""/108, 0x6c}], 0x5, &(0x7f0000002040)=""/170, 0xaa}, 0x78aa}], 0x4, 0x40000000, &(0x7f0000002200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x3000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f00000001c0)={0x0, 0xc8a1, 0x200, 0x8, 0x1}) mount$9p_fd(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280), 0x1000002, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@afid}, {@noextend}, {@version_L}, {@cache_none}], [{@pcr={'pcr', 0x3d, 0x18}}, {@appraise_type}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'maps\x00'}}, {@appraise}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)={0x5c, r9, 0x9a2ea8ba8fb8e27f, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5421a57089fccc2f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="824217ea84b94dcd8f5057cc7bb01bfe"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4820d8a322e49a0601ccca64cf18c98d"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44001}, 0x8c0) 4.981722406s ago: executing program 0 (id=41): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x44, '\x00', @data=0x8, 0x8}, {0x6, '\x00', @buffer={"8f01000000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e83", 0x20}, 0x1c}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4815}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.69991393s ago: executing program 4 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 4.236027546s ago: executing program 2 (id=43): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) ppoll(&(0x7f0000000080)=[{r0, 0xa}], 0x1, 0x0, 0x0, 0x0) close(r0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe2(0x0, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x40044}, 0x200088c0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="0805ff0708000000152a180000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300002f9b7be020b7d5adc781b5fd5e6b4e8ad17dc65f0a9f75684fecd414571029962f312a1697535f125159672e37f688c3119cc2ec9ab8a93e868df597a7437a271b36df1ef9527fda70a277797ea0fdfab39e7db7df44682c888d0606e8f3770750cbcced71956ec3a69dce347cdc8da651ae209b5534b2c5e8b3878417fbb2c2b5a867a6474f98ec5ac67648efe68dedd8ebd1028e9f1db0714d0194e3cdb1f5168d41d3111634050d5200d4fea45fe237f540835944cc3b69f478f357dc3d4901503d3c13f5a0c4a3756173ace3d7f5da40407a64faf29f3ae8fa61266a2559347a8d1b15772b7a5a980c8dc65683ddedbc33aad4", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x79, &(0x7f0000000240)=""/121, 0x40f00, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xb, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x40000005, 0x3, 0x3}, {0x3, 0x1, 0xe, 0x2}, {0x2, 0x4, 0x0, 0x1}, {0x0, 0x3, 0x2, 0xb}, {0x1, 0x2, 0x10, 0x9}, {0x3, 0x4, 0xb, 0xc}, {0x4, 0x1, 0x9, 0x6}]}, 0x94) r6 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5c]}, 0x8, 0x0) r7 = syz_io_uring_setup(0x39, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, 0x0, 0x1) msgctl$IPC_INFO(0x0, 0x3, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r8, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x7, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0xa}, {0x7, 0x3, 0x2, '\x00', 0xa3}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 3.892155124s ago: executing program 0 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000703000200080002000700339d060001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x240400c4) 3.344632513s ago: executing program 2 (id=46): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(0x0, r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4008840) openat$hwrng(0xffffffffffffff9c, 0x0, 0x169780, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.09663949s ago: executing program 0 (id=47): r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet(0x2, 0xa, 0x262) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xf, 0x4, 0x2, 0x40, 0x9, 0x3e, 0x8}, 0xc) epoll_create1(0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 1.850131931s ago: executing program 1 (id=48): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chroot(&(0x7f0000000000)='./bus\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004014) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async) eventfd2(0x43, 0x1) 1.565882918s ago: executing program 0 (id=49): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb, 0x80000) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socket(0x28, 0x3, 0x8) socket(0x40000000015, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) shutdown(0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1", 0x17, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="58d052799202003bc161b11518b712c09c5ed6389e", 0x15, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x80000000}}, 0x0, 0x80ea, 0x439, 0x0, 0x12}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) 1.534080013s ago: executing program 4 (id=50): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4}, 0x38) 1.355102547s ago: executing program 3 (id=51): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0xe6, 0x18, 0xf7, 0x8, 0xcf2, 0x6250, 0x8b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x8, 0xa0, 0x75, "", [{{0x9, 0x4, 0xa4, 0x3, 0x0, 0x82, 0x41, 0x46, 0x10}}]}}]}}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000000)=""/50, 0x32}], 0x2, &(0x7f00000002c0)=""/225, 0xe1}, 0x9}, {{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f0000000780)=""/40, 0x28}, {&(0x7f00000007c0)=""/119, 0x77}], 0x8}, 0x82}, {{&(0x7f00000008c0)=@alg, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/67, 0x43}, {&(0x7f00000009c0)}], 0x2, &(0x7f0000000a40)=""/255, 0xff}, 0x4e53}], 0x3, 0x2042, &(0x7f0000000c00)) syz_usb_connect$midi(0x4, 0xdd, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x1, 0x1, 0x0, 0x40, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x2f, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xff, 0x2}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0x9, 0x5, [{0x80}, {0xff, 0x5}, {0x1, 0x7}, {0x5, 0x7}, {0x8, 0x5}], 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x81}, @midi_out_jack={0xb, 0x24, 0x3, 0xc29f7eec9bb13124, 0x0, 0x2, [{0x81, 0x9}, {0x4, 0xfb}], 0x26}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xfffe, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0x5}], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0xab, 0x3, {0x12, 0x25, 0x1, 0xe, "8cc38fb91b802c3e0021b27743f9"}}}, {{0x9, 0x5, 0x6, 0x3, 0xe68a616531c7b6bf, 0x7, 0x3, 0x40, {0x8, 0x25, 0x1, 0x4, "8a43622b"}}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x0, 0xc, 0xc, {0xe, 0x25, 0x1, 0xa, "327c1372c58144442b67"}}}, {{0x9, 0x5, 0xd, 0x10, 0x230, 0xff, 0x40, 0x9, {0x12, 0x25, 0x1, 0xe, "cf254e201de9abc428e3878a122e"}}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x3, 0x2, 0x8, {0x5, 0x25, 0x1, 0x1, "da"}}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x1, 0x9, 0x4, {0x9, 0x25, 0x1, 0x5, "7a8b5cdcf7"}}}]}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x200, 0x5, 0xff, 0x0, 0xff, 0x6}, 0x38, &(0x7f0000000d40)={0x5, 0xf, 0x38, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7, 0xff0f, 0x1, [0xffff0f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xe, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x1, 0x0, 