last executing test programs: 9.296155692s ago: executing program 2 (id=6): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r9, &(0x7f0000000300)=""/102400, 0x19000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r4, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 6.983215729s ago: executing program 1 (id=8): mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001280)='vfat\x00', 0x208008, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000140)={0xfffffffffffffffb, 0x0, 0x401ff, 0x7d, 0x100000, 0x8004, 0x4, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x6, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r4], 0x68}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.976267457s ago: executing program 2 (id=9): gettid() r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) timer_create(0x4, &(0x7f0000000240)={0x0, 0x1a, 0x1, @thr={&(0x7f0000000180), &(0x7f0000000440)="269bee4ea8ffa7bf8bad7c5169b10ba85957ba9717a2b2f4eef7bdc416f57981c5f584d067e2e5f01c14b1474418cc779d85691c9310cde8d1606c0d9214c2546886181680569da1f3f8250c5e648633dc342a3d17d25f490c9fda6b8d0fda604f5aaf0985fac70bed58340adcc6e633de657efccb1e975866b9405cf069ebb3a6fe2e45671796"}}, &(0x7f0000000340)) syz_usb_connect(0x5, 0x36, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) close(0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000003c0)="c19ac6f9f6744d4210aeb4ebbe7189ffb9344d0ed4cd34a75d5d89b5b5fa98a1e5d22051ec340140e5233223b14d260242b10aff7a", 0x1003, r8}, 0x38) r9 = socket(0x10, 0x803, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79f"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.952426507s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000080), 0x0}, 0x20) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x81, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x5, 0x0, 0x55a}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) r8 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000680)=[@rdmsr={0x66, 0x18, {0x40000101}}], 0x18}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.676534092s ago: executing program 1 (id=10): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r9, &(0x7f0000000300)=""/102400, 0x19000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r4, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.608604355s ago: executing program 3 (id=4): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x80000) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.498309573s ago: executing program 0 (id=11): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1, 0x7}, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000280)={0x40, 0x9, 0x3, "d712cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0xe1, {0xe1, 0x10, "5375aca02dff87eff6b8271198f0a965d40fd87e1144a16c90c75c364787ea28b98f96f2a0a3c0d4d6ff302466f399f0c6eeb039293515f739e46cb41b070793157cb29c266c1bb2156c6427e856032716b606d6bbf25bf5ed6c97c595a12f6c3c45402788bb70c2bab4545b419082b449732550b65427792f6730951ae77cbcf4689e71b5076f11b9c1093640e97df89538828a22a694943d0ad06fc8b2e138fe76654b60459c55ee572691576a5d71b4026fe5b2bee60ecc4dd1395701fe3b0a9525a7cddc649df1a5c52e12368f5c045af669ef923715b506f1624096f9"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0cca1acf63290c3}}, &(0x7f00000002c0)={0x0, 0xf, 0x1a8, {0x5, 0xf, 0x1a8, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x2, 0x9}, @generic={0xff, 0x10, 0x3, "0aaa75a37c0f34d954f122483915783ae182d9ed6d7c2622d27272b9b31ee8051c70e78f461215975a64a1384a121f3876cbd5b8fe6a01fb4061ab398e2ded4c5353e53cf6f8a13ecbbde3cb4922792e13e16bc4b5b1a9baee954afd08653769c89dd7d7b2e136d3a19551d81dd88af969ed7f77c143a06a3c0df5ae48300311dbe344052fdff3888a6237714baee254e9c2835c55beb1d6841905f084dc40930b9786067cae752ada8a6ad275c4024510bb78e288da7ee3f2bc03546cad51136334280317d20b5def4056aacb510416d665e7409005e3cd53ea67a82d50cff32065c7c70a882803132df0a2156b048b1504a8533645577a2adba3ce"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0xa, 0x2, 0x8}, @generic={0x92, 0x10, 0x4, "a9a404ae3fe62c60255939c83c2b290bb6ce9ec2ae05f062f09856a11abf99c6e273833b6854bf920b2f6670614682c81ccd1438b1a399ce3d52add9837134111fbc4640d38e30baff8f02dac4649b7ef1b2c6916649d4d776626927d84efcf0ec03de4665727dc9a051042e93b4e51e18e3765a82e17c1af5a5144ddeb0d5caaaece999125c946cc9df0ef35c1ba2"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x27579cbc94a106c4, 0xfa, 0x4, "2a353719", "9d436bfa"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x75, 0x9, 0x8d, 0x8000, 0x194c}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000480)={0x40, 0x18, 0x1d, "2b093911ea6f1c12a7ca51f91fe6d67610f19002ed5c891ca547c5b9c6"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0xe0, 0x20, [0xff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xe197}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0xb, 0x2, "e57d"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "6ab7"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x40}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xd}}) 5.383862628s ago: executing program 1 (id=12): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) sched_setscheduler(r4, 0x3, &(0x7f0000000000)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0x8}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80130}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="4eae23f949aaf11f9fc677fcfdbd79e047df2c8db829c1c434c83ea4981db05f023b0dca8c65280dba84ef759f5332c88268adbb4a3b8afdc38e557c454465172a600a6443d3b3c88dae7c056fc66ab734e56c4871cc917e164f1240ec9b786a96f7f3df7692298fb362ffb3e17ab58efbf8189da0e7868aa6662555f08917135293f0cafcc442739e144ebc5179d4dfa46eacc7f4922b2d768aacec06176f830c56b1fc4be00de46b1a310e06236c5f9dcffd482b4bd2883ad3a990581b47ed5de102c7244be532a4cabe564202f63b6ebd56eaaf4f22acc260e704c09149ee54e7c39f02c15a85d0f338b50b7c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000851}, 