last executing test programs: 9m45.706418385s ago: executing program 1 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x6b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_procfs(r0, &(0x7f00000000c0)='net/icmp6\x00') connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)={0x20, 0x3e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="120110"], &(0x7f0000000400)={0x0, 0x0, 0x59, 0x0}) 9m43.804694901s ago: executing program 0 (id=682): r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)=ANY=[]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) 9m42.297079519s ago: executing program 1 (id=684): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x22000, 0x2, 0x1}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x5, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x401}, &(0x7f00000003c0)=0x8) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0xffffffffffffff8c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r5, 0x409, 0x7) writev(r5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x1000}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x1c, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) 9m41.762925648s ago: executing program 0 (id=687): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getgroups(0x1, &(0x7f0000000080)=[0xee00]) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) clock_gettime(0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x4}, {0xfff3, 0x9}, {0x5, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9m40.444533489s ago: executing program 0 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005540)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_FILTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0xc0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r6 = io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r6, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) socket(0x25, 0x1, 0x0) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x4, {0x2}, 0xfe}, 0x18) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r8, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5db, 0x10}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004804) 9m38.094064868s ago: executing program 0 (id=694): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880), 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280d00001e0001ff00000000", @ANYRES32=r5, @ANYBLOB="0000093533724a7a7be1e53300000000"], 0x28}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e24, @broadcast}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000200)=@in6={0xa, 0x4e21, 0x3, @remote, 0x80000000}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x24000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 9m37.955480043s ago: executing program 1 (id=696): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @loopback, 0x2002}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 9m36.838455668s ago: executing program 1 (id=698): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 9m36.111731523s ago: executing program 1 (id=699): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040), 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x80, &(0x7f0000000100)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x80001001}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/50, 0x304000, 0x800, 0x0, 0x1}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 9m35.579087868s ago: executing program 0 (id=701): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getgroups(0x1, &(0x7f0000000080)=[0xee00]) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) clock_gettime(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0x4}, {0xfff3, 0x9}, {0x5, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9m34.461744658s ago: executing program 1 (id=702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000099}, 0x81) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r7}, 0x18) close(0x3) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x40, r8, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 9m34.455682569s ago: executing program 0 (id=703): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) fchmod(r4, 0x32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0) sendfile(r6, r5, 0x0, 0x8010002b) sendto$inet6(r5, &(0x7f0000000200), 0x0, 0xa0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000400)={0x0, 0x1000}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0xc, 0x800001fd, 0xc, 0xfffffffffffffff9, 0x10000}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020000040000002cbd7000000000de039a944e7d659f0000000018"], 0x20}, 0x1, 0x7}, 0x0) 9m19.1218735s ago: executing program 32 (id=703): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) fchmod(r4, 0x32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0) sendfile(r6, r5, 0x0, 0x8010002b) sendto$inet6(r5, &(0x7f0000000200), 0x0, 0xa0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000400)={0x0, 0x1000}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0xc, 0x800001fd, 0xc, 0xfffffffffffffff9, 0x10000}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020000040000002cbd7000000000de039a944e7d659f0000000018"], 0x20}, 0x1, 0x7}, 0x0) 9m19.006906171s ago: executing program 33 (id=702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000099}, 0x81) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r7}, 0x18) close(0x3) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x40, r8, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 8m36.412093954s ago: executing program 3 (id=803): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000070000000200000004000000"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 8m35.247048584s ago: executing program 3 (id=806): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(0x0, &(0x7f0000000000)=0x80000001) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230c00140049eb5b7c23199199"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) tkill(0x0, 0xb) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x18}, 0x4010) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x900, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) 8m33.883125432s ago: executing program 3 (id=810): mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900"/15, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704020002000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r1, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000680)={0x28, 0x7, r3, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) recvmsg$can_raw(r1, &(0x7f00000003c0)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000007c0)=""/214, 0xd6}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000009c0)=""/190, 0xbe}, {0x0}, {&(0x7f0000000b80)=""/152, 