last executing test programs: 11.594793265s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1e0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0xd, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 11.011435147s ago: executing program 1 (id=12): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r3 = dup(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 10.699727104s ago: executing program 2 (id=14): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r2 = dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r1, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 10.178435395s ago: executing program 0 (id=15): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r3 = dup(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 10.154561065s ago: executing program 4 (id=16): socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18070000000001"], &(0x7f0000000040)='GPL\x00', 0x9, 0x92, &(0x7f0000000240)=""/146, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe8800000000000000000000000001011400350062617461647630000000000000000000d01109228f02557757311f82b0552f"], 0x50}}, 0x20004400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10200, 0x5, 0x1, 0x1000, &(0x7f0000d70000/0x1000)=nil}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) getsockname$packet(r2, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000cc0)=0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x35dcae15e713ede6, 0xfffff195, 0x2}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) 9.831265169s ago: executing program 3 (id=17): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r3 = dup(r2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r4, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 9.429363755s ago: executing program 4 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1e0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0xd, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 9.318116752s ago: executing program 3 (id=19): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\xf5\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) 9.248234354s ago: executing program 0 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@generic={0x100}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r5, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000003, 0x20000009}]}}}}}}}, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r7, 0x0, 0x0) syz_io_uring_setup(0x57d6, &(0x7f0000000000)={0x0, 0xc847, 0x1, 0x1, 0x44, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000100)) 9.226445471s ago: executing program 2 (id=21): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x0, 0x9) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040), 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="2e00000010008188040fa0ec59acbc0413a1f848100000005e0c00f0ff", 0x1d}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 8.481272602s ago: executing program 4 (id=22): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(0xffffffffffffffff, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 7.914761159s ago: executing program 1 (id=23): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(0xffffffffffffffff, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 7.838389126s ago: executing program 3 (id=24): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) 7.685827735s ago: executing program 0 (id=25): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@generic={0x100}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x64, r5, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x64}, 0x1, 0xffffffff00000003}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000003, 0x20000009}]}}}}}}}, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r7, 0x0, 0x0) syz_io_uring_setup(0x57d6, &(0x7f0000000000)={0x0, 0xc847, 0x1, 0x1, 0x44, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000100)) 6.676568088s ago: executing program 2 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@generic={0x100}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000003, 0x20000009}]}}}}}}}, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r6, 0x0, 0x0) syz_io_uring_setup(0x57d6, &(0x7f0000000000)={0x0, 0xc847, 0x1, 0x1, 0x44, 0x0, r6}, &(0x7f00000000c0), &(0x7f0000000100)) 6.635268804s ago: executing program 4 (id=27): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x0, 0x8, "e256b28c5988"}, {0x0, 0x8, "020007651442"}, {0x0, 0x2}, {0x0, 0xa, "6580a5e97612fe86"}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) 6.184745681s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1e0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0xd, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 5.200766143s ago: executing program 0 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001"], 0x36) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "b86b2d", 0x74, 0x6}) bind$bt_hci(r2, &(0x7f0000000280), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0xe8}}, 0x8040) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0xfdf0) 5.068125967s ago: executing program 1 (id=30): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x1ff, 0x10000, 0x3, 0x8800, 0x1, 0x17, '\x00', 0x0, r3, 0x4, 0x0, 0x2}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 4.598206748s ago: executing program 4 (id=31): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 4.557917685s ago: executing program 3 (id=32): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x3, 0x0, 0x8}, 0x20) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050004000959d937942b3dce9caf9003466587cbf3b910a15dee957dd12c1fb2b860aabb38f0361e7ffae014e45849074f7b4b57ec9927d8bdbcf6ed5e91f71a70e733c536bcb30d1b1a6af0e7d6f5e2cc22f34573c082ea182dffc", @ANYRES16=r1, @ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0x40, 0x0, 0x7fffffff}, {0x6, 0xff, 0xf, 0xfffff000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0x40082104, 0x0) r6 = syz_io_uring_setup(0x68e, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x80, 0x1d4, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) recvmsg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 4.381522835s ago: executing program 1 (id=33): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="c6d9aa5c7699f5a613037da5f25b70e174f7ec4047484661a71254d9a5bdceab3998ca0f4603bdf5716288c58c4d7795c239447b19c07c653b8485623aa377ac7c24e7e956b335cd89a25bb5f5708150f5278e65ccddca11324f3ad1394945bcb7385f8ee845c97953bc4bb52ddfffc14ed4273a934e0a6a0bded173a5bbf116c9b614b91fa082bacc8194d25fe3e2d20aaef0b8aafd396d04e5e1ab8eb66b8c116d2b1e7695cdc6", 0xa8}, {&(0x7f0000000d40)="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", 0xf58}], 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2}) r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001b00)={&(0x7f0000000280)=[{0x0, 0xc11, 0x8c, &(0x7f00000000c0)="6c06042bec2fc28b7d9a73a36954c6e837a4c7f39b8f8c2a7c9dcd1cbb17ae3772f3db2617dc3949d1ddc9ad52e67a089f10cbe09ddfc301ecd7647d3ce248537972a1f3a7192e1e515343f4bab6c320654aeda3588be2308311b7db468c5aa08541c46ce33f71253be8b4ae682a356fafe4e3d9efcfef0aabbd6fcfcc7977b50f8f59b1cb59c1d46bfe81ea"}, {0x2, 0x0, 0x1, &(0x7f0000000240)="03"}], 0x2}) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r3, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r3, 0x0, 0x10000000000000}, 0x18) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x2, 0x3fff}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @generic={0x26, "7a719292e3321400e79691bcc726"}, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x6, 0x1000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, &(0x7f0000000100)) read$dsp(r1, &(0x7f0000003200)=""/4096, 0x1000) 4.277459444s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1e0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0xd, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 3.923446716s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1e0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0xd, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 3.303928862s ago: executing program 3 (id=36): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB="b9", @ANYRESHEX], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x693}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c820}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x10) 2.876158151s ago: executing program 2 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4800000010000304ffffffffffdbdc2500000300", @ANYRES32=0x0, @ANYBLOB="00a00000300800001c0012800e00010069703665727370616e00000008000280040012000a000100aa"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r5}, 0x18) tkill(r3, 0x38) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r7 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000500)="0d84c489df01448e81c7fd52b747bdacc860a8f70792443de0737c9d615eda461d5d1c360ced01330200f8abe8d65a8dd7463a096ed6f1b70a068941817d28bdcf8d8594221761ed09a5206c6028d3d348051ae86b08c26c008751bab3356a87acd9b43e78c30fec243ee96a588b15667cf6ce3c9bd0d2f32cc019ddc54723565096117aa2d4cf98aac638ec8d1a590a0a55ac2ec05028b96c59fe01e8ebf0f21ec09ecc0f", 0xa5, r7) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(0x0, r10) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000d0800002a000000007d33d92dd202000000050017000000000a16000a000205c302b7f46a82110ea9cfef15f2bcabc58e6910c179691880447d27799a54a2d0ec42356a36dc4a29bd52bdd43ef0ed78da650a94429feca05e62f4e8c7ac63e719b679ddaefa01d2f121"], 0x3c}, 0x1, 0x0, 0x0, 0x20018000}, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) 2.77222047s ago: executing program 0 (id=38): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r3 = dup(r2) ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 440.211292ms ago: executing program 1 (id=39): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES8=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x0, 0x8, "e256b28c5988"}, {0x0, 0x8, "020007651442"}, {0x0, 0x2}, {0x0, 0xa, "6580a5e97612fe86"}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) 121.772702ms ago: executing program 4 (id=40): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(r3, 0x107, 0x11, 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="5001050107000000030300040905030072bad45e265e96dc1ce36dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84789344"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000011c0)={[&(0x7f00000010c0)='/dev/ocfs2_control\x00', &(0x7f0000001140)='@^\x00', &(0x7f0000001180)='%:\x00']}, &(0x7f0000000a80)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0x1008c2) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=41): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r3 = dup(r2) ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.217' (ED25519) to the list of known hosts. [ 64.131680][ T30] audit: type=1400 audit(1754766379.794:62): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.135164][ T5830] cgroup: Unknown subsys name 'net' [ 64.154445][ T30] audit: type=1400 audit(1754766379.794:63): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.184719][ T30] audit: type=1400 audit(1754766379.844:64): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.299852][ T5830] cgroup: Unknown subsys name 'cpuset' [ 64.307472][ T5830] cgroup: Unknown subsys name 'rlimit' [ 64.452438][ T30] audit: type=1400 audit(1754766380.114:65): avc: denied { setattr } for pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.485176][ T30] audit: type=1400 audit(1754766380.114:66): avc: denied { create } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.518462][ T30] audit: type=1400 audit(1754766380.114:67): avc: denied { write } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.539199][ T30] audit: type=1400 audit(1754766380.114:68): avc: denied { read } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.540440][ T5832] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.559983][ T30] audit: type=1400 audit(1754766380.124:69): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 64.592828][ T30] audit: type=1400 audit(1754766380.124:70): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.616190][ T30] audit: type=1400 audit(1754766380.164:71): avc: denied { read } for pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.456540][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.838309][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.852224][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.859903][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.867662][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.875739][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.883955][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.887049][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.891751][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.899222][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.914368][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.918988][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.921848][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.929496][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.935916][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.943173][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.951968][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.958088][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.964616][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.979202][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.986700][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.006777][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.014730][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.023704][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.030988][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.043976][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.388067][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 68.463457][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 68.558612][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 68.580265][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 68.683270][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.691923][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.699314][ T5843] bridge_slave_0: entered allmulticast mode [ 68.705975][ T5843] bridge_slave_0: entered promiscuous mode [ 68.717441][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.724648][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.732668][ T5843] bridge_slave_1: entered allmulticast mode [ 68.739372][ T5843] bridge_slave_1: entered promiscuous mode [ 68.750510][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.757719][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.764860][ T5841] bridge_slave_0: entered allmulticast mode [ 68.772297][ T5841] bridge_slave_0: entered promiscuous mode [ 68.785888][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 68.806125][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.813469][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.820888][ T5841] bridge_slave_1: entered allmulticast mode [ 68.827597][ T5841] bridge_slave_1: entered promiscuous mode [ 68.899187][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.910417][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.936722][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.949092][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.958766][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.965830][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.973432][ T5842] bridge_slave_0: entered allmulticast mode [ 68.980521][ T5842] bridge_slave_0: entered promiscuous mode [ 68.994516][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.001749][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.008918][ T5840] bridge_slave_0: entered allmulticast mode [ 69.015509][ T5840] bridge_slave_0: entered promiscuous mode [ 69.022858][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.029982][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.037226][ T5840] bridge_slave_1: entered allmulticast mode [ 69.044710][ T5840] bridge_slave_1: entered promiscuous mode [ 69.062933][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.070087][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.077172][ T5842] bridge_slave_1: entered allmulticast mode [ 69.084605][ T5842] bridge_slave_1: entered promiscuous mode [ 69.100094][ T5843] team0: Port device team_slave_0 added [ 69.132757][ T5843] team0: Port device team_slave_1 added [ 69.151027][ T5841] team0: Port device team_slave_0 added [ 69.181423][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.193415][ T5841] team0: Port device team_slave_1 added [ 69.209514][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.227235][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.252568][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.259975][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.267071][ T5858] bridge_slave_0: entered allmulticast mode [ 69.275018][ T5858] bridge_slave_0: entered promiscuous mode [ 69.283527][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.302144][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.309106][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.334999][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.362254][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.369452][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.376613][ T5858] bridge_slave_1: entered allmulticast mode [ 69.384190][ T5858] bridge_slave_1: entered promiscuous mode [ 69.399680][ T5842] team0: Port device team_slave_0 added [ 69.411818][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.418785][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.445029][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.456832][ T5840] team0: Port device team_slave_0 added [ 69.464244][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.471220][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.498034][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.517126][ T5842] team0: Port device team_slave_1 added [ 69.537919][ T5840] team0: Port device team_slave_1 added [ 69.544089][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.551215][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.577204][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.609443][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.616385][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.642586][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.673678][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.691876][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.699013][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.724997][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.749901][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.756845][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.782834][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.795474][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.802488][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.829048][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.841138][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.889386][ T5843] hsr_slave_0: entered promiscuous mode [ 69.895781][ T5843] hsr_slave_1: entered promiscuous mode [ 69.914907][ T5841] hsr_slave_0: entered promiscuous mode [ 69.921511][ T5841] hsr_slave_1: entered promiscuous mode [ 69.927307][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 69.933117][ T5841] Cannot create hsr debugfs directory [ 69.941996][ T5858] team0: Port device team_slave_0 added [ 69.968564][ T5842] hsr_slave_0: entered promiscuous mode [ 69.974678][ T5842] hsr_slave_1: entered promiscuous mode [ 69.980672][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 69.986387][ T5842] Cannot create hsr debugfs directory [ 70.009996][ T5858] team0: Port device team_slave_1 added [ 70.058184][ T5846] Bluetooth: hci4: command tx timeout [ 70.058185][ T5853] Bluetooth: hci1: command tx timeout [ 70.058324][ T5846] Bluetooth: hci3: command tx timeout [ 70.063703][ T5853] Bluetooth: hci0: command tx timeout [ 70.106023][ T5840] hsr_slave_0: entered promiscuous mode [ 70.112797][ T5840] hsr_slave_1: entered promiscuous mode [ 70.119001][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 70.124718][ T5840] Cannot create hsr debugfs directory [ 70.137690][ T5853] Bluetooth: hci2: command tx timeout [ 70.174079][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.181257][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.207728][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.238060][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.245014][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.272535][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.422672][ T5858] hsr_slave_0: entered promiscuous mode [ 70.429268][ T5858] hsr_slave_1: entered promiscuous mode [ 70.435118][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 70.440953][ T5858] Cannot create hsr debugfs directory [ 70.604313][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.616513][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.635496][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.654085][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.689463][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.705964][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.716307][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.725639][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.806846][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.827198][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.854822][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.864613][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.932369][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.939513][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.949032][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.958935][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.977869][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.988068][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.002191][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.045948][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.086482][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.096126][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.108671][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.120652][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.129868][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.140561][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.169209][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.176345][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.185266][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.192363][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.202522][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.209580][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.228082][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.235157][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.321337][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.356641][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.396931][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.436701][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.438203][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 71.438214][ T30] audit: type=1400 audit(1754766387.094:86): avc: denied { sys_module } for pid=5842 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.443893][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.537763][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.566198][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.591141][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.598507][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.627298][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.647138][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.664212][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.687165][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.694301][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.705046][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.712181][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.738962][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.746061][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.773677][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.780795][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.832899][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.885922][ T5842] veth0_vlan: entered promiscuous mode [ 71.945792][ T5842] veth1_vlan: entered promiscuous mode [ 71.973862][ T5841] veth0_vlan: entered promiscuous mode [ 71.983515][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.001829][ T5841] veth1_vlan: entered promiscuous mode [ 72.110538][ T5842] veth0_macvtap: entered promiscuous mode [ 