0x4008014) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0xfff2, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r9 = add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff) keyctl$read(0xb, r9, &(0x7f00000000c0), 0x0) write$binfmt_format(r8, &(0x7f0000000100)='0\x00', 0x2) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 5.168463539s ago: executing program 2 (id=13): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r9, &(0x7f0000000300)=""/102400, 0x19000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r4, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.974184223s ago: executing program 2 (id=14): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.874904244s ago: executing program 4 (id=5): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) io_setup(0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x1f0, 0x1f0, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xfffffd0c) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1f5) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000001c0)={0x9bd, 0x1, &(0x7f00000000c0)=[0xabd], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.595673787s ago: executing program 2 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c166a0108304341276ff010203010902120001000000000904"], 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xca, 0x0, 0x1000}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) read$rfkill(r4, &(0x7f0000000140), 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000380)={{0x5, 0x8}, 0x100, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 2.88918663s ago: executing program 4 (id=16): recvmsg(0xffffffffffffffff, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) io_uring_setup(0xf08, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=@random={'btrfs.', '@*#}/@]]\x00'}, &(0x7f0000000280)=""/4, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004a40)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae35}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfff7, 0x8, 0x4}, {0x0, 0x2, 0x6}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002080)=@newsa={0x144, 0x1a, 0x1, 0x70bd27, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e22, 0x103, 0xa, 0x120, 0x80, 0x3a, r6}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xfe, 0x8000, 0x9ba3, 0x66a6, 0x208251c, 0x100005, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x2, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd25, 0x3505, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xb}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x844) 2.866533262s ago: executing program 1 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @private0, 0x2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24000814}, 0xc800) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4701, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @p_u32=&(0x7f0000000080)=0x411b}}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) unshare(0x6020400) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x88) openat$cgroup_int(r9, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) 1.824378953s ago: executing program 0 (id=18): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$packet(0x11, 0xa, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = socket(0x10, 0x803, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x141000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000825f000000000000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000030) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000001180)}, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="2c1ffae7b9cc8d8ce93725f4161a589f6f31d83a625645807d8dd6498b836bec3b53bbf487653a42c2c4b11785"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0x1000100a) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+me'], 0xc) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x38fc2f1a6518ef8a}], 0x1) 1.717737374s ago: executing program 4 (id=19): syz_usb_connect(0x2, 0x24, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.30227346s ago: executing program 3 (id=20): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42841, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000040)={0xff, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xf}]}, 0x10) write$tun(r0, 0x0, 0xffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x1, 0x0, &(0x7f00000000c0)) 1.179099012s ago: executing program 2 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b0009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x002\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x38, 0xfffffffffffffffe}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) syz_open_procfs$namespace(0x0, 0x0) flock(0xffffffffffffffff, 0x5) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000240)=0x8000000a, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8910, &(0x7f0000000580)={'bond0\x00', 0x10001}) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2f, 0x80000001, 0x84e1, 0x2f, 0x2006, 0x6, 0x1, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000003, 0x2, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ed, 0x10, 0x3fffd, 0xc8000, 0x5, 0x746f, 0x8, 0x20005, 0x8, 0x0, 0x4, 0x7ffd]}) 345.280786ms ago: executing program 0 (id=22): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x1, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x73, 0xd2f, 0x5, 0x38, 0x0, 0x78, 0x7, 0x9}}, 0x40) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)={0x3, [0x9, 