0x98}], 0x6, &(0x7f0000000cc0)=""/242, 0xf2}, 0x102) r5 = semget(0x0, 0x4, 0x39c) semop(r5, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r5, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500"], 0x64}}, 0x0) 8m32.507949722s ago: executing program 3 (id=812): r0 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x1, 0x4000020}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/140, 0x8c}], 0x1}, 0x4}], 0x1, 0x10123, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2a, 0x2a, 0xd, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}, @datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "e1"}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x61, 0x30, 0x61, 0x30, 0x30, 0x5f, 0x30]}}, 0x0, 0x51, 0x0, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000140)='./bus\x00') close_range(r0, 0xffffffffffffffff, 0x0) 8m30.927077817s ago: executing program 3 (id=815): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x40, 0x7, 0x1, 0x70ce, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @local, {[@end, @noop, @timestamp_prespec={0x44, 0x1c, 0x83, 0x3, 0x2, [{@multicast2, 0x1}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}]}, @rr={0x7, 0x7, 0xbe, [@private=0xa010100]}, @cipso={0x86, 0x9, 0x2, [{0x1, 0x3, '+'}]}, @rr={0x7, 0xb, 0xfd, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x10}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000980)={@remote, r0}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') pidfd_getfd(r6, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0xf0, 0x13, 0x1c8, 0x0}) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r8 = dup2(r7, r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) 8m29.129179659s ago: executing program 3 (id=816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4e21, 0x0, @private0, 0xc898}, 0x1c) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c00)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x2, &(0x7f0000000ac0)=""/91, 0x5b, 0x0, 0x3a}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x8, 0x2, 0x1c}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd, 0x1}, {}, @note={0x81, 0x0, 0x3}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) 8m13.895811835s ago: executing program 34 (id=816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4e21, 0x0, @private0, 0xc898}, 0x1c) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c00)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0x2, &(0x7f0000000ac0)=""/91, 0x5b, 0x0, 0x3a}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x8, 0x2, 0x1c}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd, 0x1}, {}, @note={0x81, 0x0, 0x3}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) 6m22.48970068s ago: executing program 4 (id=1055): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x9, 0x36314d4e, 0x2, @stepwise={0x2, 0x4, 0x101, 0x7, 0x10000, 0x8}}) 6m21.298899989s ago: executing program 4 (id=1058): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r7, 0x541b, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000003c0), 0x0) ioctl(r7, 0x5451, 0x0) 6m15.021096444s ago: executing program 4 (id=1068): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_group_source_req(r0, 0x29, 0x3, &(0x7f0000000040)={0x3, {{0xa, 0x4e21, 0xf5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {{0xa, 0x4e23, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x108) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0, 0x30}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 6m13.992208271s ago: executing program 4 (id=1070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0xa1, 0x80000}) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000104010100000000000000000100000505000100019b030b8c0392affd000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6m12.952838042s ago: executing program 4 (id=1073): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r6, &(0x7f00000025c0), 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @loopback, 0x2002}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 6m11.905713856s ago: executing program 4 (id=1074): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(0xffffffffffffffff, 0x5) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000300)={0x974, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs, 0x38) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/4096, 0x1000) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f000000e600)={0x20071026, r7}, &(0x7f000000e640)={0xd8, 0x80000001, 0x8, 0xe78, 0x8, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close(r0) 5m55.780451097s ago: executing program 35 (id=1074): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(0xffffffffffffffff, 0x5) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000300)={0x974, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs, 0x38) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/4096, 0x1000) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f000000e600)={0x20071026, r7}, &(0x7f000000e640)={0xd8, 0x80000001, 0x8, 0xe78, 0x8, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close(r0) 4m28.108974427s ago: executing program 6 (id=1256): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x3, 0x0, 0x0, r7}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x3, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='/\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) 4m26.542318759s ago: executing program 6 (id=1260): r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)=ANY=[]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000005704000008000000850000001c0000c976efb2003e00000086ce628c9e72412df8a41e9c9c590789171df923e553c7b5860999d1b717e417fa1de3be284a0705d521a82c46141522e9bfa0e6c6a10696f496f5ec76f969415f22aaebe235bae9ca3944a8dda85590da189014ae753e66e212ca60d3cc53f3e44f2a350feac06113d5fc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0x0) 4m25.501471056s ago: executing program 6 (id=1262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x48201, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000280)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000c00)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000003940)=""/4108, 0x100c, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000340)=""/191, 0xffffffffffffff1a, 0x0, 0x1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000001300)={0x6, 0x118, 0xfa00, {{0x7, 0xd, "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", 0x10, 0x1, 0x5, 0x8f, 0x7, 0x0, 0x80}}}, 0x120) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001440)={0x0, "95f348e8fe2670b2a8d828ac523ef1e5"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="2665660f28c7f20f2c7ff3b816000f00d866b9060200000f320f01cf66b94102000066b8f600000066ba000000000f300f20029a050016019a090021016666deaf4000"}], 