72.126939][ T5841] veth0_macvtap: entered promiscuous mode [ 72.133198][ T5853] Bluetooth: hci0: command tx timeout [ 72.138902][ T5853] Bluetooth: hci3: command tx timeout [ 72.140648][ T5855] Bluetooth: hci4: command tx timeout [ 72.150400][ T5846] Bluetooth: hci1: command tx timeout [ 72.153894][ T5841] veth1_macvtap: entered promiscuous mode [ 72.181747][ T5842] veth1_macvtap: entered promiscuous mode [ 72.207805][ T5846] Bluetooth: hci2: command tx timeout [ 72.236837][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.266789][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.306737][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.332266][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.361891][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.372188][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.419716][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.435721][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.444983][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.473792][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.483886][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.493931][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.509305][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.521320][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.611695][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.615591][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.624486][ T5858] veth0_vlan: entered promiscuous mode [ 72.633245][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.635371][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.688260][ T5858] veth1_vlan: entered promiscuous mode [ 72.693767][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.705456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.729978][ T30] audit: type=1400 audit(1754766388.394:87): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.D0jZDM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.754847][ T30] audit: type=1400 audit(1754766388.394:88): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.783480][ T5840] veth0_vlan: entered promiscuous mode [ 72.792628][ T5843] veth0_vlan: entered promiscuous mode [ 72.796196][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.814144][ T30] audit: type=1400 audit(1754766388.394:89): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.D0jZDM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.840659][ T30] audit: type=1400 audit(1754766388.394:90): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.868089][ T5840] veth1_vlan: entered promiscuous mode [ 72.873952][ T30] audit: type=1400 audit(1754766388.394:91): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.D0jZDM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.883617][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.903534][ T30] audit: type=1400 audit(1754766388.394:92): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.D0jZDM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.917057][ T5858] veth0_macvtap: entered promiscuous mode [ 72.944072][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.945420][ T30] audit: type=1400 audit(1754766388.404:93): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.972649][ T30] audit: type=1400 audit(1754766388.424:94): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.995991][ T30] audit: type=1400 audit(1754766388.424:95): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="gadgetfs" ino=6123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.019822][ T5840] veth0_macvtap: entered promiscuous mode [ 73.029032][ T5858] veth1_macvtap: entered promiscuous mode [ 73.045063][ T5843] veth1_vlan: entered promiscuous mode [ 73.092074][ T5840] veth1_macvtap: entered promiscuous mode [ 73.139860][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.161518][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.184074][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.200220][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.210183][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.325792][ T5843] veth0_macvtap: entered promiscuous mode [ 73.352810][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.399245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.483707][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.623668][ T5843] veth1_macvtap: entered promiscuous mode [ 73.682071][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.857589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.895370][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.915741][ T191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.135559][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.166527][ T191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.231771][ T5846] Bluetooth: hci1: command tx timeout [ 74.237746][ T5846] Bluetooth: hci4: command tx timeout [ 74.243184][ T5846] Bluetooth: hci3: command tx timeout [ 74.250493][ T5855] Bluetooth: hci0: command tx timeout [ 74.256864][ T191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.310507][ T5855] Bluetooth: hci2: command tx timeout [ 74.354600][ T191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.412456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.539095][ T5969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.828147][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.847986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.855262][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.901950][ T5969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.939266][ T5969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.954663][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.966188][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 75.116449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.234927][ T5969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.327983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.337727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.490684][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.588704][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.604808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.613411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.621893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.937408][ T5982] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 75.947137][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.957062][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.008427][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.024598][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.231371][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.357195][ T5855] Bluetooth: hci0: command tx timeout [ 76.362627][ T5855] Bluetooth: hci3: command tx timeout [ 76.368894][ T5855] Bluetooth: hci1: command tx timeout [ 76.374133][ T5846] Bluetooth: hci4: command tx timeout [ 76.374288][ T5855] Bluetooth: hci2: command tx timeout [ 76.387212][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.410286][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.433895][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.630724][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 76.977688][ T1208] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 77.381216][ T1208] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 77.397633][ T1208] usb 5-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 77.423038][ T1208] usb 5-1: config 0 has no interface number 0 [ 77.439488][ T1208] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.479122][ T1208] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.533588][ T1208] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 77.562961][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.617411][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 77.617425][ T30] audit: type=1400 audit(1754766393.234:129): avc: denied { create } for pid=5995 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.709842][ T1208] usb 5-1: config 0 descriptor?? [ 77.716367][ T30] audit: type=1400 audit(1754766393.364:130): avc: denied { read write } for pid=5995 comm="syz.3.4" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.719355][ T1208] ldusb 5-1:0.55: Interrupt in endpoint not found [ 77.754112][ T30] audit: type=1400 audit(1754766393.364:131): avc: denied { open } for pid=5995 comm="syz.3.4" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 78.120984][ T30] audit: type=1400 audit(1754766393.724:132): avc: denied { write } for pid=5993 comm="syz.4.5" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.263278][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.287125][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.307225][ T5901] usb 5-1: USB disconnect, device number 2 [ 78.343192][ T30] audit: type=1400 audit(1754766394.004:133): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.739103][ T30] audit: type=1400 audit(1754766394.404:134): avc: denied { read write } for pid=6020 comm="syz.3.13" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.921664][ T6022] 9pnet_fd: Insufficient options for proto=fd [ 78.970074][ T30] audit: type=1400 audit(1754766394.404:135): avc: denied { open } for pid=6020 comm="syz.3.13" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.290307][ T30] audit: type=1400 audit(1754766394.804:136): avc: denied { create } for pid=6030 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.217058][ T6050] comedi comedi3: c6xdigio: I/O port conflict (0x3c4,3) [ 80.336891][ T30] audit: type=1400 audit(1754766395.994:137): avc: denied { create } for pid=6053 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.365240][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.183133][ T9] cfg80211: failed to load regulatory.db [ 81.346274][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 81.358299][ T30] audit: type=1400 audit(1754766397.004:138): avc: denied { create } for pid=6062 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.927406][ T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.201114][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 82.219905][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 82.242035][ T55] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 82.259274][ T55] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.269791][ T55] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.278170][ T55] usb 4-1: Product: syz [ 82.282510][ T55] usb 4-1: Manufacturer: syz [ 82.291925][ T55] usb 4-1: SerialNumber: syz [ 82.313952][ T55] usb 4-1: config 0 descriptor?? [ 82.325224][ T55] hub 4-1:0.0: bad descriptor, ignoring hub [ 82.332951][ T55] hub 4-1:0.0: probe with driver hub failed with error -5 [ 82.664549][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 82.664564][ T30] audit: type=1400 audit(1754766398.274:143): avc: denied { create } for pid=6075 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.743992][ T30] audit: type=1400 audit(1754766398.284:144): avc: denied { read write } for pid=6075 comm="syz.4.27" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.027492][ T30] audit: type=1400 audit(1754766398.284:145): avc: denied { open } for pid=6075 comm="syz.4.27" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.082489][ T30] audit: type=1400 audit(1754766398.294:146): avc: denied { map_create } for pid=6075 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.148589][ T30] audit: type=1400 audit(1754766398.314:147): avc: denied { create } for pid=6075 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.188205][ T30] audit: type=1400 audit(1754766398.314:148): avc: denied { create } for pid=6075 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.227017][ T30] audit: type=1400 audit(1754766398.324:149): avc: denied { ioctl } for pid=6075 comm="syz.4.27" path="socket:[8622]" dev="sockfs" ino=8622 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.964399][ T30] audit: type=1400 audit(1754766399.624:150): avc: denied { ioctl } for pid=6086 comm="syz.0.29" path="socket:[8645]" dev="sockfs" ino=8645 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.046398][ T30] audit: type=1400 audit(1754766399.704:151): avc: denied { bind } for pid=6086 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.112133][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.150616][ T30] audit: type=1400 audit(1754766399.804:152): avc: denied { create } for pid=6088 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.567722][ T5909] usb 4-1: USB disconnect, device number 2 [ 86.061957][ T6113] netlink: 'syz.3.36': attribute type 10 has an invalid length. [ 86.151505][ T6113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.387385][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.500935][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 88.583302][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 102, changing to 7 [ 88.594538][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24624, setting to 1024 [ 88.614862][ T55] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.636345][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.899717][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 88.899732][ T30] audit: type=1400 audit(1754766404.564:171): avc: denied { create } for pid=6115 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.987176][ T55] usb 4-1: Product: syz [ 88.997424][ T55] usb 4-1: Manufacturer: syz [ 89.004068][ T55] usb 4-1: SerialNumber: syz [ 89.106928][ T55] usb 4-1: config 0 descriptor?? [ 89.129370][ T55] usb 4-1: can't set config #0, error -71 [ 89.157936][ T55] usb 4-1: USB disconnect, device number 3 [ 89.277606][ T6131] comedi comedi3: c6xdigio: I/O port conflict (0x3c4,3) [ 89.284657][ T6131] ================================================================== [ 89.292706][ T6131] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 89.300670][ T6131] Read of size 8 at addr ffff888032b07830 by task syz.4.40/6131 [ 89.308269][ T6131] [ 89.310572][ T6131] CPU: 0 UID: 0 PID: 6131 Comm: syz.4.40 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 89.310587][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.310595][ T6131] Call Trace: [ 89.310603][ T6131] [ 89.310608][ T6131] dump_stack_lvl+0x116/0x1f0 [ 89.310624][ T6131] print_report+0xcd/0x630 [ 89.310642][ T6131] ? __virt_addr_valid+0x81/0x610 [ 89.310662][ T6131] ? __phys_addr+0xe8/0x180 [ 89.310681][ T6131] ? sysfs_remove_file_ns+0x63/0x70 [ 89.310696][ T6131] kasan_report+0xe0/0x110 [ 89.310711][ T6131] ? sysfs_remove_file_ns+0x63/0x70 [ 89.310731][ T6131] sysfs_remove_file_ns+0x63/0x70 [ 89.310750][ T6131] driver_remove_file+0x4a/0x60 [ 89.310767][ T6131] bus_remove_driver+0x224/0x2c0 [ 89.310785][ T6131] driver_unregister+0x76/0xb0 [ 89.310797][ T6131] comedi_device_detach_locked+0x12c/0xa50 [ 89.310811][ T6131] comedi_device_detach+0x67/0xb0 [ 89.310821][ T6131] comedi_device_attach+0x43d/0x900 [ 89.310832][ T6131] do_devconfig_ioctl+0x1b1/0x710 [ 89.310847][ T6131] ? __mutex_lock+0x1c4/0x10b0 [ 89.310858][ T6131] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 89.310870][ T6131] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 89.310886][ T6131] ? find_held_lock+0x2b/0x80 [ 89.310900][ T6131] ? __schedule+0x3fef/0x5de0 [ 89.310916][ T6131] comedi_unlocked_ioctl+0x165d/0x2f00 [ 89.310940][ T6131] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 89.310957][ T6131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.310970][ T6131] ? do_vfs_ioctl+0x128/0x14f0 [ 89.310987][ T6131] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 89.311002][ T6131] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 89.311016][ T6131] ? rcu_is_watching+0x12/0xc0 [ 89.311035][ T6131] ? irqentry_exit+0x3b/0x90 [ 89.311047][ T6131] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.311060][ T6131] ? bpf_lsm_file_ioctl+0x4/0x10 [ 89.311075][ T6131] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 89.311090][ T6131] __x64_sys_ioctl+0x18e/0x210 [ 89.311107][ T6131] do_syscall_64+0xcd/0x4c0 [ 89.311118][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.311130][ T6131] RIP: 0033:0x7ff58c78ebe9 [ 89.311140][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.311151][ T6131] RSP: 002b:00007ff58d61f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.311161][ T6131] RAX: ffffffffffffffda RBX: 00007ff58c9b6090 RCX: 00007ff58c78ebe9 [ 89.311168][ T6131] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 89.311175][ T6131] RBP: 00007ff58c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 89.311181][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.311187][ T6131] R13: 00007ff58c9b6128 R14: 00007ff58c9b6090 R15: 00007ffce9a24cf8 [ 89.311196][ T6131] [ 89.311200][ T6131] [ 89.588541][ T6131] Allocated by task 5982: [ 89.592852][ T6131] kasan_save_stack+0x33/0x60 [ 89.597522][ T6131] kasan_save_track+0x14/0x30 [ 89.602187][ T6131] __kasan_kmalloc+0xaa/0xb0 [ 89.606761][ T6131] bus_add_driver+0x92/0x690 [ 89.611341][ T6131] driver_register+0x15c/0x4b0 [ 89.616085][ T6131] c6xdigio_attach+0xa3/0x4b0 [ 89.620744][ T6131] comedi_device_attach+0x3b0/0x900 [ 89.625920][ T6131] do_devconfig_ioctl+0x1b1/0x710 [ 89.630924][ T6131] comedi_unlocked_ioctl+0x165d/0x2f00 [ 89.636363][ T6131] __x64_sys_ioctl+0x18e/0x210 [ 89.641109][ T6131] do_syscall_64+0xcd/0x4c0 [ 89.645590][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.651458][ T6131] [ 89.653759][ T6131] Freed by task 6050: [ 89.657712][ T6131] kasan_save_stack+0x33/0x60 [ 89.662375][ T6131] kasan_save_track+0x14/0x30 [ 89.667026][ T6131] kasan_save_free_info+0x3b/0x60 [ 89.672030][ T6131] __kasan_slab_free+0x60/0x70 [ 89.676770][ T6131] kfree+0x2b4/0x4d0 [ 89.680648][ T6131] kobject_put+0x1e7/0x5a0 [ 89.685041][ T6131] bus_remove_driver+0x16e/0x2c0 [ 89.689959][ T6131] driver_unregister+0x76/0xb0 [ 89.694702][ T6131] comedi_device_detach_locked+0x12c/0xa50 [ 89.700485][ T6131] comedi_device_detach+0x67/0xb0 [ 89.705485][ T6131] comedi_device_attach+0x43d/0x900 [ 89.710657][ T6131] do_devconfig_ioctl+0x1b1/0x710 [ 89.715661][ T6131] comedi_unlocked_ioctl+0x165d/0x2f00 [ 89.721099][ T6131] __x64_sys_ioctl+0x18e/0x210 [ 89.725848][ T6131] do_syscall_64+0xcd/0x4c0 [ 89.730331][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.736199][ T6131] [ 89.738500][ T6131] The buggy address belongs to the object at ffff888032b07800 [ 89.738500][ T6131] which belongs to the cache kmalloc-256 of size 256 [ 89.752528][ T6131] The buggy address is located 48 bytes inside of [ 89.752528][ T6131] freed 256-byte region [ffff888032b07800, ffff888032b07900) [ 89.766212][ T6131] [ 89.768522][ T6131] The buggy address belongs to the physical page: [ 89.774913][ T6131] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32b06 [ 89.783664][ T6131] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.792133][ T6131] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 89.799653][ T6131] page_type: f5(slab) [ 89.803610][ T6131] raw: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 89.812168][ T6131] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 89.820727][ T6131] head: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 89.829374][ T6131] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 89.838018][ T6131] head: 00fff00000000001 ffffea0000cac181 00000000ffffffff 00000000ffffffff [ 89.846691][ T6131] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 89.855352][ T6131] page dumped because: kasan: bad access detected [ 89.861747][ T6131] page_owner tracks the page as allocated [ 89.867441][ T6131] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5843, tgid 5843 (syz-executor), ts 75466542620, free_ts 75425877075 [ 89.888777][ T6131] post_alloc_hook+0x1c0/0x230 [ 89.893529][ T6131] get_page_from_freelist+0x132b/0x38e0 [ 89.899052][ T6131] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 89.904920][ T6131] alloc_pages_mpol+0x1fb/0x550 [ 89.909751][ T6131] new_slab+0x247/0x330 [ 89.913890][ T6131] ___slab_alloc+0xcf2/0x1740 [ 89.918551][ T6131] __slab_alloc.constprop.0+0x56/0xb0 [ 89.923905][ T6131] __kmalloc_noprof+0x2f2/0x510 [ 89.928730][ T6131] fib_create_info+0x53f/0x46b0 [ 89.933563][ T6131] fib_table_insert+0x177/0x1c40 [ 89.938475][ T6131] fib_magic+0x4d4/0x5c0 [ 89.942697][ T6131] fib_add_ifaddr+0x4d2/0x580 [ 89.947355][ T6131] fib_netdev_event+0x38a/0x710 [ 89.952197][ T6131] notifier_call_chain+0xbc/0x410 [ 89.957206][ T6131] call_netdevice_notifiers_info+0xbe/0x140 [ 89.963077][ T6131] __dev_notify_flags+0x12c/0x2e0 [ 89.968076][ T6131] page last free pid 5217 tgid 5217 stack trace: [ 89.974648][ T6131] __free_frozen_pages+0x7d5/0x10f0 [ 89.979834][ T6131] qlist_free_all+0x4d/0x120 [ 89.984398][ T6131] kasan_quarantine_reduce+0x195/0x1e0 [ 89.989835][ T6131] __kasan_slab_alloc+0x69/0x90 [ 89.994664][ T6131] __kmalloc_noprof+0x1d4/0x510 [ 89.999490][ T6131] tomoyo_realpath_from_path+0xc2/0x6e0 [ 90.005020][ T6131] tomoyo_path_perm+0x274/0x460 [ 90.009850][ T6131] security_inode_getattr+0x116/0x290 [ 90.015206][ T6131] vfs_fstat+0x4b/0xe0 [ 90.019257][ T6131] __do_sys_newfstat+0x87/0x100 [ 90.024091][ T6131] do_syscall_64+0xcd/0x4c0 [ 90.028570][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.034439][ T6131] [ 90.036741][ T6131] Memory state around the buggy address: [ 90.042344][ T6131] ffff888032b07700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.050378][ T6131] ffff888032b07780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.058413][ T6131] >ffff888032b07800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.066448][ T6131] ^ [ 90.072054][ T6131] ffff888032b07880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.080090][ T6131] ffff888032b07900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.088141][ T6131] ================================================================== [ 90.097682][ T6131] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.104883][ T6131] CPU: 0 UID: 0 PID: 6131 Comm: syz.4.40 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 90.116331][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.126379][ T6131] Call Trace: [ 90.129632][ T6131] [ 90.132550][ T6131] dump_stack_lvl+0x3d/0x1f0 [ 90.137116][ T6131] vpanic+0x6e8/0x7a0 [ 90.141076][ T6131] ? __pfx_vpanic+0x10/0x10 [ 90.145557][ T6131] ? sysfs_remove_file_ns+0x63/0x70 [ 90.150730][ T6131] panic+0xca/0xd0 [ 90.154434][ T6131] ? __pfx_panic+0x10/0x10 [ 90.158831][ T6131] ? sysfs_remove_file_ns+0x63/0x70 [ 90.164032][ T6131] ? preempt_schedule_common+0x44/0xc0 [ 90.169508][ T6131] ? preempt_schedule_thunk+0x16/0x30 [ 90.174889][ T6131] check_panic_on_warn+0xab/0xb0 [ 90.179817][ T6131] end_report+0x107/0x170 [ 90.184165][ T6131] kasan_report+0xee/0x110 [ 90.188563][ T6131] ? sysfs_remove_file_ns+0x63/0x70 [ 90.193744][ T6131] sysfs_remove_file_ns+0x63/0x70 [ 90.198748][ T6131] driver_remove_file+0x4a/0x60 [ 90.203581][ T6131] bus_remove_driver+0x224/0x2c0 [ 90.208504][ T6131] driver_unregister+0x76/0xb0 [ 90.213249][ T6131] comedi_device_detach_locked+0x12c/0xa50 [ 90.219039][ T6131] comedi_device_detach+0x67/0xb0 [ 90.224040][ T6131] comedi_device_attach+0x43d/0x900 [ 90.229220][ T6131] do_devconfig_ioctl+0x1b1/0x710 [ 90.234226][ T6131] ? __mutex_lock+0x1c4/0x10b0 [ 90.238969][ T6131] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 90.245535][ T6131] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 90.251066][ T6131] ? find_held_lock+0x2b/0x80 [ 90.255728][ T6131] ? __schedule+0x3fef/0x5de0 [ 90.260393][ T6131] comedi_unlocked_ioctl+0x165d/0x2f00 [ 90.265839][ T6131] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 90.271632][ T6131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.277507][ T6131] ? do_vfs_ioctl+0x128/0x14f0 [ 90.282258][ T6131] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 90.287266][ T6131] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 90.293231][ T6131] ? rcu_is_watching+0x12/0xc0 [ 90.297978][ T6131] ? irqentry_exit+0x3b/0x90 [ 90.302547][ T6131] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.307727][ T6131] ? bpf_lsm_file_ioctl+0x4/0x10 [ 90.312649][ T6131] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 90.318441][ T6131] __x64_sys_ioctl+0x18e/0x210 [ 90.323192][ T6131] do_syscall_64+0xcd/0x4c0 [ 90.327676][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.333552][ T6131] RIP: 0033:0x7ff58c78ebe9 [ 90.337946][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.357531][ T6131] RSP: 002b:00007ff58d61f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.365922][ T6131] RAX: ffffffffffffffda RBX: 00007ff58c9b6090 RCX: 00007ff58c78ebe9 [ 90.373875][ T6131] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 90.381836][ T6131] RBP: 00007ff58c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 90.389786][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.397733][ T6131] R13: 00007ff58c9b6128 R14: 00007ff58c9b6090 R15: 00007ffce9a24cf8 [ 90.405683][ T6131] [ 90.408882][ T6131] Kernel Offset: disabled [ 90.413179][ T6131] Rebooting in 86400 seconds..