0x3, 0x8]}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x20004800) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {}, {0x5, 0xa}, {0xa, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xa, 0x8c, 0xa, 0x7ffe, 0x34d, 0xfff, 0x204, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = dup2(r0, r0) sendmmsg$unix(r11, &(0x7f0000008380), 0x400000000000174, 0x4008890) 285.828955ms ago: executing program 1 (id=23): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x8, 0x2001) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup3(r4, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7ff}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x203, 0x9, 0x2, 0x0, 0x3}) 102.432903ms ago: executing program 3 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[], 0x34}}, 0x44800) 0s ago: executing program 1 (id=25): close(0xffffffffffffffff) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000019300)={0x0, 0x98, "950318271c00af5b039da199591a8aa651d7342f8fae01acac2b0d2d83c04e8a04cb8ad4931584ffb77ab8d8a0e408016aa83e269acdcdf6a67a89d7aad6f0f26a1b753a1c0576051d5a8bbf826526b9734d153054f0ebafe14b026143b878cc15cc777deb5f0a932d18b11e382df36e1adc832ee5e44a184b598a0160939b0ba4e8f4d3bde007e588156c243c505a88dcbbe4c789454e3d"}, &(0x7f0000000080)=0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000194c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000019480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x84a40, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56"}) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000140)={{}, "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"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 340.527165][ T30] audit: type=1400 audit(1772385704.904:62): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 340.550870][ T30] audit: type=1400 audit(1772385704.924:63): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 340.553472][ T5835] cgroup: Unknown subsys name 'net' [ 340.580040][ T30] audit: type=1400 audit(1772385704.954:64): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 340.744109][ T5835] cgroup: Unknown subsys name 'cpuset' [ 340.752304][ T5835] cgroup: Unknown subsys name 'rlimit' [ 340.881225][ T30] audit: type=1400 audit(1772385705.254:65): avc: denied { setattr } for pid=5835 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.904548][ T30] audit: type=1400 audit(1772385705.264:66): avc: denied { create } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.951864][ T30] audit: type=1400 audit(1772385705.264:67): avc: denied { write } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.972849][ T30] audit: type=1400 audit(1772385705.264:68): avc: denied { read } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.993372][ T30] audit: type=1400 audit(1772385705.284:69): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 341.018413][ T30] audit: type=1400 audit(1772385705.284:70): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 341.027254][ T5838] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 341.051160][ T30] audit: type=1400 audit(1772385705.424:71): avc: denied { relabelto } for pid=5838 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 342.022196][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 343.903319][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.910835][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.923184][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.930641][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.941336][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.949829][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.957102][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.958947][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.964872][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.972689][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.980879][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.987538][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.993407][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.006711][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.008288][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.021366][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.022216][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.029670][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.036739][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.050696][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.057981][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.072817][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.085879][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.086618][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.111456][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.499330][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 344.520682][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 344.547272][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 344.630946][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 344.734455][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 344.744485][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.751756][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.759514][ T5848] bridge_slave_0: entered allmulticast mode [ 344.766874][ T5848] bridge_slave_0: entered promiscuous mode [ 344.794376][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.801500][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.808686][ T5848] bridge_slave_1: entered allmulticast mode [ 344.815440][ T5848] bridge_slave_1: entered