0x1, 0x50, 0x0, 0x52) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m24.638518381s ago: executing program 6 (id=1265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ppoll(&(0x7f0000000400)=[{r0, 0x9008}], 0x1, 0x0, 0x0, 0x0) 4m20.958674975s ago: executing program 6 (id=1271): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4m14.433935112s ago: executing program 6 (id=1284): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="485085731c62b14537c596645bc59e6740374166dcd5a54a95a0a797af11460301eb4ce03e867a4762fffd91b2484a8c7523a533543878a6ed6e58033701f6bbd5c4d156a6fd0e0eb57df7250401d39103e1c4ee596fcc0c6849befc6328cc55db67eccf58b7eb258649c569e3c186f00b", 0x71}, {&(0x7f0000000400)}, {&(0x7f0000001d00)="1c9a3e8086b11bf2d0f8572cbbdb3ec0c98d443b486fcf2e17b542567e1fc9fb8bcd47c74aa86398574ab086cd0926fbb9994e9fd6ee039ab863aa093d1ce16cb8887afbe4f0d8d442df3209a5d4b2fbd0b378a05aa92e52007dec0225ce9d53f770d192e2e0745abae33ce7117eb71e1fa84c405cbe8a0fab586bf6cca1586a623ed9ce71212fa0b788d2389fbca69a44a43b3003f20f7b2c36792af55b8a1eb4f826b3e84659329332dd1bf1659b2f0e068334ceac2235156c6ccdf1e4496b1668c04a71922fe1e0925d76d4c7a5bae04d4ce3404940469c06f0319113666e99c0f9", 0xe3}, {&(0x7f0000001e00)="05ee7a4f4446838a2cebdf48a96cefb90ffebc73fb5a73a5776f595cd51f239c7e8b237ae22db53b0f428ba5122931aa86eca94959aa7671dd03d6e14f37c93d47f1429403310eede3fdd391224d94a13cb1553954b147eea8cd93d98e11417a0482af28cafe0c5161cadf666a257cf8d760", 0x72}, {&(0x7f0000001e80)}], 0x5, &(0x7f00000034c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r4, r6, r1, r8, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r0, r0, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x100, 0x40}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) 3m57.971632801s ago: executing program 36 (id=1284): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="485085731c62b14537c596645bc59e6740374166dcd5a54a95a0a797af11460301eb4ce03e867a4762fffd91b2484a8c7523a533543878a6ed6e58033701f6bbd5c4d156a6fd0e0eb57df7250401d39103e1c4ee596fcc0c6849befc6328cc55db67eccf58b7eb258649c569e3c186f00b", 0x71}, {&(0x7f0000000400)}, {&(0x7f0000001d00)="1c9a3e8086b11bf2d0f8572cbbdb3ec0c98d443b486fcf2e17b542567e1fc9fb8bcd47c74aa86398574ab086cd0926fbb9994e9fd6ee039ab863aa093d1ce16cb8887afbe4f0d8d442df3209a5d4b2fbd0b378a05aa92e52007dec0225ce9d53f770d192e2e0745abae33ce7117eb71e1fa84c405cbe8a0fab586bf6cca1586a623ed9ce71212fa0b788d2389fbca69a44a43b3003f20f7b2c36792af55b8a1eb4f826b3e84659329332dd1bf1659b2f0e068334ceac2235156c6ccdf1e4496b1668c04a71922fe1e0925d76d4c7a5bae04d4ce3404940469c06f0319113666e99c0f9", 0xe3}, {&(0x7f0000001e00)="05ee7a4f4446838a2cebdf48a96cefb90ffebc73fb5a73a5776f595cd51f239c7e8b237ae22db53b0f428ba5122931aa86eca94959aa7671dd03d6e14f37c93d47f1429403310eede3fdd391224d94a13cb1553954b147eea8cd93d98e11417a0482af28cafe0c5161cadf666a257cf8d760", 0x72}, {&(0x7f0000001e80)}], 0x5, &(0x7f00000034c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r4, r6, r1, r8, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r0, r0, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x100, 0x40}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) 14.544437791s ago: executing program 8 (id=1734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r3, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000680)='cuntRon_end\x00\t\x05_\r\x84\xf9\xb2\x85\xe7\xc0\xc4\xdf\xbaT\xed\x8d\x83\x11M\xe1\x06\t\xbc3\xc5N\xee\xd7#\x1f%/\xaa\xf6;pF\"~*\x99:x?\xcf\x1b\xaf\xe2\xa7?\xef5`\r\x80\x88\x8e\x8f\xc9\xb4\\\xb6\x9b\x98\xfdo\xc6\xd1\x01\xab\x7f\xd4\xaa\xcf\xdfk\xdd\xf8|\x14\xa8m\xe3\xb3\x99\xa3\x87\x97\x9dn\xbaG^\x8ell\xa2\xb7L\xec\x88M\xb1\xe7\xa7\xdd\xc1`\xf5\xa6f\xd1B=\x94\xb2\xe5ppG\xc1?\x11\xac\b)\xfd#\xb0u3\xfcZ \x97\xc5\x15u?+[UP@\x8e\xeb\n\xc5\x97uxX}\xa6\xa6\xba\xe7\xf9\x05\b\xd9\xfe\x13\xcc\xba]\x93\xcf\xdeO\xf1\xc5o\xe7\xae\x9b\x11a\xb1\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00jk{\x10\x19S<+\x9a\x17Vc\xe9,\x04\xb6-si\xb9$\xef\xb3\"^\xd2\xccuP\xb0E\x1c\xfa^tI\xf4H\xbfF\xc0\xa0\xdd\r\x13\x15\xae\'e\x15\xaa<&qF\xad\xe5\xadF\x13\xe7\x9c\x19\xc9\xfcq\xc2\x7f\xa2\x14\x11\x13u\xbf\x90\a\xf9\xd0Z\x11A\xcd\x1e\x03|\xb3\t}{\xe2\xf0j\x8e\xb2\xfd\x83\xc8W\x04\xec\xe9e\xcb\xef', 0x0, 0xffffffffffffffff) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c2402"], 0x0) 14.271245288s ago: executing program 5 (id=1736): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_group_source_req(r0, 0x29, 0x3, &(0x7f0000000040)={0x3, {{0xa, 0x4e21, 0xf5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {{0xa, 0x4e23, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x108) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0, 0x30}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 12.23880773s ago: executing program 5 (id=1739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r5 = socket(0x23, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r10, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, 0x0) pipe2$watch_queue(&(0x7f0000001900), 0x80) r11 = syz_open_dev$radio(&(0x7f0000001940), 0x1, 0x2) sendmmsg$unix(r8, &(0x7f0000014dc0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="1838cf6d9c123eeafa1496537fcc2117437ba31df4aba2e4a123e87dc18b9737113bb422be2b5b2c948a1b5d5bc3987bbe8b0711", 0x34}, {&(0x7f00000013c0)="0473f84b9ea82cc41257a9c574bec65a87aad5badf2ca668a7f13b439ed53a858aa89a748c997fe48401bf6df7e958ed7ddfd62e2ba5d461be06657c0844b718", 0x40}, {&(0x7f0000001540)="5ef362499038a60d01caeeba59644ad7a31023f8209c3a56c862bef96a80201cc786539ce794a8c00bbdd78795ef3aac68b8fa2633d991514398fe59d5157fcdec910ed889b3bf528157bb1a4c7d8a25a5b74e58e257adb12e3d8e96b6ea2cd538417b36e423e4940475d988ece60a1c6e227158c149", 0x76}, {&(0x7f0000001640)}, {&(0x7f0000001740)="c39b6316c4d676a7a3b083afecd4e1998f33bea41744bb5468e11609c09e9350828a923517fa2e8bbf60d0331b88f7d4f12868358ad2144e48ebdb56682f5ed08f4349169ca51bd124d3fd7a9d0d287a14d2775e350ca582e6668610ccec284f57eb304c18eafebca4c7357de19a48946c725963849766c07b94598b2f2d6584375d17134b30a9db8ea8fcfafed8d197d31815980e42fa1e174f7c0e1828740616380e81cd768d2318fb8acab336d613b8eda46f33a45236dadee9ff4022b6fdb883a9629d742d03c8f57af65c49b8bdd16b900780f51cf1db97aa19bebc68", 0xdf}], 0x5, &(0x7f00000019c0), 0x0, 0x2}}, {{&(0x7f0000001ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001b40)="0cb75573d63a747d131b339cdb2cf433c998b89ac26c7bf0c8cbcb6d93925191d0b2d4c53d0baf034963ba3f7d46f86adfdfc4942b87e92028242bfd36c6391f70c1bb22c131bfd824bd69f538b27ce0efd90af9b3820c04aed7c05c01273c8b11bfa02e0e8c2e47fed89a1cc6c229572150415df8223b09998d1b4541b530204cfba41067cbefd089d7f435c2fc646ee0fa3a13", 0x94}, {0x0}, {&(0x7f0000001c80)}, {0x0}], 