0x10, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x3, 0x4}]}, 0x4, [{0x48, &(0x7f0000000d80)=@string={0x48, 0x3, "98cf9a7b1a32e345d1776d8300fc806334c86a7d7f852e477b49e458a922f1675b38748e1203f0fe3afa70ab83f0ebd0d07597dc66abba990f1b4cdeadb99b5b78be393c8b83"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x80c}}, {0x4a, &(0x7f0000000e40)=@string={0x4a, 0x3, "6cda14c07cada08dafb67e6836acdf28a378b6e426e901ca8f396eb1d036e34fa9c49d4ab39e9d944f6352a3ee1bb1dd7b322f45a8a7081d2ee72021469216ea349b4f527ffe2ebc"}}, {0x30, &(0x7f0000000ec0)=@string={0x30, 0x3, "49a2439f90e95954dc223970b22d4e0bd6dcf502090ddc2aecdeea931aec98dc491836025a0313c1c419a477122c"}}]}) 1.176541527s ago: executing program 1 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) listen(r0, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 581.308601ms ago: executing program 1 (id=53): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0x7, 0x50000) write$cgroup_int(r1, &(0x7f0000000000)=0x416eb135, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000400007012bbd7000fadbdf25037c00000400c280100001800c00108008000b0004008000040008"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x2, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @local, @rand_addr=0x64010100}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000304020000000300000000000400", @ANYRES32=0x0, @ANYBLOB="50630000802800003800128009000100766c616e000000002820028008000500", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4800) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000300)={{&(0x7f0000000140)=[{0x4, 0x8, 0x798, {0x8, 0x5}, 0x5, 0x7f, 0xff}, {0xfffffffffffffffb, 0x7, 0x0, {0x7fffffff, 0x7}, 0xf9, 0x1, 0x59}, {0x10, 0x7fff, 0x0, {0x253, 0x7}, 0x8d, 0x10000, 0xfffffff9}, {0x7471, 0x1, 0x2, {0x9, 0x8000000000000001}, 0xad6, 0x6, 0x418c}, {0x6, 0x1, 0x6, {0x4, 0xffffffffffffffff}, 0x17a, 0x2}], 0x5, 0x40, 0x2}, {&(0x7f0000000000)=[{0x2, 0x6}], 0x1, 0x10, 0x3, 0x81c}, {&(0x7f0000000040)=[0xc, 0xa, 0x1000, 0x6], 0x4, 0x8, 0x4, 0x8001}, {&(0x7f0000000280)=[{0x70, 0x7fffffffffffffff, 0x0, 0x19d, 0x9}, {0x100, 0xffffffffffffffff, 0xfffffffffffffffb, 0xb9d2}], 0x2, 0x28, 0x7, 0xbf}, {&(0x7f0000000080)=[0x2, 0x33d3], 0x2, 0x8, 0x9, 0x5}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2900000004"], 0x29) 357.115714ms ago: executing program 4 (id=54): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0xf}, {0x0, 0x1}, {0xf, 0x1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x22000040}, 0x44040) 245.137446ms ago: executing program 1 (id=55): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/85) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x257}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0xa, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x8, 0x10}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x55, 0xb, 0x3e, 0xff}, 0xfb, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c09}}]}) 241.62181ms ago: executing program 2 (id=56): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000001e80)={0x2, 0x0, 0x7, {0x9, 0x1, 0x500, 0x2d0}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x19, 0x16, 0xbd, 0x8, 0x112a, 0x5, 0xdf89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x5, 0x80, 0x3, "", [{{0x9, 0x4, 0x1, 0x2, 0x2, 0x84, 0xc, 0x4, 0x7f, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x1, 0x9, 0x5}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x0, 0x1, 0x40}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x9, 0x3e1, '\x00', &(0x7f0000000140)=0xeb}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x7, @pix={0xb655, 0x7, 0x34343459, 0x8, 0x9, 0x7fffffff, 0xb, 0xd43a, 0x1, 0x7, 0x0, 0x7}}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x3, 0xa000200000a95b, 0x3, 0x4, 0x6a1c004, 0x1, 0x800000000000004, 0x101001}) write$tcp_mem(r1, &(0x7f0000000180)={0x7fff, 0x20, 0x7fff}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x44000c) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) rmdir(&(0x7f0000001c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffa, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) 0s ago: executing program 4 (id=57): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, 0x0, 0x25, 0x8, @void}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r3], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r4, r5, 0x37, 0x2000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000ffff000004000000055be200001200000aca3e45d68b6e6bfabd3fc4c4efac52a644603e90f0d99c30ce50dd35274d5955d516b729a96e32dfe107b9dbdbb94f085a12624f4c8b0924daa906ff346f92c5e219de328a636112a651c20908b5f67002e75165ab135235d93855085cef8e1fa8663c92019a935c73e62ffbb601404b87be231664cc973a5460a92b186bf5fb2795b596146114ca596df5f53ba9f3972878cc50529075b468e97562a6c4c67490e365c8bea5a828", @ANYRES32=0x1, @ANYBLOB="792dffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB='$\x00\x00\x00\x00 \x00\x00', @ANYRES32=r3, @ANYRES32, @ANYBLOB="4b4cbe29b72dbf758ed56217d923742b2c432e9e43ceccf23ebb1f9e9b", @ANYRES64=0x0], 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000099940000a4403000f0ffffff183a0000030000000000000000000000d50850000800000005881000ff0300009500010000000000f7b9f01b6d8c873a01fe71390e0e8f0683ef0e5646ea00a1a0cd4a582e467362d5d16da9e4a9032cee1bc4d319b93514aaba6b869a7bca1d78e9a80b1c85ceb74dcba028ddd5efc7fb489b3cdff18729ffe41ef59a0fb414710d24fcd74898c222297dce173aeb844e524e6939ce2cfaa0e4ac0498ceb6918f56c8e72b0def8681026bcda4ffa52421dd5300000000c46cca3e2bde5d93975037bbc9b31889aa2f0e14e72f19"], &(0x7f0000000200)='syzkaller\x00', 0xf0, 0x90, &(0x7f0000000300)=""/144, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x1010, 0xffffffff, 0xd}, 0x10, 0x268e, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x5, 0xf, 0x2}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="c78efb90288e2491b84ea8891487a0b5d3715f5e3bb34e285690d3176ac907342138abf2512f3db023f9282faee30f34e27e364dffe43337e7cd48f42f0ed9f8c1f1005aa5af8209e7a5a62da2874fa174624ea0de839aa0ddb381f629fa79904e0799792cffffccf5f42c5ae7c593e0705e583136225ade071d5e50196269eb5715807350b4fcde0388e0f56100104297b6af91c26c6eadce4667cfc4512f097da6529f", @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) io_uring_enter(0xffffffffffffffff, 0x6f55, 0x7721, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 52.096646][ T30] audit: type=1400 audit(1774908945.981:62): avc: denied { mounton } for pid=5788 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.120043][ T30] audit: type=1400 audit(1774908946.001:63): avc: denied { mount } for pid=5788 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.122645][ T5788] cgroup: Unknown subsys name 'net' [ 52.149103][ T30] audit: type=1400 audit(1774908946.031:64): avc: denied { unmount } for pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.243654][ T5788] cgroup: Unknown subsys name 'cpuset' [ 52.251633][ T5788] cgroup: Unknown subsys name 'rlimit' [ 52.381051][ T30] audit: type=1400 audit(1774908946.261:65): avc: denied { setattr } for pid=5788 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.414646][ T30] audit: type=1400 audit(1774908946.271:66): avc: denied { create } for pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.443521][ T30] audit: type=1400 audit(1774908946.271:67): avc: denied { write } for pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.464077][ T30] audit: type=1400 audit(1774908946.271:68): avc: denied { read } for pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.488647][ T30] audit: type=1400 audit(1774908946.281:69): avc: denied { mounton } for pid=5788 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 52.495492][ T5792] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 52.523848][ T30] audit: type=1400 audit(1774908946.281:70): avc: denied { mount } for pid=5788 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.549721][ T30] audit: type=1400 audit(1774908946.411:71): avc: denied { relabelto } for pid=5792 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.489015][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.891649][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.893741][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.899354][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.907728][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.913957][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.931374][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.934099][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.939233][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.953903][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.961824][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.969696][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.970002][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.985645][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.986120][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.999603][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.000878][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.007467][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.014592][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.021234][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.028559][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.035869][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.042499][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.049001][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.063156][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.071341][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.335089][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 57.335105][ T30] audit: type=1400 audit(1774908951.221:83): avc: denied { module_request } for pid=5802 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 57.452809][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 57.480203][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 57.578338][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 57.633002][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.640133][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.647883][ T5816] bridge_slave_0: entered allmulticast mode [ 57.654702][ T5816] bridge_slave_0: entered promiscuous mode [ 57.669682][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.676804][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.684211][ T5816] bridge_slave_1: entered allmulticast mode [ 57.690818][ T5816] bridge_slave_1: entered promiscuous mode [ 57.739286][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.746781][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.754290][ T5802] bridge_slave_0: entered allmulticast mode [ 57.761774][ T5802] bridge_slave_0: entered promiscuous mode [ 57.786337][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.800755][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.810250][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.817416][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.824966][ T5802] bridge_slave_1: entered allmulticast mode [ 57.831802][ T5802] bridge_slave_1: entered promiscuous mode [ 57.851928][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 57.879391][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 57.918416][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.925606][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.932766][ T5803] bridge_slave_0: entered allmulticast mode [ 57.939404][ T5803] bridge_slave_0: entered promiscuous mode [ 57.947940][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.959173][ T5816] team0: Port device team_slave_0 added [ 57.966643][ T5816] team0: Port device team_slave_1 added [ 57.983929][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.991172][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.998659][ T5803] bridge_slave_1: entered allmulticast mode [ 58.006512][ T5803] bridge_slave_1: entered promiscuous mode [ 58.014321][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.063366][ T5802] team0: Port device team_slave_0 added [ 58.091950][ T5802] team0: Port device team_slave_1 added [ 58.099232][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.113270][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.120199][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.146461][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.169085][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.185240][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.192390][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.218439][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.266579][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.273749][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.299906][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.319200][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.326216][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.352318][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.363138][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.370274][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.377716][ T5810] bridge_slave_0: entered allmulticast mode [ 58.384470][ T5810] bridge_slave_0: entered promiscuous mode [ 58.395647][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.402759][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.409847][ T5808] bridge_slave_0: entered allmulticast mode [ 58.416810][ T5808] bridge_slave_0: entered promiscuous mode [ 58.425393][ T5803] team0: Port device team_slave_0 added [ 58.431188][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.438286][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.445613][ T5808] bridge_slave_1: entered allmulticast mode [ 58.452734][ T5808] bridge_slave_1: entered promiscuous mode [ 58.464071][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.471235][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.478321][ T5810] bridge_slave_1: entered allmulticast mode [ 58.485157][ T5810] bridge_slave_1: entered promiscuous mode [ 58.500726][ T5803] team0: Port device team_slave_1 added [ 58.549148][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.563203][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.579773][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.612482][ T5802] hsr_slave_0: entered promiscuous mode [ 58.618569][ T5802] hsr_slave_1: entered promiscuous mode [ 58.626552][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.639482][ T5816] hsr_slave_0: entered promiscuous mode [ 58.645832][ T5816] hsr_slave_1: entered promiscuous mode [ 58.651749][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 58.657504][ T5816] Cannot create hsr debugfs directory [ 58.670730][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.677793][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.703880][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.723032][ T5808] team0: Port device team_slave_0 added [ 58.730433][ T5808] team0: Port device team_slave_1 added [ 58.747655][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.754669][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.780830][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.839113][ T5810] team0: Port device team_slave_0 added [ 58.845387][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.852467][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.878402][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.895119][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.902081][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.927973][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.946339][ T5810] team0: Port device team_slave_1 added [ 59.009355][ T5803] hsr_slave_0: entered promiscuous mode [ 59.015915][ T5803] hsr_slave_1: entered promiscuous mode [ 59.021999][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 59.027717][ T5803] Cannot create hsr debugfs directory [ 59.032014][ T51] Bluetooth: hci1: command tx timeout [ 59.061733][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.068691][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.094673][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.111080][ T5817] Bluetooth: hci0: command tx timeout [ 59.116748][ T5817] Bluetooth: hci4: command tx timeout [ 59.121048][ T51] Bluetooth: hci2: command tx timeout [ 59.122505][ T5819] Bluetooth: hci3: command tx timeout [ 59.151428][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.158381][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.184347][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.203267][ T5808] hsr_slave_0: entered promiscuous mode [ 59.209278][ T5808] hsr_slave_1: entered promiscuous mode [ 59.215304][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 59.221037][ T5808] Cannot create hsr debugfs directory [ 59.336604][ T5810] hsr_slave_0: entered promiscuous mode [ 59.342798][ T5810] hsr_slave_1: entered promiscuous mode [ 59.348652][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 59.354418][ T5810] Cannot create hsr debugfs directory [ 59.520041][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.546211][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.560868][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.579874][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.619348][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.644370][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.656041][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.674192][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.714628][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.737515][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.755424][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.764684][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.822372][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.832831][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.844688][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.854385][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.899479][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.947625][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.960085][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.970054][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.979673][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.990125][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.016231][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.023427][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.035490][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.043025][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.118736][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.148038][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.158076][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.175593][ T30] audit: type=1400 audit(1774908954.061:84): avc: denied { sys_module } for pid=5816 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.219714][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.242564][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.249693][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.259463][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.266623][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.310433][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.317566][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.330387][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.343346][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.350433][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.398267][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.408871][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.419593][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.438212][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.445353][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.466848][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.483628][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.490761][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.547045][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.557762][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.576824][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.614215][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.621359][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.659062][ T5816] veth0_vlan: entered promiscuous mode [ 60.668392][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.675522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.712112][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.779361][ T5816] veth1_vlan: entered promiscuous mode [ 60.853186][ T5802] veth0_vlan: entered promiscuous mode [ 60.885203][ T5802] veth1_vlan: entered promiscuous mode [ 60.906339][ T5816] veth0_macvtap: entered promiscuous mode [ 60.924899][ T5816] veth1_macvtap: entered promiscuous mode [ 60.940590][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.977339][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.992049][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.010750][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.026129][ T5802] veth0_macvtap: entered promiscuous mode [ 61.047752][ T634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.061873][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.070611][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.096145][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.107536][ T5802] veth1_macvtap: entered promiscuous mode [ 61.112486][ T5817] Bluetooth: hci1: command tx timeout [ 61.174971][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.186799][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.191646][ T5817] Bluetooth: hci4: command tx timeout [ 61.198982][ T5819] Bluetooth: hci3: command tx timeout [ 61.199006][ T5814] Bluetooth: hci0: command tx timeout [ 61.211580][ T51] Bluetooth: hci2: command tx timeout [ 61.225412][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.317893][ T5808] veth0_vlan: entered promiscuous mode [ 61.323776][ T85] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.338318][ T5810] veth0_vlan: entered promiscuous mode [ 61.344381][ T85] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.355384][ T85] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.369834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.383866][ T85] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.395765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.419356][ T5808] veth1_vlan: entered promiscuous mode [ 61.473785][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.478815][ T5803] veth0_vlan: entered promiscuous mode [ 61.489133][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.506454][ T5810] veth1_vlan: entered promiscuous mode [ 61.526370][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.532141][ T5803] veth1_vlan: entered promiscuous mode [ 61.542406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.558076][ T30] audit: type=1400 audit(1774908955.441:85): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.2S7aau/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.582428][ T30] audit: type=1400 audit(1774908955.441:86): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.604764][ T30] audit: type=1400 audit(1774908955.441:87): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.2S7aau/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.626488][ T5808] veth0_macvtap: entered promiscuous mode [ 61.636859][ T30] audit: type=1400 audit(1774908955.441:88): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.659184][ T30] audit: type=1400 audit(1774908955.451:89): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.2S7aau/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.707719][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.711301][ T30] audit: type=1400 audit(1774908955.451:90): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.2S7aau/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.734406][ T5808] veth1_macvtap: entered promiscuous mode [ 61.756946][ T30] audit: type=1400 audit(1774908955.451:91): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.769499][ T5803] veth0_macvtap: entered promiscuous mode [ 61.782649][ T30] audit: type=1400 audit(1774908955.501:92): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 61.828923][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.842865][ T5803] veth1_macvtap: entered promiscuous mode [ 61.859008][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.867230][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.874434][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.900012][ T5810] veth0_macvtap: entered promiscuous mode [ 61.997052][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.014091][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.066951][ T1095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.076816][ T1095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.088657][ T5810] veth1_macvtap: entered promiscuous mode [ 62.231726][ T5923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.239036][ T5923] IPv6: NLM_F_CREATE should be set when creating new route [ 62.246352][ T5923] IPv6: NLM_F_CREATE should be set when creating new route [ 62.253702][ T5923] IPv6: NLM_F_CREATE should be set when creating new route [ 62.358521][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.426991][ T1095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.440836][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 62.440853][ T30] audit: type=1400 audit(1774908956.331:111): avc: denied { ioctl } for pid=5917 comm="syz.2.3" path="socket:[6843]" dev="sockfs" ino=6843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.444809][ T1095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.486476][ T1095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.528444][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.555076][ T30] audit: type=1400 audit(1774908956.441:112): avc: denied { create } for pid=5926 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.577655][ T1095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.581319][ T30] audit: type=1400 audit(1774908956.441:113): avc: denied { bind } for pid=5926 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.600677][ T1095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.623164][ T30] audit: type=1400 audit(1774908956.441:114): avc: denied { read } for pid=5926 comm="syz.2.6" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 62.658613][ T30] audit: type=1400 audit(1774908956.441:115): avc: denied { open } for pid=5926 comm="syz.2.6" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 62.697458][ T1095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.704029][ T30] audit: type=1400 audit(1774908956.441:116): avc: denied { ioctl } for pid=5926 comm="syz.2.6" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 62.736279][ T30] audit: type=1400 audit(1774908956.441:117): avc: denied { setopt } for pid=5926 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.748086][ T5930] process 'syz.2.7' launched '/dev/fd/8' with NULL argv: empty string added [ 62.756265][ T30] audit: type=1400 audit(1774908956.441:118): avc: denied { accept } for pid=5926 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.790263][ T30] audit: type=1400 audit(1774908956.441:119): avc: denied { write } for pid=5926 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.879301][ T30] audit: type=1400 audit(1774908956.441:120): avc: denied { read } for pid=5926 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.888387][ T1095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.938981][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.952473][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.969588][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.010292][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.019026][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.056479][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.064973][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.080761][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.089233][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.136208][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.149339][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.172746][ T5859] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.191334][ T51] Bluetooth: hci1: command tx timeout [ 