promiscuous mode [ 344.822776][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.829848][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.837002][ T5855] bridge_slave_0: entered allmulticast mode [ 344.843806][ T5855] bridge_slave_0: entered promiscuous mode [ 344.851032][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.858265][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.865503][ T5847] bridge_slave_0: entered allmulticast mode [ 344.872323][ T5847] bridge_slave_0: entered promiscuous mode [ 344.902912][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.909983][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.917281][ T5855] bridge_slave_1: entered allmulticast mode [ 344.923954][ T5855] bridge_slave_1: entered promiscuous mode [ 344.930872][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.938884][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.946160][ T5847] bridge_slave_1: entered allmulticast mode [ 344.952926][ T5847] bridge_slave_1: entered promiscuous mode [ 345.008518][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.019686][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.036653][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.046428][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.053915][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.061236][ T5854] bridge_slave_0: entered allmulticast mode [ 345.068017][ T5854] bridge_slave_0: entered promiscuous mode [ 345.087318][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.098366][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.114900][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.122074][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.129159][ T5854] bridge_slave_1: entered allmulticast mode [ 345.136196][ T5854] bridge_slave_1: entered promiscuous mode [ 345.157123][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.187415][ T5848] team0: Port device team_slave_0 added [ 345.200635][ T5847] team0: Port device team_slave_0 added [ 345.207905][ T5847] team0: Port device team_slave_1 added [ 345.220276][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.227455][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.234733][ T5858] bridge_slave_0: entered allmulticast mode [ 345.241372][ T5858] bridge_slave_0: entered promiscuous mode [ 345.249789][ T5848] team0: Port device team_slave_1 added [ 345.270019][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.279412][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.286838][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.294030][ T5858] bridge_slave_1: entered allmulticast mode [ 345.300668][ T5858] bridge_slave_1: entered promiscuous mode [ 345.314808][ T5855] team0: Port device team_slave_0 added [ 345.335023][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.351339][ T5855] team0: Port device team_slave_1 added [ 345.357597][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.364583][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.390480][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.402620][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.409556][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.435633][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.470393][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.477520][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.503435][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.514668][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.521987][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.548058][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.567455][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.594032][ T5854] team0: Port device team_slave_0 added [ 345.601292][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.616402][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.623657][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.649725][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.661549][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.668643][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.694621][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.722724][ T5854] team0: Port device team_slave_1 added [ 345.756616][ T5858] team0: Port device team_slave_0 added [ 345.779381][ T5855] hsr_slave_0: entered promiscuous mode [ 345.785528][ T5855] hsr_slave_1: entered promiscuous mode [ 345.799587][ T5858] team0: Port device team_slave_1 added [ 345.812284][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.819231][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.845324][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.857108][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.864116][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.890167][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.904561][ T5848] hsr_slave_0: entered promiscuous mode [ 345.910574][ T5848] hsr_slave_1: entered promiscuous mode [ 345.916620][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 345.922459][ T5848] Cannot create hsr debugfs directory [ 345.938585][ T5847] hsr_slave_0: entered promiscuous mode [ 345.944678][ T5847] hsr_slave_1: entered promiscuous mode [ 345.950634][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 345.956391][ T5847] Cannot create hsr debugfs directory [ 346.028404][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.035545][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.061776][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.094071][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.101024][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.112138][ T5852] Bluetooth: hci1: command tx timeout [ 346.132737][ T5853] Bluetooth: hci0: command tx timeout [ 346.138605][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.191680][ T5853] Bluetooth: hci2: command tx timeout [ 346.192100][ T5852] Bluetooth: hci4: command tx timeout [ 346.197272][ T5861] Bluetooth: hci3: command tx timeout [ 346.222279][ T5854] hsr_slave_0: entered promiscuous mode [ 346.228303][ T5854] hsr_slave_1: entered promiscuous mode [ 346.234432][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 346.240138][ T5854] Cannot create hsr debugfs directory [ 346.306683][ T5858] hsr_slave_0: entered promiscuous mode [ 346.312773][ T5858] hsr_slave_1: entered promiscuous mode [ 346.318610][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 346.324640][ T5858] Cannot create hsr debugfs directory [ 346.533908][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.544503][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.568295][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.586850][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.635209][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 346.649289][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 346.658327][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 346.669006][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 346.756224][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.767175][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.788487][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.795821][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.826666][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.859883][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.869992][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.879233][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.894347][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.906759][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.949956][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.957209][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.967787][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.974854][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.021381][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.034242][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.045625][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.063167][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.073976][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.119446][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.149580][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.156734][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.182115][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.189186][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.230196][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.265800][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.280142][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 347.280156][ T30] audit: type=1400 audit(1772385711.654:84): avc: denied { sys_module } for pid=5848 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 347.334503][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.345478][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.370082][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.383716][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.398423][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.414350][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.421439][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.448277][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.455469][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.465619][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.472776][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.496168][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.503262][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.518902][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.530521][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.585261][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.592397][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.623635][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.630725][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.650860][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.679020][ T5848] veth0_vlan: entered promiscuous mode [ 347.708453][ T5848] veth1_vlan: entered promiscuous mode [ 347.739771][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.751007][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.774840][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.855694][ T5848] veth0_macvtap: entered promiscuous mode [ 347.869949][ T5848] veth1_macvtap: entered promiscuous mode [ 347.910207][ T5847] veth0_vlan: entered promiscuous mode [ 347.937081][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.959459][ T5847] veth1_vlan: entered promiscuous mode [ 347.996745][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.050416][ T5847] veth0_macvtap: entered promiscuous mode [ 348.057542][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.067658][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.080034][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.099535][ T5847] veth1_macvtap: entered promiscuous mode [ 348.110100][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.150138][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.176776][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.194615][ T5861] Bluetooth: hci0: command tx timeout [ 348.200090][ T5853] Bluetooth: hci1: command tx timeout [ 348.206627][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.216713][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.233599][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.258597][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.276479][ T5853] Bluetooth: hci4: command tx timeout [ 348.282308][ T5861] Bluetooth: hci2: command tx timeout [ 348.282593][ T5852] Bluetooth: hci3: command tx timeout [ 348.309274][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.320070][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.349780][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.369929][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.381236][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.457705][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.469322][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.471095][ T5858] veth0_vlan: entered promiscuous mode [ 348.490188][ T5855] veth0_vlan: entered promiscuous mode [ 348.514686][ T30] audit: type=1400 audit(1772385712.894:85): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.IlsqHn/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 348.548891][ T5858] veth1_vlan: entered promiscuous mode [ 348.551913][ T30] audit: type=1400 audit(1772385712.894:86): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 348.561998][ T5855] veth1_vlan: entered promiscuous mode [ 348.583759][ T30] audit: type=1400 audit(1772385712.894:87): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.IlsqHn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 348.626950][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 348.642733][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.650554][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.658036][ T30] audit: type=1400 audit(1772385712.894:88): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 348.680342][ T30] audit: type=1400 audit(1772385712.894:89): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.IlsqHn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 348.696518][ T5855] veth0_macvtap: entered promiscuous mode [ 348.713702][ T30] audit: type=1400 audit(1772385712.894:90): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.IlsqHn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 348.720006][ T5854] veth0_vlan: entered promiscuous mode [ 348.747260][ T30] audit: type=1400 audit(1772385712.894:91): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 348.800414][ T30] audit: type=1400 audit(1772385712.914:92): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 348.812867][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.842899][ T5855] veth1_macvtap: entered promiscuous mode [ 348.850140][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.866159][ T30] audit: type=1400 audit(1772385712.914:93): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="gadgetfs" ino=7682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 348.898805][ T5854] veth1_vlan: entered promiscuous mode [ 348.931223][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.951925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.991800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 349.025680][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 349.054246][ T5858] veth0_macvtap: entered promiscuous mode [ 349.153941][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.328952][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.339257][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.383864][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.465017][ T5858] veth1_macvtap: entered promiscuous mode [ 349.519298][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.556488][ T5854] veth0_macvtap: entered promiscuous mode [ 350.513810][ T5852] Bluetooth: hci1: command tx timeout [ 350.519247][ T5852] Bluetooth: hci0: command tx timeout [ 350.525104][ T5853] Bluetooth: hci3: command tx timeout [ 350.530531][ T5853] Bluetooth: hci4: command tx timeout [ 350.536009][ T5861] Bluetooth: hci2: command tx timeout [ 350.563422][ T5854] veth1_macvtap: entered promiscuous mode [ 350.604062][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.953866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 351.083144][ T5948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.091043][ T5948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.092673][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.323013][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.334648][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.347213][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.509936][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.922633][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.941417][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.956411][ T5987] gretap1: entered promiscuous mode [ 351.963424][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.988964][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.022609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 352.030921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 352.040047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 352.049194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 352.058234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 352.114042][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.138922][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 352.149964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 352.206646][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.359140][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 