0x4, &(0x7f0000001e00)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}], 0x28, 0x40044}}, {{&(0x7f0000001e40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f000000a640)=[{&(0x7f0000001ec0)="d63f1bd41390b485b8b2dc037a0aa85d1c9c112478b4aee35e959f9ab48a110db5448a0a4a1b359389aa55ea6a569088b87cff68ee357c00edfa3045a1d02b15ee424f1a96fc67c985cf890728ac925ac28448a20ece53da421b094075dd67753f491c381da295c812e9499d02c8d8643b5467f3dafb27903dc6d16ab7cc4e7e9a270001e5743c356573c0c9937d3e355829ec4c610ea6fbfead6065b011004554e1676b9ac1fcd8dbe0b252606aa78b65225b43", 0xb4}, {&(0x7f0000001f80)="a7d9712fe7061ab8bddba2017679f1f6dc126ec420259488604f6fa01b95b03897f869429a96031526232cb1efd0b8c1baebbb7b1b30f2fddcff39e16e59525232c4a820318bc40b29278643c58111c9f2eb18d8eba0df9943dd0faf392177bf34aeb34e9d0de65d30871721c7f05523d2182a5036d13802212b09d4341043103e9b53d5dd69ba03e94856f766e85f9b9f51d4bcb0c5a9850083fedf0e43c3d0ff1a2bf3c9091a14719051d4d2da8d2a4235feaf5f2e234aa57a087551b4cc82406fb4", 0xc3}, {&(0x7f0000004140)="5d8621a1b8437e2d655a617ad8b60ad43e666f76417ea9670f0dfbc0ff85b1ba4061e8e1e188d4ff1f8e53a2deb90a95a029a328218f1414e23f172f0b764b3772e58ee30e9cd125de51b41a8cf3b081fb344bbb94b7b10bf08ec8313bf4375ba380ec548a8d4e1454431547aebd806adff79dc15d", 0x75}, {0x0}, {&(0x7f000000d200)}, {&(0x7f000000a400)="c9c528f8d4dd65132fc9c1e94373f294d541672170f6552f5c7e5a6650a755708b5bf4b19af94130634f7fe03b3feceb74899c2fe80ba737cd9afa54f68372955d685132644d9785bdde309489644a5ef03ff495174c075384896829571ff41aa8088da6e2630118123e48a53f01fb29ce4f", 0x72}, {&(0x7f000000a4c0)="3a7320ccc2923fbeecc7eb449641b7c89a493967281c7c961db5a402b9f009f994a323ea4028699c543a16347926ec406eedb11f704fd775ec40dd77457ce2c13eb87df377049afb2753daed32d8ae9cd3348b46964e4dd4b4bd683411dc72d699f6b5bad43033ca6e15612b111b38e181c9a42252e3bfa3cdca740ab49ed40359f047e08874d8e6a308472af89bee20fc62fa801519f0a9c0b682d873cd2a68cf5864c664236599d0b778bf", 0xac}, {&(0x7f000000a5c0)="e3e7f5d8b2b81eefc6f19a059d7d64df41ebf06c8408350b65485a0eaa56c8077ac7e2a8ab93e41f4ab925b05a239df82d1500a02d711626aa5056c287312f29041ce870", 0x44}], 0x8, &(0x7f0000002080)=[@cred={{0x1c}}], 0x20, 0x4010}}, {{0x0, 0x0, &(0x7f00000042c0), 0x0, &(0x7f00000083c0)=ANY=[@ANYBLOB='\x00', @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x14}}, {{0x0, 0x0, &(0x7f000000a9c0)=[{&(0x7f000000a6c0)=']|', 0x2}, {&(0x7f000000a700)="810d7e653963ac6c6c13ccb26345b7e1567b069e5ab651965b40ea78b883b68349c931114df3219eb15cd8c8e21a110745eda2e2582a5b83978712ee336101bc56d68c438c4200e1575125635f6100deeb77e02211e184ea1a20d421057a", 0x5e}, {&(0x7f00000102c0)="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", 0x1000}, {&(0x7f000000a7c0)="d76c43009e9fc5aa2549da33fc5907a73a312d7c14e3d5bb4066cd27b1180dcd717e98d65b45cd1c3df83da48b11838bb19470c8c9db197d379ba332c47b8a84c708944cfd871714d28b2d217a129519324e27c08013248d95851c85c13fdce0c7029381b6032afb628d0766317e4137a222e4a61b8cd05e49932f9a4637edec8c19bc14669d92e2345de1add9e8f9416cd4de0ce4ad02b93b1192fd3f30d2d8a9284cf18f552d6cec2d13d6b382b63fb43cf79154eb7968c7579291d31b0ac67c15f524df562e004d", 0xc9}, {&(0x7f000000a8c0)="913ab542670ce7f2de7636a20393ae9c9872ef7f3a0a542fdababae9ae3a7ca426eed57ccb2d175ba133ad6705fac7c1a47ea0e280ecabe0c19300584db764912ade9c1af3362928c5dccfc0d054ece392e51601544161f735ec2994a091c231180f7c8cac111bf1ad49b8c60aa2984df04b827572ec79f3f6e0acd5bd6375053e4f3d2ff31d35ca5bb4567eb6349e273f44552a6018162450630bcc459bda782c33f0dec95736288c8ac1c2f2d69b062439ca73a79eb306910b9c912f83562f8028b38d071a4388fa46b6e57a28daaa86e293bf8e", 0xd5}], 0x5, 0x0, 0x0, 0x20000800}}, {{0x0, 0x0, &(0x7f000000ab80)=[{&(0x7f000000aa40)="d3bc9bd213adfa7b8b9dda1c2ae157b8b53cc9ab6ac4ac014884712f7691153a69ef8b4663b6befef3e59f17dc3557dfb9f76da13c88661f24b6b34963d01b4fae9b149722c4ad46e66e9176f33ed78e2d299652fa226a1c09", 0x59}, {0x0}, {&(0x7f000000ab00)="75e599f435d8b0b547da18e5931891961354b25183dd9a3719159c371dd46a215e7bc790679a8146ec905c8d942a07251e4b3312c38c903901615d612d916e59a7ffbb307b2717a8c57b0817677de2aa88d32dd2b61aab0bad7a959b67400f125a8971a74955bd1cfc", 0x69}], 0x3, 0x0, 0x0, 0x4004000}}, {{&(0x7f000000abc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000ae40)=[{&(0x7f000000ac80)}, {0x0}, {&(0x7f000000ad40)}, {0x0}], 0x4, &(0x7f000000b000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="00000000280000bec000"/20, @ANYRES32=r10, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x2400c845}}, {{&(0x7f000000b140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000011380)=[{&(0x7f00000112c0)="163c4626f56c1f6158922cc60f78d801cfd0ed29f564f3162018274d988d1e44b80105b27ca45d098f88f65be592ec20304a2d0e37825b717057a1597882e708e4899944a60b0234ae972e8c5b3b97281647272d2ea6dedeb7f8f3dc39748dfc27b36ed23d1760929e74894e6487d7986e90bb3cafeee5221001e962719edd71ba4dc24c32e3192e5648a3a5d7d1cb26b7", 0x91}, {&(0x7f000000e200)}, {0x0}], 0x3, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000138c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90, 0x40000}}, {{&(0x7f0000013980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000014c40), 0x0, &(0x7f0000014d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70, 0x884}}], 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 11.455787062s ago: executing program 7 (id=1740): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB="00000000000000000800040000060000"], 0x30}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 11.363484356s ago: executing program 2 (id=1741): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r7, 0x541b, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000003c0), 0x0) ioctl(r7, 0x5451, 0x0) 11.258878182s ago: executing program 5 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001140000000040500010006000000050005000a00000005000400000000000d000300686173683a6e657400000000090002"], 0x54}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000040001000000000000262bdd1aadbfc9f5d7911dde0ec2ba014944ad5aa531f0cf2c676adeb2d5b1dff42450e413f76518005f2baaa56d5e6b55ace0dbe1a545839ce295e48c3e02"], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000"], 0x50) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r11, 0x607, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x8000812) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) read$FUSE(r4, &(0x7f0000006a00)={0x2020}, 0x2020) 11.123293639s ago: executing program 8 (id=1744): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)) 9.921269374s ago: executing program 7 (id=1745): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e", 0x36}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 9.791306993s ago: executing program 8 (id=1747): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e", 