63.209696][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.218769][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.272030][ T51] Bluetooth: hci3: command tx timeout [ 63.277527][ T5814] Bluetooth: hci4: command tx timeout [ 63.277540][ T5819] Bluetooth: hci2: command tx timeout [ 63.282969][ T5814] Bluetooth: hci0: command tx timeout [ 63.318102][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.350507][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.351493][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 63.386279][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.422979][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.447751][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 63.465398][ T5859] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 63.476738][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.505355][ T5859] usb 1-1: config 0 descriptor?? [ 63.540114][ T5944] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9'. [ 63.682873][ T5938] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.752053][ T5938] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.775556][ T5859] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0001/input/input6 [ 64.857474][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.120808][ T5938] usb 4-1: Product: syz [ 65.126366][ T5938] usb 4-1: Manufacturer: syz [ 65.131693][ T5938] usb 4-1: SerialNumber: syz [ 65.142776][ T5938] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 65.272663][ T5819] Bluetooth: hci1: command tx timeout [ 65.351272][ T5819] Bluetooth: hci3: command tx timeout [ 65.352201][ T5817] Bluetooth: hci2: command tx timeout [ 65.356779][ T51] Bluetooth: hci0: command tx timeout [ 65.362141][ T5817] Bluetooth: hci4: command tx timeout [ 65.473719][ T5859] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 65.491057][ T5890] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 65.578075][ T5859] usb 1-1: USB disconnect, device number 2 [ 65.776504][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.847325][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.868275][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.892909][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.948852][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.030998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.050983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.210994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.282547][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.404040][ T5866] usb 4-1: USB disconnect, device number 2 [ 66.423164][ T5972] fido_id[5972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 66.572887][ T5890] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 66.580174][ T5890] ath9k_htc: Failed to initialize the device [ 66.591978][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.658563][ T5866] usb 4-1: ath9k_htc: USB layer deinitialized [ 67.764863][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.491461][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.587029][ T29] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 68.596768][ T29] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 68.606212][ T29] usb 3-1: Manufacturer: syz [ 68.627573][ T29] usb 3-1: config 0 descriptor?? [ 68.691679][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 68.691701][ T30] audit: type=1400 audit(1774908962.561:165): avc: denied { write } for pid=5991 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.789647][ T30] audit: type=1400 audit(1774908962.581:166): avc: denied { create } for pid=5995 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.813064][ T30] audit: type=1400 audit(1774908962.661:167): avc: denied { create } for pid=5993 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.017003][ T6002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.034154][ T30] audit: type=1400 audit(1774908962.661:168): avc: denied { bind } for pid=5993 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.325689][ T30] audit: type=1400 audit(1774908962.811:169): avc: denied { create } for pid=5991 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.385306][ T30] audit: type=1400 audit(1774908962.811:170): avc: denied { write } for pid=5991 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.465811][ T30] audit: type=1400 audit(1774908962.991:171): avc: denied { ioctl } for pid=5995 comm="syz.0.21" path="socket:[9359]" dev="sockfs" ino=9359 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.516229][ T29] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 69.554750][ T29] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 69.588287][ T30] audit: type=1400 audit(1774908963.441:172): avc: denied { relabelfrom } for pid=5995 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.608685][ T29] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 69.608807][ T29] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 69.643609][ T29] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 70.351180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.859315][ T29] usb 3-1: USB disconnect, device number 2 [ 70.921311][ T30] audit: type=1400 audit(1774908963.441:173): avc: denied { relabelto } for pid=5995 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 71.100300][ T6023] ======================================================= [ 71.100300][ T6023] WARNING: The mand mount option has been deprecated and [ 71.100300][ T6023] and is ignored by this kernel. Remove the mand [ 71.100300][ T6023] option from the mount to silence this warning. [ 71.100300][ T6023] ======================================================= [ 71.342436][ T30] audit: type=1400 audit(1774908963.981:174): avc: denied { getopt } for pid=6014 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.836834][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 72.354804][ T6038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.272482][ T5819] Bluetooth: hci3: command 0x2016 tx timeout [ 73.432731][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33'. [ 73.495439][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.500243][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 74.500263][ T30] audit: type=1400 audit(1774908968.081:189): avc: denied { create } for pid=6047 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.982652][ T6052] infiniband syz2: set down [ 74.987416][ T6052] infiniband syz2: added ipvlan0 [ 75.040658][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 75.055311][ T6052] RDS/IB: syz2: added [ 75.059716][ T6052] smc: adding ib device syz2 with port count 1 [ 75.066628][ T6052] smc: ib device syz2 port 1 has no pnetid [ 75.079835][ T30] audit: type=1400 audit(1774908968.091:190): avc: denied { write } for pid=6047 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.114957][ T29] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 75.127155][ T30] audit: type=1400 audit(1774908969.001:191): avc: denied { create } for pid=6057 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.154554][ T29] usb 4-1: config 0 has no interface number 0 [ 75.161393][ T29] usb 