last executing test programs: 7.400433318s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000927000/0x7000)=nil, 0x2) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r7, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r5, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 7.183176894s ago: executing program 0 (id=1): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x10, 0x2, &(0x7f0000000200)="05fb"}, {0x1, 0x18, 0xa, &(0x7f0000000280)="68a6ca"}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0xff, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xffff8001, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x3f, 0x0}, {0x3, 0x0, 0xd09f, 0x0}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0x25dfdbfc, {0x60, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 6.170684339s ago: executing program 3 (id=6): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000240)=0x100, 0x4) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000003c0)="631dfe634c87c0ea477a1a4d6413023a79082277f86ed7bb3002b63b877d520aee98edd52ea47a1df725783626bd888923744607445d5258d2f1a0ee6a6ce67a1019787b4b8556dd94c93b0a6395896883e94bd72b1b90095588c6cb7bcf11f227ec57b51d98eab8c02f53a58491e4fbd604356ad591d35f5458f8d84a1bf81dcc785c8c3db5ca9167273d2d33f45cc46438d45c533b4f81ce92b4e9fdf972b61dbbecebea2e5bd00f951e125314741a0fa22496") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x83) socket$unix(0x1, 0x1, 0x0) r4 = memfd_secret(0x0) fchownat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000140)=0xb700) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) 5.647427313s ago: executing program 0 (id=7): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000017}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c0001"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setrlimit(0xa, &(0x7f0000000000)={0x3, 0xfff}) iopl(0x3) r4 = syz_open_dev$audion(0x0, 0x589, 0x100) setfsgid(0xee00) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r6 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmat(r6, &(0x7f0000ffd000/0x3000)=nil, 0x2000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @random="d0291dc581e9", {0x8, 0x9}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x2}}, @void, @val, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x5, 0x1ff1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x2, 0x2}}, @val={0x72, 0x6}, [{0xdd, 0x26, "d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33a2"}, {0xdd, 0xa, "3c8295fec149cec496f3"}]}, 0x76) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000042c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x30}}], 0x1, 0x0) 5.122154118s ago: executing program 3 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) symlink(&(0x7f0000000340)='.\x00', &(0x7f0000000100)='./file0\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1440, 0x1148, 0x1170, 0x1398, 0x1148, 0x1170, 0x1370, 0x1398, 0x1398, 0x1370, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1100, 0x1148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0xfc, './cgroup.net/syz0\x00', 0x0, {0xfffffffffffffffe}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0x23, 0x0, [@empty, @local, @loopback, @mcast2, @remote, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14a0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e20000000060000000000000000000000000000000100000000200002000a004e2300000000fc0000000000000000000000000000000e0000000d0001007564703a73797a3200000000bf171c88d3b4aff87a0acebbdb2f5e754166eb"], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40404}, 0x100) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x68090, &(0x7f0000000400)) chdir(0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 4.392943361s ago: executing program 2 (id=3): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}, {0x0}], 0x2) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000042000701feffffff00000000017c0000040042800c000180"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.292072298s ago: executing program 1 (id=2): ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={&(0x7f0000000180)=[0x3, 0x1ff, 0x1d0, 0x7c, 0x6, 0x5, 0x9, 0x6151, 0x45671d7f, 0x1, 0x55, 0x6, 0x5, 0x3, 0x7f, 0x8, 0x5, 0x7, 0xffff621e, 0x6, 0x80, 0xfffffff8, 0x9, 0x1, 0x7f, 0x2, 0x81, 0x400, 0x4, 0x400, 0x8000, 0x7, 0x2, 0x8e11, 0xa, 0x6, 0x40, 0x3, 0x4, 0xffff8000, 0xfffffffa, 0xe4, 0x6914, 0x1, 0x5, 0x6, 0x8f79, 0xff, 0x4, 0x9, 0x20000000, 0x3, 0x8, 0x80f9d7d, 0x5, 0x5, 0x54b, 0xdd, 0xfffffffc, 0x0, 0x7, 0x8, 0xfffffffc, 0x3, 0x4, 0x0, 0x7fff, 0x8001, 0x5, 0xa, 0x3, 0x10003, 0x703f, 0x8, 0x763d, 0x94c, 0x92, 0xce, 0xc, 0x7fff, 0x7, 0x3, 0x890e, 0xef4, 0x4, 0x8, 0xff, 0x3, 0x3, 0x9cbb, 0x5, 0x1, 0xd021, 0x3, 0x1000, 0x5, 0xff, 0x4, 0x3ff, 0x2, 0x3, 0x5, 0x81, 0x8000, 0x9, 0xd, 0x5f04, 0x6, 0x4, 0xe, 0x964, 0x5, 0xff, 0x8, 0xfffffffe, 0x4, 0xc, 0x40, 0x5, 0x5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x80000000, 0x7, 0x4, 0x101, 0x7b98, 0x3, 0x7f260000, 0x9, 0xff, 0x7, 0x9, 0xc, 0x9, 0x7fffffff, 0x5, 0x7, 0x4, 0x3, 0x8, 0x8, 0x4, 0x83e, 0x7fff, 0x7, 0x9, 0x3, 0xca5d, 0xffffffff, 0x1000, 0x1, 0x0, 0x3, 0x3, 0x79, 0x9, 0x51e6, 0x46, 0xb, 0x1, 0x10000, 0x6, 0x1e00, 0x6, 0x8, 0x1, 0x45495d9b, 0xba, 0x2, 0x2, 0x7, 0x8, 0x9, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0xc613, 0x2, 0x86b, 0x81, 0x3, 0x9, 0x8, 0x6, 0x9, 0x0, 0x5, 0x5, 0x349, 0x1, 0x1, 0x9, 0x6, 0x1, 0x9, 0x5, 0x8001, 0xe, 0x5, 0x10001, 0x8000, 0xf50a, 0x6, 0x85a, 0x4, 0xc3, 0x3, 0x5, 0x8, 0x10000, 0x10000, 0xa, 0x1ff, 