0x36}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8.854869407s ago: executing program 8 (id=1748): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r6 = socket(0x1d, 0x4, 0x6) r7 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) bind$can_j1939(r6, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 8.728062163s ago: executing program 7 (id=1749): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r5 = syz_open_dev$vcsn(0x0, 0x6c90, 0x480c1) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r2, @ANYBLOB="0800010003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2c048010}, 0x20000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/34) r6 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) 8.558669092s ago: executing program 5 (id=1750): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x23, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, 0x0, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 8.452613857s ago: executing program 9 (id=1751): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) setns(r3, 0x2000000) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000440)='FROZEN\x00', 0x7) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280), 0x0) 8.425561636s ago: executing program 2 (id=1752): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "bc410887c39b93ba733c40a6ebe73ed8cc4963e8d949bb4ff67c823dd18c8706c7973608f8f9fec843aad0da96bd888c8ff6ba75008e76ef31b000b31301b9f7", 0x3b}, 0x48, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r9 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040)={r0}, &(0x7f0000002080)={'enc=', 'raw', ' hash=', {'sha256-generic\x00'}}, 0x0, 0x0) 7.79012746s ago: executing program 9 (id=1753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000640)={0x0, 0x1ff, 0xbee, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x401], [0xfffffffd, 0x1001000, 0x8000001], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8], [], [0x3]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, 0x5b, 0x0, 0xfffffffffffffca2}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000), 0x2, 0x2) r9 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52f40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00230db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d50400ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}, {&(0x7f0000000000)="53f644cf223e37a1896b2be827acea323fc6d2f53a7b396111b8b8ac9e8a929ba5f5db3c900af0a74771bcf9a29d97115e0c28cee70818c04809fe15724f4cf12c81838562e2940e9d4291b45662a0d2d28cf02d3ce2c4e6f2b7bba371bc7653663d4c1611333522381e52f084ef4bf1d81e5038f001267844d52535bc7ab66999f78502763671ee5a84130640a38af21074c65190fea4a72dffce5bb7e9fbdd11dfaf6dc7e0c4b6", 0xa8}, {&(0x7f0000000100)="f6813a04e4d37c2dcdd0f297caa97056a9b7e20802ed8631c86c01c1b05ce791d04df31254536fbd5c54a44cd725b59e6d", 0x31}], 0x3}, 0x80080) 6.850542777s ago: executing program 5 (id=1754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x3}) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe95, 0x20004880, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x101}, 0x10}, 0x94) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1e, r7, 0x10ada85e65c25349, 0x3, 0xfffffffc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.759875447s ago: executing program 9 (id=1755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x20000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) socket(0x23, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a"], 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r8, 0x80) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 6.540650069s ago: executing program 2 (id=1756): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r11 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x3}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 5.513955723s ago: executing program 9 (id=1757): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b62d25a80648c25", 0xe}, {&(0x7f0000000580)}], 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r6 = socket(0x1d, 0x4, 0x6) r7 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) bind$can_j1939(r6, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYBLOB], 0x50) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c084) 4.918273549s ago: executing program 8 (id=1758): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) futex(0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x1fe) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x70, 0x20}, &(0x7f00000000c0)=0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000a2baaaaaaaaaa3e0180c280000e86dd6ecf7095001406fffe880000000000000000000000000001fe8000000000000000000000000000304e214e21", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYRESDEC=r2], 0x4e) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r12, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0xffffffffffffffff, 0x1}) msgsnd(r12, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000800000000"], 0x8, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r13, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 4.788398769s ago: executing program 7 (id=1759): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0xe388}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x34c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r6, {0xf}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x320, 0x2, [@TCA_U32_SEL={0x204, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x104, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x34c}}, 0x24040094) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4606, &(0x7f0000000080)={0x2}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000440)={r8, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 4.765328387s ago: executing program 2 (id=1760): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getgroups(0x1, &(0x7f0000000080)=[0xee00]) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) clock_gettime(0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0x4}, {0xfff3, 0x9}, {0x5, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.254523635s ago: executing program 2 (id=1761): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e", 0x36}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.086573648s ago: executing program 9 (id=1762): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ce407a21601faac29a5832d81cb42eb2e20559b3d51251cd080a889910e1ba5aeae19e2a6fe9d59e2a42efdd42ba111d39aa2f428359bf580183ac9e8ed27f5497", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="2f000000382000007f000000552b23d08233554c575b497e16c61aba33b91daa085d29bae369f2c4a23c8af041c90000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 3.077516048s ago: executing program 8 (id=1763): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x6}, 