4-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 75.191239][ T51] Bluetooth: hci1: command 0x2016 tx timeout [ 75.196879][ T30] audit: type=1400 audit(1774908969.041:192): avc: denied { setopt } for pid=6057 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.219093][ T29] usb 4-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.249409][ T29] usb 4-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.260619][ T30] audit: type=1400 audit(1774908969.041:193): avc: denied { bind } for pid=6057 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.288504][ T29] usb 4-1: config 0 interface 86 has no altsetting 0 [ 75.308135][ T29] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 75.327599][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.337837][ T30] audit: type=1400 audit(1774908969.041:194): avc: denied { name_bind } for pid=6057 comm="syz.1.35" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.361597][ T5819] Bluetooth: hci3: command 0x2016 tx timeout [ 75.369583][ T29] usb 4-1: Product: syz [ 75.374085][ T29] usb 4-1: Manufacturer: syz [ 75.384439][ T29] usb 4-1: SerialNumber: syz [ 75.408261][ T30] audit: type=1400 audit(1774908969.041:195): avc: denied { node_bind } for pid=6057 comm="syz.1.35" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 75.449064][ T29] usb 4-1: config 0 descriptor?? [ 75.454998][ T6043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.470990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 75.479846][ T30] audit: type=1400 audit(1774908969.251:196): avc: denied { write } for pid=6057 comm="syz.1.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.505443][ T30] audit: type=1400 audit(1774908969.251:197): avc: denied { connect } for pid=6057 comm="syz.1.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.565830][ T30] audit: type=1400 audit(1774908969.251:198): avc: denied { name_connect } for pid=6057 comm="syz.1.35" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.694874][ T29] ljca 4-1:0.86: submit rx urb failed: -90 [ 75.705633][ T29] ljca 4-1:0.86: probe with driver ljca failed with error -90 [ 76.116781][ T29] usb 4-1: USB disconnect, device number 3 [ 76.228611][ T10] cfg80211: failed to load regulatory.db [ 77.134311][ T6081] netlink: 'syz.3.37': attribute type 27 has an invalid length. [ 77.292306][ T5817] Bluetooth: hci1: command 0x2016 tx timeout [ 78.005145][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 78.703380][ T6101] syz.0.41 (6101) used greatest stack depth: 19360 bytes left [ 79.671195][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.888494][ T6132] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 80.024978][ T24] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 80.801154][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.810866][ T24] usb 3-1: Product: syz [ 81.115200][ T24] usb 3-1: Manufacturer: syz [ 81.141078][ T24] usb 3-1: SerialNumber: syz [ 81.178314][ T24] usb 3-1: config 0 descriptor?? [ 81.194394][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 81.194410][ T30] audit: type=1400 audit(1774908975.081:215): avc: denied { mounton } for pid=6136 comm="syz.1.48" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.198341][ T6139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.200616][ T30] audit: type=1400 audit(1774908975.081:216): avc: denied { mount } for pid=6136 comm="syz.1.48" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.275445][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 81.293036][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 81.302258][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 81.311817][ T5817] Bluetooth: hci2: hardware error 0x00 [ 81.399939][ T30] audit: type=1400 audit(1774908975.161:217): avc: denied { create } for pid=6141 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.653322][ T30] audit: type=1400 audit(1774908975.241:218): avc: denied { mount } for pid=6136 comm="syz.1.48" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.696430][ T24] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 81.704816][ T24] sq905c 3-1:0.0: Reading version command failed [ 81.713552][ T24] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 81.731104][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.761054][ T24] usb 3-1: USB disconnect, device number 3 [ 81.798689][ T30] audit: type=1400 audit(1774908975.321:219): avc: denied { name_bind } for pid=6141 comm="syz.0.49" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.907457][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 82.090179][ T9] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 82.205876][ T30] audit: type=1400 audit(1774908975.331:220): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.241251][ T30] audit: type=1400 audit(1774908975.351:221): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.277976][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.332812][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 82.342224][ T9] usb 4-1: config 0 descriptor?? [ 82.351791][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.53'. [ 82.496546][ T30] audit: type=1400 audit(1774908976.371:222): avc: denied { create } for pid=6165 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.571261][ T30] audit: type=1400 audit(1774908976.421:223): avc: denied { setopt } for pid=6165 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.611050][ T30] audit: type=1400 audit(1774908976.421:224): avc: denied { bind } for pid=6165 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.751389][ T6173] siw: device registration error -23 [ 82.758357][ T6173] smc: removing ib device syz2 [ 83.218837][ T6173] ------------[ cut here ]------------ [ 83.224342][ T6173] !xa_empty(&pool->xa) [ 83.224350][ T6173] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.4.57/6173 [ 83.239526][ T6173] Modules linked in: [ 83.243589][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.4.57 Not tainted syzkaller #0 PREEMPT(full) [ 83.252745][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.262808][ T6173] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 83.268262][ T6173] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 a6 1b 4f f9 5b c3 cc cc cc cc e8 9b 1b 4f f9 90 <0f> 0b 90 e8 92 1b 4f f9 5b e9 8c 3f da 02 e8 c7 a9 bb f9 eb d0 0f [ 83.288074][ T6173] RSP: 0018:ffffc900049071a0 EFLAGS: 00010246 [ 83.294151][ T6173] RAX: 0000000000080000 RBX: ffff8880358e13b8 RCX: ffffc9000e102000 [ 83.302118][ T6173] RDX: 0000000000080000 RSI: ffffffff88b9dc45 RDI: ffff8880358e1438 [ 83.310080][ T6173] RBP: ffffffff88b83ed0 R08: 0000000000000005 R09: 0000000000000001 [ 83.318048][ T6173] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880358e06b0 [ 83.326043][ T6173] R13: ffff8880358dffe0 R14: ffff8880358dffe0 R15: ffff8880358e1118 [ 83.334153][ T6173] FS: 00007efe31c986c0(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 83.343147][ T6173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.349727][ T6173] CR2: 0000000000000000 CR3: 000000007c4ec000 CR4: 00000000003526f0 [ 83.357701][ T6173] Call Trace: [ 83.360981][ T6173] [ 83.363913][ T6173] rxe_dealloc+0x25/0xc0 [ 83.368148][ T6173] ib_dealloc_device+0x49/0x230 [ 83.373000][ T6173] __ib_unregister_device+0x396/0x480 [ 83.378373][ T6173] ib_unregister_device_and_put+0x5a/0x80 [ 83.384095][ T6173] nldev_dellink+0x226/0x320 [ 83.388687][ T6173] ? __pfx_nldev_dellink+0x10/0x10 [ 83.393817][ T6173] ? rcu_is_watching+0x12/0xc0 [ 83.398576][ T6173] ? cap_capable+0x107/0x460 [ 83.403166][ T6173] ? bpf_lsm_capable+0x9/0x10 [ 83.407917][ T6173] ? security_capable+0x80/0x260 [ 83.412850][ T6173] ? ns_capable+0xd2/0xf0 [ 83.417168][ T6173] ? __pfx_nldev_dellink+0x10/0x10 [ 83.422283][ T6173] rdma_nl_rcv_msg+0x38a/0x6e0 [ 83.427038][ T6173] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 83.432532][ T6173] ? __lock_acquire+0x4a5/0x2630 [ 83.437497][ T6173] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 83.443952][ T6173] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 83.450885][ T6173] ? netlink_deliver_tap+0x1ae/0xcc0 [ 83.456176][ T6173] netlink_unicast+0x5aa/0x870 [ 83.460968][ T6173] ? __pfx_netlink_unicast+0x10/0x10 [ 83.466270][ T6173] netlink_sendmsg+0x8b0/0xda0 [ 83.471049][ T6173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.476330][ T6173] ? __might_fault+0x90/0x140 [ 83.481008][ T6173] ____sys_sendmsg+0x9e1/0xb70 [ 83.485757][ T6173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.491054][ T6173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.496352][ T6173] ___sys_sendmsg+0x190/0x1e0 [ 83.501039][ T6173] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.506237][ T6173] __sys_sendmsg+0x170/0x220 [ 83.510814][ T6173] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.515945][ T6173] do_syscall_64+0x106/0xf80 [ 83.520557][ T6173] ? clear_bhb_loop+0x40/0x90 [ 83.525284][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.531182][ T6173] RIP: 0033:0x7efe30d9c819 [ 83.535594][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.555211][ T6173] RSP: 002b:00007efe31c98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.563672][ T6173] RAX: ffffffffffffffda RBX: 00007efe31015fa0 RCX: 00007efe30d9c819 [ 83.571670][ T6173] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 83.579674][ T6173] RBP: 00007efe30e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 83.587660][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.595634][ T6173] R13: 00007efe31016038 R14: 00007efe31015fa0 R15: 00007ffc8a5f2808 [ 83.603642][ T6173] [ 83.606662][ T6173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.613939][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.4.57 Not tainted syzkaller #0 PREEMPT(full) [ 83.623031][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.633059][ T6173] Call Trace: [ 83.636312][ T6173] [ 83.639220][ T6173] dump_stack_lvl+0x100/0x190 [ 83.643889][ T6173] vpanic+0x552/0x970 [ 83.647841][ T6173] ? __pfx_vpanic+0x10/0x10 [ 83.652336][ T6173] panic+0xd1/0xe0 [ 83.656028][ T6173] ? __pfx_panic+0x10/0x10 [ 83.660427][ T6173] check_panic_on_warn.cold+0x19/0x34 [ 83.665772][ T6173] ? rxe_pool_cleanup+0x46/0x60 [ 83.670609][ T6173] __warn.cold+0x191/0x348 [ 83.674996][ T6173] __report_bug+0x296/0x3d0 [ 83.679476][ T6173] ? rxe_pool_cleanup+0x46/0x60 [ 83.684309][ T6173] ? __pfx___report_bug+0x10/0x10 [ 83.689321][ T6173] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.695107][ T6173] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 83.700891][ T6173] ? __flush_workqueue+0x426/0x1200 [ 83.706059][ T6173] ? __mutex_unlock_slowpath+0x15c/0x790 [ 83.711686][ T6173] ? rxe_pool_cleanup+0x46/0x60 [ 83.716511][ T6173] report_bug+0xb2/0x220 [ 83.720727][ T6173] ? rxe_pool_cleanup+0x46/0x60 [ 83.725560][ T6173] handle_bug+0x16a/0x2a0 [ 83.729873][ T6173] exc_invalid_op+0x17/0x50 [ 83.734353][ T6173] asm_exc_invalid_op+0x1a/0x20 [ 83.739194][ T6173] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 83.744629][ T6173] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 a6 1b 4f f9 5b c3 cc cc cc cc e8 9b 1b 4f f9 90 <0f> 0b 90 e8 92 1b 4f f9 5b e9 8c 3f da 02 e8 c7 a9 bb f9 eb d0 0f [ 83.764218][ T6173] RSP: 0018:ffffc900049071a0 EFLAGS: 00010246 [ 83.770273][ T6173] RAX: 0000000000080000 RBX: ffff8880358e13b8 RCX: ffffc9000e102000 [ 83.778245][ T6173] RDX: 0000000000080000 RSI: ffffffff88b9dc45 RDI: ffff8880358e1438 [ 83.786213][ T6173] RBP: ffffffff88b83ed0 R08: 0000000000000005 R09: 0000000000000001 [ 83.794156][ T6173] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880358e06b0 [ 83.802098][ T6173] R13: ffff8880358dffe0 R14: ffff8880358dffe0 R15: ffff8880358e1118 [ 83.810060][ T6173] ? __pfx_rxe_dealloc+0x10/0x10 [ 83.814974][ T6173] ? rxe_pool_cleanup+0x45/0x60 [ 83.819810][ T6173] rxe_dealloc+0x25/0xc0 [ 83.824035][ T6173] ib_dealloc_device+0x49/0x230 [ 83.828870][ T6173] __ib_unregister_device+0x396/0x480 [ 83.834231][ T6173] ib_unregister_device_and_put+0x5a/0x80 [ 83.839923][ T6173] nldev_dellink+0x226/0x320 [ 83.844493][ T6173] ? __pfx_nldev_dellink+0x10/0x10 [ 83.849607][ T6173] ? rcu_is_watching+0x12/0xc0 [ 83.854346][ T6173] ? cap_capable+0x107/0x460 [ 83.858921][ T6173] ? bpf_lsm_capable+0x9/0x10 [ 83.863580][ T6173] ? security_capable+0x80/0x260 [ 83.868492][ T6173] ? ns_capable+0xd2/0xf0 [ 83.872804][ T6173] ? __pfx_nldev_dellink+0x10/0x10 [ 83.877898][ T6173] rdma_nl_rcv_msg+0x38a/0x6e0 [ 83.882634][ T6173] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 83.887899][ T6173] ? __lock_acquire+0x4a5/0x2630 [ 83.892809][ T6173] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 83.899202][ T6173] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 83.906126][ T6173] ? netlink_deliver_tap+0x1ae/0xcc0 [ 83.911426][ T6173] netlink_unicast+0x5aa/0x870 [ 83.916169][ T6173] ? __pfx_netlink_unicast+0x10/0x10 [ 83.921444][ T6173] netlink_sendmsg+0x8b0/0xda0 [ 83.926186][ T6173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.931481][ T6173] ? __might_fault+0x90/0x140 [ 83.936168][ T6173] ____sys_sendmsg+0x9e1/0xb70 [ 83.940924][ T6173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.946206][ T6173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.951484][ T6173] ___sys_sendmsg+0x190/0x1e0 [ 83.956152][ T6173] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.961337][ T6173] __sys_sendmsg+0x170/0x220 [ 83.965904][ T6173] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.971021][ T6173] do_syscall_64+0x106/0xf80 [ 83.975589][ T6173] ? clear_bhb_loop+0x40/0x90 [ 83.980238][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.986101][ T6173] RIP: 0033:0x7efe30d9c819 [ 83.990514][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.010090][ T6173] RSP: 002b:00007efe31c98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.018472][ T6173] RAX: ffffffffffffffda RBX: 00007efe31015fa0 RCX: 00007efe30d9c819 [ 84.026415][ T6173] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 84.034358][ T6173] RBP: 00007efe30e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 84.042303][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.050245][ T6173] R13: 00007efe31016038 R14: 00007efe31015fa0 R15: 00007ffc8a5f2808 [ 84.058192][ T6173] [ 84.061492][ T6173] Kernel Offset: disabled [ 84.065796][ T6173] Rebooting in 86400 seconds..