0xf, 0x2, 0x101, 0x5d4, 0xf7c, 0x6, 0x8, 0x400, 0x1, 0xffffffff, 0x6, 0x0, 0x7, 0x8, 0x8, 0x1, 0x5, 0x3, 0x8, 0x0, 0x4, 0x70, 0x4, 0x8, 0x2, 0xfa0, 0x80da, 0x5, 0x3, 0x5, 0x4e01e696, 0x3, 0xfffffffb, 0xd54, 0xb3, 0x4, 0xf7, 0xfff, 0x8, 0x1, 0x6c, 0xd9, 0x6, 0x6, 0x9, 0x2d, 0xe, 0x542dbbe9, 0x9, 0x7a8, 0x9, 0x8, 0x9, 0x101, 0x7, 0x7fff, 0x0, 0x2, 0x7, 0x6, 0x7, 0xb59, 0x7, 0xa6ab, 0x7, 0x8000, 0x20, 0x2, 0xfd, 0x8817, 0x2, 0x9, 0x5a, 0x6, 0x80000001, 0x6, 0x3, 0x3, 0x17c7286c, 0x6, 0xffffffff, 0x0, 0x4, 0x8, 0x0, 0x401, 0x40, 0x0, 0x4b4, 0x40, 0x10, 0xf, 0x7, 0x8, 0xffff, 0x9, 0x10001, 0x3, 0x2, 0x5f6c, 0x5, 0x80000001, 0x2, 0x8, 0x2, 0x1, 0x0, 0x5, 0x4, 0x8001, 0x1, 0x7af0, 0x1, 0x0, 0x9, 0x3, 0x0, 0x3, 0x3, 0xfffffffa, 0x3ff, 0x5e9967dd, 0x4, 0x15, 0x0, 0x8, 0x3, 0xfa, 0xfffffffb, 0x2, 0x9, 0x9, 0xc25, 0x69d1, 0x4, 0x8, 0x4, 0x514c, 0x7aded2d2, 0xfffffffe, 0x400, 0x5, 0x6, 0xc48, 0xa, 0x4, 0x2, 0x0, 0x2, 0x101, 0xfffffff7, 0x1, 0x0, 0x100, 0x0, 0x8, 0x3, 0x2, 0xacf7, 0x18000, 0x5, 0x2, 0x6, 0x2, 0x2, 0x7, 0x8, 0x54, 0x81, 0xb8c, 0x10, 0x482b4b04, 0x2, 0x4, 0x7, 0x4, 0xffffa223, 0xcfb0000, 0x9, 0x8, 0x800, 0x5, 0x93, 0xe, 0x7, 0x3, 0x5, 0x4, 0xffff85f6, 0x3, 0xfffff8df, 0x8, 0x1000, 0x3f0000, 0x5, 0x3, 0x7, 0x8, 0xffffffff, 0x8001, 0xa0af, 0xf0b, 0xb, 0x167, 0x1, 0x8, 0x401, 0xb0c, 0x9, 0x3, 0xa9f1, 0x8, 0x0, 0x4, 0x6, 0x57, 0x2, 0x4, 0x3, 0xfffffffb, 0x7fffffff, 0x6, 0x6dc9, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0xc6, 0x4, 0x1, 0x40, 0x0, 0xa69, 0xffffe8f9, 0x43, 0x10, 0x80000000, 0x1, 0x35f, 0xc, 0xfffffffd, 0x3, 0x9, 0x7, 0x10001, 0x3, 0x80000001, 0x2, 0x6, 0x6, 0x6, 0x8, 0x3db, 0x2, 0x8, 0x5, 0xd, 0x26860260, 0x40, 0x0, 0x8000, 0x0, 0x101, 0x1, 0xffffa448, 0x3, 0xf11, 0x6, 0xfffffff9, 0x1, 0x0, 0x5, 0x8, 0x7, 0x9, 0xffff179d, 0x6, 0x0, 0x21, 0x279, 0x3, 0x7ff, 0xe4000000, 0x2, 0xfffffff7, 0x6, 0x0, 0xa, 0x5, 0x1, 0x7, 0x4, 0x3, 0xfffffffb, 0x3, 0x7, 0x5, 0x6, 0x9, 0x2, 0x1, 0x3, 0x10, 0x6d80000, 0x8, 0x1ff, 0x800, 0xa, 0x2, 0xffffffff, 0x3, 0xff, 0x1, 0x5, 0x2, 0x80000001, 0x4, 0x1, 0x2, 0x1, 0x85, 0xffffffff, 0x4b4, 0x90000001, 0x5, 0x67468d6c, 0x5, 0x1, 0x5, 0x9, 0x3, 0x5, 0x687, 0x3, 0x5, 0x7, 0x3, 0x3c, 0x3, 0xfe3e, 0x0, 0x5, 0x6, 0xfffffffc, 0x6, 0x7fffffff, 0x1, 0x0, 0x0, 0x8, 0x8, 0x5, 0xfffff3c2, 0x6, 0x3, 0x6, 0x2, 0x4, 0x3, 0x6, 0x7, 0xc8e, 0x8, 0xf, 0x3, 0x0, 0x9, 0x6, 0x0, 0x14c59023, 0x9, 0xffffff6d, 0x0, 0xf97, 0x2, 0x400, 0x7f, 0x7fff, 0x9, 0xfff, 0x9, 0x7, 0x1, 0x9, 0xb27a, 0x7, 0x7, 0x404, 0x4, 0x9, 0x0, 0x80000000, 0x8, 0x6, 0x2, 0x3, 0x6, 0x2, 0x9, 0x7, 0x10000, 0xa, 0x3, 0x6, 0x10000, 0x7f, 0x5, 0x3, 0x101, 0xfffffffe, 0x2, 0x4, 0xffffffff, 0x4, 0x5, 0x2, 0x9, 0xffffffff, 0x2, 0x3, 0x1, 0x53f, 0x0, 0x0, 0x10000, 0x7, 0x80, 0x0, 0xa, 0x8, 0x0, 0x2000, 0x572800, 0x6, 0x681, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0xffffff80, 0xfffffffb, 0xffffffff, 0x4, 0x4, 0x6, 0x8, 0x4, 0x3, 0xa, 0x80000000, 0x1, 0x8, 0x7fffffff, 0x5668, 0x1, 0x9, 0x7, 0x2, 0x9, 0x2, 0x2, 0x8, 0x925e, 0xa, 0x2, 0x9c, 0x4, 0x8000, 0xa, 0x9, 0x4, 0x8, 0x80000000, 0xfffffebf, 0x23, 0x57a, 0x8, 0x4, 0xaf, 0x2, 0x5, 0x0, 0x9, 0xffff, 0x0, 0x8000, 0x7, 0x2, 0x7, 0x7, 0x5f4, 0x5, 0xdbdb, 0x7000, 0x0, 0x27a, 0x7fff, 0xae, 0x2, 0x8, 0xfffffffe, 0x5, 0x3, 0x9, 0x10001, 0x6, 0x5, 0x7fff, 0x9, 0x4, 0xfffffff9, 0x7, 0x6, 0x9d5e, 0x7665eb43, 0x3, 0x200, 0x8, 0x5, 0x4, 0x0, 0x6, 0x401, 0x6, 0x1, 0x4, 0x3, 0x0, 0x7, 0x2, 0xe62, 0x9, 0x20000, 0x7, 0xd5e, 0x551d, 0x200, 0x2, 0xc66, 0xfffffff8, 0x5, 0x3, 0xa, 0x7, 0x9, 0x100, 0x6, 0x1, 0x4, 0x27023543, 0x1, 0x81, 0x9, 0x4, 0x1, 0xe, 0x8, 0x6, 0xe, 0x3ff, 0x3ff, 0xb6, 0xff, 0x2, 0x6, 0x5, 0x7, 0x1, 0x5, 0x9, 0x6, 0x80000001, 0xa, 0x7fffffff, 0x6, 0x0, 0x2, 0x9, 0x400, 0xa92, 0x9, 0x40, 0x0, 0x6, 0x7, 0xb, 0x40, 0x0, 0xb4, 0x40, 0x5, 0x1, 0x1010000, 0x8, 0x82c, 0x8000, 0x10, 0x2, 0xd, 0xd, 0x6, 0x3, 0xa, 0x6, 0x1000, 0xb, 0x9, 0x40, 0xffff, 0x1, 0x40, 0x6, 0xd, 0x400, 0xd56c, 0x9, 0x8, 0x4, 0x6, 0xddb, 0x9, 0x2, 0x66, 0x10000, 0x0, 0x0, 0x4, 0x4, 0x2, 0x3, 0x7fff, 0xa73, 0x9, 0xfffffffe, 0x7, 0x2, 0xbf3, 0xa0a6, 0x5, 0xb, 0x9, 0xfffffb0a, 0x8, 0x8001, 0x4, 0x5, 0xb, 0x6, 0x7, 0x1, 0x3, 0x6, 0x1, 0x58, 0xf, 0x80000, 0x100, 0x0, 0xa59f, 0xd, 0x6f6, 0x2, 0x5, 0xff, 0x80000000, 0xdfb0, 0x47ad, 0x9, 0xfffffdab, 0x5, 0x5, 0x99, 0x7, 0xffffff4d, 0xffe, 0x5f25, 0x93, 0x8, 0xe, 0x100, 0x6, 0x8001, 0x2, 0x8, 0x4, 0x4, 0x9, 0x80000001, 0x5e, 0x5, 0x6, 0x1, 0x8, 0xffff, 0x0, 0x5, 0x7f, 0x4, 0x40, 0x4000e, 0xffffffff, 0x1ff, 0x3, 0x8, 0x6277, 0x5, 0x3, 0x8, 0x2, 0x2, 0x9, 0xa, 0x8, 0x1, 0x4, 0x7f, 0x200, 0xfffffff7, 0x7, 0x6, 0xe9df, 0xff, 0x6, 0x0, 0x3ff, 0x6, 0x7fff, 0xf4, 0x9, 0xa, 0x6, 0x6, 0x7, 0x8b14, 0x3, 0x9, 0x2000000, 0x5, 0xff, 0x7, 0x80000, 0x3, 0xfffffffc, 0x5, 0x1, 0x6, 0x2, 0x2, 0xd3, 0x1, 0x3a5, 0x0, 0x99d1, 0x7, 0x7, 0x5, 0x4, 0x0, 0x2, 0x3ff, 0x0, 0x4, 0x1, 0x9bc, 0xd, 0x9, 0x200, 0x3, 0x0, 0x2, 0xd, 0x10001, 0x0, 0xfff, 0x6, 0x56b6fc16, 0x30dfc00, 0x7, 0xf, 0x380000, 0x1, 0x2, 0x9, 0x80, 0x0, 0x2, 0x8, 0x6, 0x6, 0x3, 0xd, 0x1, 0x6, 0x1b1, 0x1, 0x1, 0xfffffff9], 0x1, 0x400, 0x8}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[], 0x80}}, 0x8804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x24, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000040)=0x1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a000100"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, &(0x7f0000001140)) 4.110533072s ago: executing program 3 (id=9): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.011357976s ago: executing program 0 (id=10): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 3.967218527s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r4}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x88, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x25, 0x5, 0x72}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r1, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000007c0)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 3.127274673s ago: executing program 1 (id=11): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd8, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0xd8}}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030402000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x40305828, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) 1.568796127s ago: executing program 1 (id=12): remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00\t\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000600ae8c6e95b6a8b040006000000000000000000001016f9f1db67b8"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x40) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socket(0x200000000000011, 0x2, 0x0) socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.545725952s ago: executing program 4 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getpeername(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00002ee000/0x1000)=nil, 0x1000, 0x200000c, 0x10, 0xffffffffffffffff, 0xffffe000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$PTRACE_SETSIGMASK(0x420b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={[0x9]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r4, 0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000e0000002000000000000000000000000fc010000001300000000000000000001000107144e230005000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff4a000000000000001f00000000000000feffffffffffffff02000000fcffffff0000000029bd700004350000020005002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 1.471934684s ago: executing program 2 (id=14): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) 0s ago: executing program 1 (id=15): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r9, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 64.751751][ T30] audit: type=1400 audit(1768103907.460:62): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.775480][ T30] audit: type=1400 audit(1768103907.490:63): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.778015][ T5799] cgroup: Unknown subsys name 'net' [ 64.805145][ T30] audit: type=1400 audit(1768103907.520:64): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.925381][ T5799] cgroup: Unknown subsys name 'cpuset' [ 64.933326][ T5799] cgroup: Unknown subsys name 'rlimit' [ 65.072916][ T30] audit: type=1400 audit(1768103907.780:65): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.096528][ T30] audit: type=1400 audit(1768103907.790:66): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.121782][ T30] audit: type=1400 audit(1768103907.790:67): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.143882][ T30] audit: type=1400 audit(1768103907.790:68): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.164200][ T30] audit: type=1400 audit(1768103907.810:69): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.189030][ T30] audit: type=1400 audit(1768103907.810:70): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.225122][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.234627][ T30] audit: type=1400 audit(1768103907.950:71): avc: denied { relabelto } for pid=5801 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.201542][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.023470][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.031626][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.031626][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.032367][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.039233][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.060138][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.061037][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.075652][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.086307][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.094540][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.102326][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.103326][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.118626][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.120005][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.126356][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.136351][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.140994][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.147080][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.167439][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.170233][ T5136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.183590][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.193376][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.213444][ T5136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.220698][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.229469][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.519319][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 68.641877][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 68.716346][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.724722][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.732090][ T5810] bridge_slave_0: entered allmulticast mode [ 68.739009][ T5810] bridge_slave_0: entered promiscuous mode [ 68.790213][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.798060][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.805250][ T5810] bridge_slave_1: entered allmulticast mode [ 68.811987][ T5810] bridge_slave_1: entered promiscuous mode [ 68.877114][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 68.924812][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.947513][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.955329][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.962413][ T5811] bridge_slave_0: entered allmulticast mode [ 68.969357][ T5811] bridge_slave_0: entered promiscuous mode [ 68.976267][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 68.993512][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.003356][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 69.012551][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.019735][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.026928][ T5811] bridge_slave_1: entered allmulticast mode [ 69.033641][ T5811] bridge_slave_1: entered promiscuous mode [ 69.102352][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.123524][ T5810] team0: Port device team_slave_0 added [ 69.133858][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.154834][ T5810] team0: Port device team_slave_1 added [ 69.208129][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.215535][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.222614][ T5820] bridge_slave_0: entered allmulticast mode [ 69.229429][ T5820] bridge_slave_0: entered promiscuous mode [ 69.254727][ T5811] team0: Port device team_slave_0 added [ 69.260507][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.267732][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.275032][ T5820] bridge_slave_1: entered allmulticast mode [ 69.281644][ T5820] bridge_slave_1: entered promiscuous mode [ 69.295894][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.303243][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.329244][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.348653][ T5811] team0: Port device team_slave_1 added [ 69.368119][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.375310][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.401522][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.412646][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.419953][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.427124][ T5819] bridge_slave_0: entered allmulticast mode [ 69.433767][ T5819] bridge_slave_0: entered promiscuous mode [ 69.454492][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.461616][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.468829][ T5816] bridge_slave_0: entered allmulticast mode [ 69.475528][ T5816] bridge_slave_0: entered promiscuous mode [ 69.487064][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.494503][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.501605][ T5819] bridge_slave_1: entered allmulticast mode [ 69.508462][ T5819] bridge_slave_1: entered promiscuous mode [ 69.523596][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.533134][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.540253][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.547561][ T5816] bridge_slave_1: entered allmulticast mode [ 69.554484][ T5816] bridge_slave_1: entered promiscuous mode [ 69.571635][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.579266][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.605201][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.617522][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.648179][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.655316][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.681422][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.717028][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.739683][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.757945][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.768929][ T5820] team0: Port device team_slave_0 added [ 69.776140][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.789140][ T5810] hsr_slave_0: entered promiscuous mode [ 69.795601][ T5810] hsr_slave_1: entered promiscuous mode [ 69.809318][ T5820] team0: Port device team_slave_1 added [ 69.856923][ T5819] team0: Port device team_slave_0 added [ 69.871194][ T5816] team0: Port device team_slave_0 added [ 69.880327][ T5811] hsr_slave_0: entered promiscuous mode [ 69.886606][ T5811] hsr_slave_1: entered promiscuous mode [ 69.892435][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 69.898532][ T5811] Cannot create hsr debugfs directory [ 69.912187][ T5819] team0: Port device team_slave_1 added [ 69.918100][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.925081][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.950992][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.964039][ T5816] team0: Port device team_slave_1 added [ 69.981534][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.988512][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.014890][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.069544][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.076622][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.102915][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.115001][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.121922][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.148018][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.159735][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.167338][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.193841][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.213725][ T5828] Bluetooth: hci0: command tx timeout [ 70.213728][ T5824] Bluetooth: hci1: command tx timeout [ 70.225003][ T5822] Bluetooth: hci2: command tx timeout [ 70.231633][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.238625][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.264594][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.293477][ T5822] Bluetooth: hci3: command tx timeout [ 70.293480][ T5824] Bluetooth: hci4: command tx timeout [ 70.324730][ T5820] hsr_slave_0: entered promiscuous mode [ 70.330831][ T5820] hsr_slave_1: entered promiscuous mode [ 70.336871][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 70.342608][ T5820] Cannot create hsr debugfs directory [ 70.415539][ T5819] hsr_slave_0: entered promiscuous mode [ 70.421600][ T5819] hsr_slave_1: entered promiscuous mode [ 70.427731][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 70.433513][ T5819] Cannot create hsr debugfs directory [ 70.473286][ T5816] hsr_slave_0: entered promiscuous mode [ 70.479271][ T5816] hsr_slave_1: entered promiscuous mode [ 70.485327][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 70.491033][ T5816] Cannot create hsr debugfs directory [ 70.721703][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.737174][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.756275][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.768405][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.814525][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.825493][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.836712][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.856447][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.915822][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.937721][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.944584][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.962916][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.975202][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.993017][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.050011][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.076081][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.086934][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.106625][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.116682][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.141254][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.186585][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.193731][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.211660][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.220866][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.240038][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.247158][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.256097][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.272492][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.279734][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.293446][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.317371][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.324653][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.355656][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.362718][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.409737][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.470278][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 71.470293][ T30] audit: type=1400 audit(1768103914.180:84): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.476104][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.533802][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.540871][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.567299][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.574453][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.609081][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.698082][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.710789][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.723567][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.751237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.758355][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.782207][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.818845][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.825969][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.850797][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.897130][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.904252][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.948800][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.955938][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.987711][ T5810] veth0_vlan: entered promiscuous mode [ 72.004652][ T5820] veth0_vlan: entered promiscuous mode [ 72.024793][ T5810] veth1_vlan: entered promiscuous mode [ 72.044867][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.052487][ T5820] veth1_vlan: entered promiscuous mode [ 72.134802][ T5810] veth0_macvtap: entered promiscuous mode [ 72.171364][ T5810] veth1_macvtap: entered promiscuous mode [ 72.194653][ T5820] veth0_macvtap: entered promiscuous mode [ 72.225263][ T5820] veth1_macvtap: entered promiscuous mode [ 72.274011][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.293757][ T5824] Bluetooth: hci2: command tx timeout [ 72.295248][ T5828] Bluetooth: hci0: command tx timeout [ 72.303374][ T5822] Bluetooth: hci1: command tx timeout [ 72.310727][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.337168][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.360678][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.373810][ T5822] Bluetooth: hci3: command tx timeout [ 72.373815][ T5828] Bluetooth: hci4: command tx timeout [ 72.393596][ T3907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.428966][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.437255][ T3907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.447087][ T3907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.467672][ T3907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.477660][ T3907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.494355][ T3907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.503830][ T3907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.518005][ T3907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563947][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.614309][ T3907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.622230][ T3907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.699862][ T3907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.700350][ T5811] veth0_vlan: entered promiscuous mode [ 72.708141][ T3907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.718573][ T5811] veth1_vlan: entered promiscuous mode [ 72.747967][ T3907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.749422][ T5819] veth0_vlan: entered promiscuous mode [ 72.758537][ T3907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.769607][ T5816] veth0_vlan: entered promiscuous mode [ 72.787616][ T5819] veth1_vlan: entered promiscuous mode [ 72.796837][ T30] audit: type=1400 audit(1768103915.510:85): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.e4vQcS/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.829544][ T5816] veth1_vlan: entered promiscuous mode [ 72.855154][ T30] audit: type=1400 audit(1768103915.510:86): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.877937][ T30] audit: type=1400 audit(1768103915.510:87): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.e4vQcS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.910003][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.924220][ T30] audit: type=1400 audit(1768103915.510:88): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.940118][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.946702][ T30] audit: type=1400 audit(1768103915.510:89): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.e4vQcS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.956802][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.980884][ T30] audit: type=1400 audit(1768103915.510:90): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.e4vQcS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.033667][ T30] audit: type=1400 audit(1768103915.510:91): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.036050][ T5811] veth0_macvtap: entered promiscuous mode [ 73.058996][ T30] audit: type=1400 audit(1768103915.540:92): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.083183][ T5816] veth0_macvtap: entered promiscuous mode [ 73.093317][ T5819] veth0_macvtap: entered promiscuous mode [ 73.103342][ T30] audit: type=1400 audit(1768103915.540:93): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="gadgetfs" ino=7548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.128847][ T5819] veth1_macvtap: entered promiscuous mode [ 73.139624][ T5816] veth1_macvtap: entered promiscuous mode [ 73.152612][ T5811] veth1_macvtap: entered promiscuous mode [ 73.256031][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.285414][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.297291][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.362368][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.387364][ T3907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.373127][ T5822] Bluetooth: hci0: command tx timeout [ 74.381614][ T5822] Bluetooth: hci1: command tx timeout [ 74.388951][ T5822] Bluetooth: hci2: command tx timeout [ 74.453315][ T5828] Bluetooth: hci4: command tx timeout [ 74.458736][ T5828] Bluetooth: hci3: command tx timeout [ 74.461271][ T3907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.674220][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.683059][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698812][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.707311][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720823][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.742018][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.756168][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.827085][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.903992][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.934814][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.967408][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.067026][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.279667][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.327171][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.341108][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.353506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.453816][ T2901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.462151][ T2901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.492127][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.596488][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.657722][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.699425][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.712118][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.105118][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.214685][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.230204][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.463922][ T5824] Bluetooth: hci0: command tx timeout [ 76.479662][ T5822] Bluetooth: hci1: command tx timeout [ 76.486370][ T5828] Bluetooth: hci2: command tx timeout [ 76.533053][ T5822] Bluetooth: hci4: command tx timeout [ 76.538489][ T5828] Bluetooth: hci3: command tx timeout [ 76.608104][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 76.608114][ T30] audit: type=1400 audit(1768103919.320:119): avc: denied { read append } for pid=5963 comm="syz.1.2" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.784892][ T30] audit: type=1400 audit(1768103919.350:120): avc: denied { open } for pid=5963 comm="syz.1.2" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.808902][ T30] audit: type=1400 audit(1768103919.410:121): avc: denied { prog_run } for pid=5963 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.844152][ T30] audit: type=1400 audit(1768103919.560:122): avc: denied { create } for pid=5960 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.281923][ T30] audit: type=1400 audit(1768103919.580:123): avc: denied { connect } for pid=5960 comm="syz.2.3" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.302352][ T30] audit: type=1400 audit(1768103919.580:124): avc: denied { write } for pid=5960 comm="syz.2.3" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.333229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.333847][ T5969] netlink: 'syz.2.3': attribute type 12 has an invalid length. [ 77.924504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.296090][ T30] audit: type=1400 audit(1768103919.650:125): avc: denied { ioctl } for pid=5963 comm="syz.1.2" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.410844][ T30] audit: type=1400 audit(1768103919.660:126): avc: denied { create } for pid=5963 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.433061][ T30] audit: type=1400 audit(1768103919.670:127): avc: denied { setopt } for pid=5963 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.452638][ T30] audit: type=1400 audit(1768103919.670:128): avc: denied { getopt } for pid=5963 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.497446][ T5982] mmap: syz.0.10 (5982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.522279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.702890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.738657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.973173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.981448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.992795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.001058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.673705][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 79.689379][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 79.689405][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.689417][ T5828] Workqueue: hci4 hci_rx_work [ 79.689442][ T5828] Call Trace: [ 79.689448][ T5828] [ 79.689455][ T5828] dump_stack_lvl+0x16c/0x1f0 [ 79.689482][ T5828] sysfs_warn_dup+0x7f/0xa0 [ 79.689503][ T5828] sysfs_create_dir_ns+0x24b/0x2b0 [ 79.689525][ T5828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 79.689546][ T5828] ? find_held_lock+0x2b/0x80 [ 79.689578][ T5828] ? do_raw_spin_unlock+0x172/0x230 [ 79.689603][ T5828] kobject_add_internal+0x2c4/0x9d0 [ 79.689635][ T5828] kobject_add+0x16e/0x240 [ 79.689661][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 79.689689][ T5828] ? kobject_put+0xaf/0x6f0 [ 79.689720][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 79.689750][ T5828] device_add+0x288/0x1980 [ 79.689771][ T5828] ? __pfx_dev_set_name+0x10/0x10 [ 79.689793][ T5828] ? __pfx_device_add+0x10/0x10 [ 79.689816][ T5828] ? mgmt_send_event_skb+0x2fb/0x460 [ 79.689843][ T5828] hci_conn_add_sysfs+0x1a8/0x260 [ 79.689865][ T5828] le_conn_complete_evt+0x11ed/0x1fa0 [ 79.689889][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 79.689914][ T5828] hci_le_conn_complete_evt+0x23c/0x3a0 [ 79.689938][ T5828] hci_le_meta_evt+0x357/0x610 [ 79.689956][ T5828] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 79.689974][ T5828] hci_event_packet+0x685/0x1210 [ 79.689993][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 79.690015][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 79.690036][ T5828] ? kcov_remote_start+0x399/0x680 [ 79.690056][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.690085][ T5828] hci_rx_work+0x2c9/0x1020 [ 79.690109][ T5828] process_one_work+0x9ba/0x1b20 [ 79.690136][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 79.690165][ T5828] ? assign_work+0x1a0/0x250 [ 79.690189][ T5828] worker_thread+0x6c8/0xf10 [ 79.690224][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 79.690247][ T5828] kthread+0x3c5/0x780 [ 79.690270][ T5828] ? __pfx_kthread+0x10/0x10 [ 79.690293][ T5828] ? rcu_is_watching+0x12/0xc0 [ 79.690311][ T5828] ? __pfx_kthread+0x10/0x10 [ 79.690334][ T5828] ret_from_fork+0x983/0xb10 [ 79.690356][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 79.690378][ T5828] ? __switch_to+0x7af/0x10d0 [ 79.690402][ T5828] ? __pfx_kthread+0x10/0x10 [ 79.690424][ T5828] ret_from_fork_asm+0x1a/0x30 [ 79.690465][ T5828] [ 79.943006][ T5828] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.978335][ T5828] Bluetooth: hci4: failed to register connection device [ 80.511111][ T5828] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 80.523200][ T5828] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 80.531612][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 80.541074][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.551130][ T5828] Workqueue: hci4 hci_rx_work [ 80.555808][ T5828] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 80.561700][ T5828] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 80.581296][ T5828] RSP: 0018:ffffc900033f75c8 EFLAGS: 00010282 [ 80.587357][ T5828] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 80.595312][ T5828] RDX: 0000000000000000 RSI: ffffffff893d9811 RDI: dffffc000000004c [ 80.603265][ T5828] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 80.611214][ T5828] R10: 00000000ffffff83 R11: ffff8880753baff0 R12: ffffffff893d9811 [ 80.619169][ T5828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.627124][ T5828] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 80.636038][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.642602][ T5828] CR2: 0000200000003000 CR3: 000000003418d000 CR4: 00000000003526f0 [ 80.650559][ T5828] Call Trace: [ 80.653820][ T5828] [ 80.656732][ T5828] __kasan_check_byte+0x13/0x50 [ 80.661578][ T5828] lock_acquire+0xfc/0x330 [ 80.665979][ T5828] ? smp_conn_security+0x130/0x980 [ 80.671072][ T5828] lock_sock_nested+0x41/0xf0 [ 80.675729][ T5828] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 80.680913][ T5828] l2cap_sock_ready_cb+0x43/0x1a0 [ 80.685923][ T5828] l2cap_le_start+0x1ea/0xe40 [ 80.690583][ T5828] ? __pfx___mutex_lock+0x10/0x10 [ 80.695594][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.700776][ T5828] ? __pfx_l2cap_le_start+0x10/0x10 [ 80.705956][ T5828] ? kfree+0x2f8/0x6e0 [ 80.710007][ T5828] l2cap_connect_cfm+0x91d/0x1010 [ 80.715014][ T5828] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 80.720457][ T5828] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 80.725903][ T5828] le_conn_complete_evt+0x1991/0x1fa0 [ 80.731259][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 80.736964][ T5828] hci_le_conn_complete_evt+0x23c/0x3a0 [ 80.742495][ T5828] hci_le_meta_evt+0x357/0x610 [ 80.747242][ T5828] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 80.753294][ T5828] hci_event_packet+0x685/0x1210 [ 80.758212][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 80.763483][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 80.768838][ T5828] ? kcov_remote_start+0x399/0x680 [ 80.773933][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.779120][ T5828] hci_rx_work+0x2c9/0x1020 [ 80.783608][ T5828] process_one_work+0x9ba/0x1b20 [ 80.788537][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 80.793899][ T5828] ? assign_work+0x1a0/0x250 [ 80.798479][ T5828] worker_thread+0x6c8/0xf10 [ 80.803057][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 80.808153][ T5828] kthread+0x3c5/0x780 [ 80.812206][ T5828] ? __pfx_kthread+0x10/0x10 [ 80.816781][ T5828] ? rcu_is_watching+0x12/0xc0 [ 80.821531][ T5828] ? __pfx_kthread+0x10/0x10 [ 80.826106][ T5828] ret_from_fork+0x983/0xb10 [ 80.830677][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 80.835775][ T5828] ? __switch_to+0x7af/0x10d0 [ 80.840433][ T5828] ? __pfx_kthread+0x10/0x10 [ 80.845006][ T5828] ret_from_fork_asm+0x1a/0x30 [ 80.849763][ T5828] [ 80.852764][ T5828] Modules linked in: [ 80.858598][ T5828] ---[ end trace 0000000000000000 ]--- [ 80.866016][ T6005] ceph: No mds server is up or the cluster is laggy [ 80.891153][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 80.985083][ T6008] ======================================================= [ 80.985083][ T6008] WARNING: The mand mount option has been deprecated and [ 80.985083][ T6008] and is ignored by this kernel. Remove the mand [ 80.985083][ T6008] option from the mount to silence this warning. [ 80.985083][ T6008] ======================================================= [ 81.114560][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 81.121759][ T5828] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 81.127758][ T5828] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 81.176900][ T5828] RSP: 0018:ffffc900033f75c8 EFLAGS: 00010282 [ 81.183511][ T5828] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 81.188490][ T977] cfg80211: failed to load regulatory.db [ 81.191506][ T5828] RDX: 0000000000000000 RSI: ffffffff893d9811 RDI: dffffc000000004c [ 81.209030][ T5828] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 81.218427][ T5828] R10: 00000000ffffff83 R11: ffff8880753baff0 R12: ffffffff893d9811 [ 81.226991][ T5828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.234986][ T5828] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 81.243939][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.251057][ T5828] CR2: 000020000001b000 CR3: 000000000e184000 CR4: 00000000003526f0 [ 81.259308][ T5828] Kernel panic - not syncing: Fatal exception [ 81.265650][ T5828] Kernel Offset: disabled [ 81.269960][ T5828] Rebooting in 86400 seconds..