352.453022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 352.478553][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.559440][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.669225][ T5861] Bluetooth: hci2: command tx timeout [ 352.679289][ T5861] Bluetooth: hci4: command tx timeout [ 352.686640][ T5861] Bluetooth: hci0: command tx timeout [ 352.694385][ T5861] Bluetooth: hci1: command tx timeout [ 352.699862][ T5853] Bluetooth: hci3: command tx timeout [ 353.052151][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.059996][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.086101][ T5898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.108755][ T5898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.226478][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.246715][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.297453][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 353.297470][ T30] audit: type=1400 audit(1772385717.674:133): avc: denied { create } for pid=6000 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 353.379192][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 353.415061][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.494695][ T30] audit: type=1400 audit(1772385717.834:134): avc: denied { getopt } for pid=6000 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.514724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.566640][ T30] audit: type=1400 audit(1772385717.834:135): avc: denied { bind } for pid=6000 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.632955][ T30] audit: type=1400 audit(1772385717.844:136): avc: denied { read } for pid=6004 comm="syz.0.11" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.722136][ T5928] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 353.741988][ T30] audit: type=1400 audit(1772385717.854:137): avc: denied { name_bind } for pid=6000 comm="syz.3.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 353.767959][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 353.781247][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 353.790698][ T6014] team0: Port device batadv1 added [ 353.880865][ T30] audit: type=1400 audit(1772385717.864:138): avc: denied { node_bind } for pid=6000 comm="syz.3.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 353.974329][ T5928] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 354.008441][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.412607][ T5928] usb 1-1: config 0 descriptor?? [ 354.424372][ T30] audit: type=1400 audit(1772385717.864:139): avc: denied { connect } for pid=6000 comm="syz.3.4" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.484764][ T5928] cp210x 1-1:0.0: cp210x converter detected [ 354.507150][ T30] audit: type=1400 audit(1772385717.864:140): avc: denied { name_connect } for pid=6000 comm="syz.3.4" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 354.547292][ T30] audit: type=1400 audit(1772385718.064:141): avc: denied { ioctl } for pid=6000 comm="syz.3.4" path="socket:[9475]" dev="sockfs" ino=9475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.731838][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 355.117561][ T30] audit: type=1400 audit(1772385719.174:142): avc: denied { read } for pid=6028 comm="syz.4.5" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 355.168098][ T6006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 355.390058][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 355.419253][ T5919] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 355.724950][ T5928] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 355.765865][ T6014] hub 9-0:1.0: USB hub found [ 355.781729][ T5928] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 355.802889][ T6014] hub 9-0:1.0: 1 port detected [ 355.972031][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.004121][ T5928] usb 1-1: cp210x converter now attached to ttyUSB0 [ 356.025478][ T5919] usb 3-1: Product: syz [ 356.120815][ T5919] usb 3-1: Manufacturer: syz [ 356.254694][ T5919] usb 3-1: SerialNumber: syz [ 356.484118][ T5919] usb 3-1: config 0 descriptor?? [ 356.917958][ T5852] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 357.015531][ T24] usb 1-1: USB disconnect, device number 2 [ 357.049957][ T5919] usb_8dev 3-1:0.0 can0: sending command message failed [ 357.073317][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 357.083376][ T5919] usb_8dev 3-1:0.0 can0: can't get firmware version [ 357.120919][ T24] cp210x 1-1:0.0: device disconnected [ 357.197097][ T5919] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 357.382869][ T5919] usb 3-1: USB disconnect, device number 2 [ 358.336386][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 358.336397][ T30] audit: type=1400 audit(1772385722.714:172): avc: denied { create } for pid=6053 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.528971][ T6062] syz.3.20 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 358.564321][ T6069] process 'syz.0.22' launched './file0' with NULL argv: empty string added [ 358.602765][ T6069] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 358.620362][ T30] audit: type=1400 audit(1772385722.744:173): avc: denied { bind } for pid=6053 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.651657][ T5919] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 358.705641][ T30] audit: type=1400 audit(1772385722.744:174): avc: denied { write } for pid=6053 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.848380][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.868445][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.900345][ T30] audit: type=1400 audit(1772385722.744:175): avc: denied { write } for pid=6053 comm="syz.0.18" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 358.944537][ T5861] ------------[ cut here ]------------ [ 358.950202][ T5861] refcnt < 0 [ 358.950213][ T5861] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u9:5/5861 [ 358.950248][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.953518][ T5861] Modules linked in: [ 358.953555][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 358.953577][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.994244][ T5919] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 359.001043][ T5861] Workqueue: hci0 hci_conn_timeout [ 359.017197][ T5861] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 359.022966][ T5861] Code: 44 0f b6 2d 73 d9 4d 06 31 ff 41 83 e5 40 44 89 ee e8 fa 61 81 f7 45 84 ed 0f 84 02 ff ff ff e9 36 75 ea f6 e8 97 67 81 f7 90 <0f> 0b 90 e8 8e 67 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 359.042841][ T5861] RSP: 0018:ffffc90003ba7c18 EFLAGS: 00010293 [ 359.048970][ T5861] RAX: 0000000000000000 RBX: ffff88806fbc0a40 RCX: ffffffff8a87362f [ 359.057061][ T5861] RDX: ffff888020e8c900 RSI: ffffffff8a873729 RDI: ffff888020e8c900 [ 359.065128][ T5861] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 359.074446][ T5861] R10: 00000000ffffffff R11: 000000000000760b R12: ffff88806fbc0000 [ 359.082543][ T5861] R13: ffff888020e8cd84 R14: ffffffff90d9b804 R15: 0000000000000000 [ 359.090566][ T5861] FS: 0000000000000000(0000) GS:ffff888124344000(0000) knlGS:0000000000000000 [ 359.099599][ T5861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.106254][ T5861] CR2: 00007f66255e9e80 CR3: 0000000035f65000 CR4: 00000000003526f0 [ 359.118733][ T5861] Call Trace: [ 359.122103][ T5861] [ 359.125066][ T5861] process_one_work+0x9d7/0x1920 [ 359.130069][ T5861] ? __pfx_process_one_work+0x10/0x10 [ 359.135557][ T5861] ? __pfx_hci_conn_timeout+0x10/0x10 [ 359.140977][ T5861] worker_thread+0x5da/0xe40 [ 359.145780][ T5861] ? kthread+0x13a/0x450 [ 359.150063][ T5861] ? __pfx_worker_thread+0x10/0x10 [ 359.155440][ T5861] kthread+0x370/0x450 [ 359.159560][ T5861] ? __pfx_kthread+0x10/0x10 [ 359.164208][ T5861] ret_from_fork+0x754/0xd80 [ 359.168829][ T5861] ? __pfx_ret_from_fork+0x10/0x10 [ 359.174042][ T5861] ? __switch_to+0x7b4/0x1120 [ 359.178742][ T5861] ? __pfx_kthread+0x10/0x10 [ 359.183454][ T5861] ret_from_fork_asm+0x1a/0x30 [ 359.188300][ T5861] [ 359.191338][ T5861] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 359.198613][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 359.208057][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.218093][ T5861] Workqueue: hci0 hci_conn_timeout [ 359.223192][ T5861] Call Trace: [ 359.226462][ T5861] [ 359.229376][ T5861] dump_stack_lvl+0x100/0x190 [ 359.234038][ T5861] vpanic+0x552/0x970 [ 359.237998][ T5861] ? __pfx_vpanic+0x10/0x10 [ 359.242478][ T5861] panic+0xd1/0xe0 [ 359.246187][ T5861] ? __pfx_panic+0x10/0x10 [ 359.250591][ T5861] ? check_panic_on_warn+0x1f/0x90 [ 359.255685][ T5861] check_panic_on_warn.cold+0x19/0x34 [ 359.261047][ T5861] ? hci_conn_timeout+0x16a/0x230 [ 359.266061][ T5861] __warn.cold+0x191/0x348 [ 359.270454][ T5861] __report_bug+0x296/0x3d0 [ 359.274947][ T5861] ? hci_conn_timeout+0x16a/0x230 [ 359.279948][ T5861] ? __pfx___report_bug+0x10/0x10 [ 359.284957][ T5861] ? irqentry_exit+0x180/0x670 [ 359.289785][ T5861] ? lockdep_hardirqs_on+0x78/0x100 [ 359.294958][ T5861] ? irqentry_exit+0x180/0x670 [ 359.299701][ T5861] ? hci_conn_timeout+0x16a/0x230 [ 359.304711][ T5861] ? hci_conn_timeout+0x16a/0x230 [ 359.309711][ T5861] report_bug+0xb2/0x220 [ 359.313928][ T5861] ? hci_conn_timeout+0x16a/0x230 [ 359.318940][ T5861] handle_bug+0x166/0x2a0 [ 359.323251][ T5861] exc_invalid_op+0x17/0x50 [ 359.327743][ T5861] asm_exc_invalid_op+0x1a/0x20 [ 359.332568][ T5861] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 359.338176][ T5861] Code: 44 0f b6 2d 73 d9 4d 06 31 ff 41 83 e5 40 44 89 ee e8 fa 61 81 f7 45 84 ed 0f 84 02 ff ff ff e9 36 75 ea f6 e8 97 67 81 f7 90 <0f> 0b 90 e8 8e 67 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 359.357768][ T5861] RSP: 0018:ffffc90003ba7c18 EFLAGS: 00010293 [ 359.363823][ T5861] RAX: 0000000000000000 RBX: ffff88806fbc0a40 RCX: ffffffff8a87362f [ 359.371769][ T5861] RDX: ffff888020e8c900 RSI: ffffffff8a873729 RDI: ffff888020e8c900 [ 359.379726][ T5861] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 359.387685][ T5861] R10: 00000000ffffffff R11: 000000000000760b R12: ffff88806fbc0000 [ 359.395636][ T5861] R13: ffff888020e8cd84 R14: ffffffff90d9b804 R15: 0000000000000000 [ 359.403590][ T5861] ? hci_conn_timeout+0x6f/0x230 [ 359.408507][ T5861] ? hci_conn_timeout+0x169/0x230 [ 359.413518][ T5861] ? hci_conn_timeout+0x169/0x230 [ 359.418520][ T5861] process_one_work+0x9d7/0x1920 [ 359.423613][ T5861] ? __pfx_process_one_work+0x10/0x10 [ 359.428977][ T5861] ? __pfx_hci_conn_timeout+0x10/0x10 [ 359.434336][ T5861] worker_thread+0x5da/0xe40 [ 359.438906][ T5861] ? kthread+0x13a/0x450 [ 359.443120][ T5861] ? __pfx_worker_thread+0x10/0x10 [ 359.448203][ T5861] kthread+0x370/0x450 [ 359.452270][ T5861] ? __pfx_kthread+0x10/0x10 [ 359.456925][ T5861] ret_from_fork+0x754/0xd80 [ 359.461500][ T5861] ? __pfx_ret_from_fork+0x10/0x10 [ 359.466598][ T5861] ? __switch_to+0x7b4/0x1120 [ 359.471251][ T5861] ? __pfx_kthread+0x10/0x10 [ 359.475815][ T5861] ret_from_fork_asm+0x1a/0x30 [ 359.480571][ T5861] [ 359.483795][ T5861] Kernel Offset: disabled [ 359.488124][ T5861] Rebooting in 86400 seconds..