0x8) r5 = fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) openat$nvme_fabrics(0xffffff9c, 0x0, 0x200000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0/file0\x00', 0x26) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x410, &(0x7f0000000100)='barrier') 2.167659679s ago: executing program 5 (id=1764): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') futex(0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffd) setuid(0xee01) syz_open_dev$video4linux(&(0x7f0000000000), 0x79, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d228186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) close(0x3) 2.078083025s ago: executing program 2 (id=1765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x15, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, &(0x7f0000000140)=""/21, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c000680070002"], 0xa0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e000000100"/30, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) sendmsg$key(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x10}}, 0x0) 1.850387301s ago: executing program 9 (id=1766): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "bc410887c39b93ba733c40a6ebe73ed8cc4963e8d949bb4ff67c823dd18c8706c7973608f8f9fec843aad0da96bd888c8ff6ba75008e76ef31b000b31301b9f7", 0x3b}, 0x48, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r9 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040)={r0}, &(0x7f0000002080)={'enc=', 'raw', ' hash=', {'sha256-generic\x00'}}, 0x0, 0x0) 1.064099907s ago: executing program 7 (id=1767): r0 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r2 = socket(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80080) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000022c0)=ANY=[@ANYBLOB="24000000370100000a000000000000000b000000000000007c1a2cd81aca1770fa1340931dbf51e96cff8fca5b559c0f334a99a3c6975843637dc7482e1725f35976de0c7aa47876cc61d617382a1b5089bcdd66c3579cb2d36bdfa33d451023f0f4fc4b647eeb", @ANYRES32, @ANYBLOB="0600746d70667300"], 0x24) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f00000027c0)={0x2, "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"}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0xfffd, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e24, 0xfffffffe, @mcast1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) getrusage(0x1, &(0x7f0000002980)) sendmsg$nl_generic(r7, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x81) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f023}) fallocate(r0, 0x0, 0x9, 0x4) 0s ago: executing program 7 (id=1768): r0 = socket$isdn(0x22, 0x3, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c00000400458000020180c701dc8094010980900138801400af00fe8000000000000000", @ANYBLOB="2a004f80"], 0x218}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendfile(r1, r1, 0x0, 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8000000000015) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x901, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000003c0)="d2b16f83e7eae8fc6adc51c040fbc6f7ac4e46720a7c9d86097bdb3fcacfee7efa7e312b8609b58e895ad16c0c82069fd2a5a49914d79c6afe925f7423e180b63aeea372ba16e76f03328eb39b8c4e7039fffb68f906356c255c03beba2679b1ed21228cdc4233902875ee94cb3953620246773a7fcc988b2e3a217a6501cf9dde71a0af8eaa1753fed33d62c78e9cdfe8a9612508d3bd12f80e3d87fb2f181600dc14ff403afc3f", 0xa8}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000040)="c0680a748a888a3b1fc5daf604eed04dc25143b8f16e9997457c6befe2e4fccbaeac30", 0x23}, {&(0x7f0000004600)="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", 0xe46}, {&(0x7f00000001c0)="af4d0ffdd49041a3f9a8f6cd4c6b19360bad553b4fccfd651d68086424d87ebe9b1b6315f8a1e8057fb356f92555634ca3a2f4d6", 0x34}, {&(0x7f0000002480)="159f8950e3fe159da100428d219e4c43149f7629da7956fd31f019ae25fd634527fbc6a6b198c3f96c75a2671fc4633cac48d09eeb81633d75b4bcba0afc01b80fcc465a956d5c5244312f4d2a7c652db4439bec1ca859dd5ab1b1f8423e385785796ae222938909395e1805078c3db6fb839bd8da2c86ca516290112d9af5b9f6a9ec9caa63b46424c9249ec845a9693109a26513849d58324bd617a1d43617fb83ae71103dd862218c6a8e3e8962031cc4a4807c3d5680aaa75688659f87d2d02a0adffa157cda7e84c4300280b1d89057c650", 0xd4}], 0x6) syz_clone(0x4100080, 0x0, 0x17, 0x0, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) socket(0xa, 0x3, 0x3a) kernel console output (not intermixed with test programs): 0] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 772.151672][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 773.514049][ T6979] wlan0: Trigger new scan to find an IBSS to join [ 774.521188][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 774.521201][ T30] audit: type=1400 audit(1764740220.434:5438): avc: denied { watch } for pid=13018 comm="syz.9.1352" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 774.572953][ T30] audit: type=1400 audit(1764740220.434:5439): avc: denied { watch_sb watch_reads } for pid=13018 comm="syz.9.1352" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 774.597473][ T30] audit: type=1400 audit(1764740220.444:5440): avc: denied { watch_sb watch_reads } for pid=13018 comm="syz.9.1352" path="/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 774.701132][T13026] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1355'. [ 774.717284][ T24] usb 3-1: Service connection timeout for: 256 [ 774.725016][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 774.727314][ T30] audit: type=1400 audit(1764740220.453:5441): avc: denied { allowed } for pid=13018 comm="syz.9.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 774.781454][ T24] ath9k_htc: Failed to initialize the device [ 774.792766][ T30] audit: type=1400 audit(1764740220.462:5442): avc: denied { create } for pid=13018 comm="syz.9.1352" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 774.799647][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 774.916577][ T30] audit: type=1400 audit(1764740220.462:5443): avc: denied { map } for pid=13018 comm="syz.9.1352" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 775.006867][ T30] audit: type=1400 audit(1764740220.462:5444): avc: denied { read write } for pid=13018 comm="syz.9.1352" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 775.085125][ T30] audit: type=1400 audit(1764740221.098:5445): avc: denied { read } for pid=13023 comm="syz.7.1355" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 775.154446][ T30] audit: type=1400 audit(1764740221.098:5446): avc: denied { open } for pid=13023 comm="syz.7.1355" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 775.193683][ T30] audit: type=1400 audit(1764740221.108:5447): avc: denied { search } for pid=13020 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.244709][ T24] usb 3-1: USB disconnect, device number 21 [ 777.575102][ T5931] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 777.663515][T13052] tmpfs: Bad value for 'mpol' [ 777.875784][ T3860] wlan0: Trigger new scan to find an IBSS to join [ 778.251793][T13056] XFS (nbd7): SB validate failed with error -5. [ 778.434890][T13052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.901533][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 779.905354][ T5931] usb 10-1: Using ep0 maxpacket: 16 [ 780.022690][ T30] audit: type=1400 audit(1764740225.981:5556): avc: denied { prog_load } for pid=13064 comm="syz.8.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 780.047481][ T5931] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.048522][ T30] audit: type=1400 audit(1764740225.981:5557): avc: denied { bpf } for pid=13064 comm="syz.8.1362" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 780.067262][ T5931] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.086840][ T30] audit: type=1400 audit(1764740225.991:5558): avc: denied { execmem } for pid=13064 comm="syz.8.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 781.109102][ T30] audit: type=1400 audit(1764740226.122:5559): avc: denied { ioctl } for pid=13046 comm="syz.9.1357" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.102992][ T30] audit: type=1400 audit(1764740226.122:5560): avc: denied { ioctl } for pid=13046 comm="syz.9.1357" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.133312][ T5931] usb 10-1: string descriptor 0 read error: -71 [ 782.139753][ T5931] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.196076][ T30] audit: type=1400 audit(1764740226.131:5561): avc: denied { read write } for pid=9366 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.221434][ T5931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.229796][ T30] audit: type=1400 audit(1764740226.131:5562): avc: denied { read write open } for pid=9366 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.255904][ T30] audit: type=1400 audit(1764740226.131:5563): avc: denied { ioctl } for pid=9366 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.288252][ T30] audit: type=1400 audit(1764740226.224:5564): avc: denied { create } for pid=13064 comm="syz.8.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 782.319946][ T30] audit: type=1400 audit(1764740226.234:5565): avc: denied { write } for pid=13064 comm="syz.8.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 782.382474][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1364'. [ 782.451474][ T5931] usb 10-1: can't set config #1, error -71 [ 782.551685][T13084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13084 comm=syz.9.1364 [ 782.646674][ T5931] usb 10-1: USB disconnect, device number 2 [ 782.657412][T13082] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 782.787210][T13078] netlink: 'syz.9.1364': attribute type 1 has an invalid length. [ 782.795012][T13078] netlink: 'syz.9.1364': attribute type 2 has an invalid length. [ 782.905971][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.954637][T13074] team0: Device gtp0 is up. Set it down before adding it as a team port [ 783.828236][T13078] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 783.868849][T13090] syzkaller1: entered promiscuous mode [ 783.884567][T13090] syzkaller1: entered allmulticast mode [ 784.604425][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1369'. [ 784.949220][T13103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1361'. [ 785.453782][T13103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1361'. [ 785.479674][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 785.479688][ T30] audit: type=1400 audit(1764740230.939:5696): avc: denied { ioctl } for pid=13108 comm="syz.7.1371" path="socket:[37995]" dev="sockfs" ino=37995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 785.690518][ T30] audit: type=1400 audit(1764740230.939:5697): avc: denied { write } for pid=13108 comm="syz.7.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 785.728887][ T30] audit: type=1400 audit(1764740231.191:5698): avc: denied { ioctl } for pid=13111 comm="syz.9.1372" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 786.185534][ T30] audit: type=1400 audit(1764740231.201:5699): avc: denied { read write } for pid=10137 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.209958][ T30] audit: type=1400 audit(1764740231.201:5700): avc: denied { read write open } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.235155][ T30] audit: type=1400 audit(1764740231.201:5701): avc: denied { ioctl } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.296294][ T30] audit: type=1400 audit(1764740231.238:5702): avc: denied { read write } for pid=11546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.627682][T13127] FAT-fs (nbd8): unable to read boot sector [ 786.661089][ T30] audit: type=1400 audit(1764740231.238:5703): avc: denied { open } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.680964][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1373'. [ 787.107826][ T30] audit: type=1400 audit(1764740231.238:5704): avc: denied { ioctl } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.161412][T13134] input: syz1 as /devices/virtual/input/input17 [ 787.169500][T11546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 787.337637][T13134] netlink: 'syz.7.1375': attribute type 1 has an invalid length. [ 787.526549][T13137] gretap1: entered allmulticast mode [ 787.541756][T13137] bond1: (slave gretap1): making interface the new active one [ 787.554599][T13137] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 787.568053][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1377'. [ 787.940223][T13146] QAT: failed to copy from user cfg_data. [ 788.067871][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 788.923848][T13138] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 790.480814][T13174] syz.2.1379 (13174): drop_caches: 2 [ 790.852067][ T30] kauditd_printk_skb: 231 callbacks suppressed [ 790.852085][ T30] audit: type=1400 audit(1764740236.093:5916): avc: denied { open } for pid=12705 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.376946][ T30] audit: type=1400 audit(1764740236.093:5917): avc: denied { ioctl } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.409656][ T30] audit: type=1400 audit(1764740236.102:5918): avc: denied { execmem } for pid=13181 comm="syz.5.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 791.912524][ T30] audit: type=1400 audit(1764740236.308:5919): avc: denied { read } for pid=13181 comm="syz.5.1383" dev="nsfs" ino=4026534095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 792.011286][ T30] audit: type=1400 audit(1764740236.308:5920): avc: denied { open } for pid=13181 comm="syz.5.1383" path="net:[4026534095]" dev="nsfs" ino=4026534095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 792.161093][ T30] audit: type=1400 audit(1764740236.317:5921): avc: denied { create } for pid=13181 comm="syz.5.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 792.181495][ T30] audit: type=1400 audit(1764740236.355:5922): avc: denied { prog_load } for pid=13181 comm="syz.5.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 792.212376][ T30] audit: type=1400 audit(1764740236.355:5923): avc: denied { bpf } for pid=13181 comm="syz.5.1383" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 792.239461][ T5903] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 792.692416][ T30] audit: type=1400 audit(1764740236.364:5924): avc: denied { read } for pid=13181 comm="syz.5.1383" dev="nsfs" ino=4026534095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 792.713822][ T30] audit: type=1400 audit(1764740236.364:5925): avc: denied { open } for pid=13181 comm="syz.5.1383" path="net:[4026534095]" dev="nsfs" ino=4026534095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 792.917791][ T5903] usb 10-1: Using ep0 maxpacket: 8 [ 792.925662][ T5903] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.403336][ T5903] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 793.421025][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.432841][ T5903] usb 10-1: config 0 descriptor?? [ 793.445410][ T5903] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 793.884278][T13210] futex_wake_op: syz.2.1388 tries to shift op by -1; fix this program [ 794.046205][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1387'. [ 794.056182][T13214] tmpfs: Bad value for 'mpol' [ 794.405413][T13222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.917557][T13223] netlink: 'syz.5.1390': attribute type 23 has an invalid length. [ 795.168134][ T38] usb 10-1: USB disconnect, device number 3 [ 795.538751][T13208] sp0: Synchronizing with TNC [ 795.565191][T13239] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 795.593527][T13237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.209909][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 796.209927][ T30] audit: type=1400 audit(1764740241.228:6148): avc: denied { search } for pid=13243 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.250632][ T3913] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.279045][ T30] audit: type=1400 audit(1764740241.228:6149): avc: denied { search } for pid=13243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.368614][ T30] audit: type=1400 audit(1764740241.228:6150): avc: denied { search } for pid=13243 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.549280][ T30] audit: type=1400 audit(1764740241.228:6151): avc: denied { read open } for pid=13243 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.576533][ T30] audit: type=1400 audit(1764740241.228:6152): avc: denied { getattr } for pid=13243 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.619874][ T3913] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.123795][ T30] audit: type=1400 audit(1764740241.294:6153): avc: denied { read open } for pid=13243 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.233440][ T30] audit: type=1400 audit(1764740241.294:6154): avc: denied { getattr } for pid=13243 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.271902][T13204] [U] è [ 797.380094][T13254] syz.9.1394 (13254): drop_caches: 2 [ 797.388103][ T30] audit: type=1400 audit(1764740241.294:6155): avc: denied { search } for pid=13243 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.417593][ T30] audit: type=1400 audit(1764740241.294:6156): avc: denied { search } for pid=13243 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.483729][ T30] audit: type=1400 audit(1764740241.294:6157): avc: denied { search } for pid=13243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.589948][ T3913] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.340462][ T3913] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.486305][T13269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1396'. [ 799.676408][T13288] syz.5.1401 (13288): drop_caches: 2 [ 801.556021][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 801.556037][ T30] audit: type=1400 audit(1764740246.242:6345): avc: denied { allowed } for pid=13305 comm="syz.5.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 801.739097][ T30] audit: type=1400 audit(1764740246.270:6346): avc: denied { sqpoll } for pid=13305 comm="syz.5.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 801.773021][ T30] audit: type=1400 audit(1764740246.270:6347): avc: denied { create } for pid=13305 comm="syz.5.1404" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 801.794406][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.896441][ T30] audit: type=1400 audit(1764740246.270:6348): avc: denied { allowed } for pid=13305 comm="syz.5.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 802.005204][ T30] audit: type=1400 audit(1764740246.270:6349): avc: denied { map } for pid=13305 comm="syz.5.1404" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 802.036833][ T30] audit: type=1400 audit(1764740246.270:6350): avc: denied { read write } for pid=13305 comm="syz.5.1404" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 802.061756][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.068926][ T30] audit: type=1400 audit(1764740246.270:6351): avc: denied { read } for pid=13305 comm="syz.5.1404" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 802.093346][ T30] audit: type=1400 audit(1764740246.270:6352): avc: denied { open } for pid=13305 comm="syz.5.1404" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 802.117064][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.214188][T13297] lo speed is unknown, defaulting to 1000 [ 802.218223][ T30] audit: type=1400 audit(1764740246.270:6353): avc: denied { prog_load } for pid=13305 comm="syz.5.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 802.304215][ T30] audit: type=1400 audit(1764740246.270:6354): avc: denied { bpf } for pid=13305 comm="syz.5.1404" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 803.013048][T13297] lo speed is unknown, defaulting to 1000 [ 803.019566][T13297] lo speed is unknown, defaulting to 1000 [ 803.035013][T13297] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 803.058333][T13297] lo speed is unknown, defaulting to 1000 [ 803.065623][T13297] lo speed is unknown, defaulting to 1000 [ 803.072229][T13297] lo speed is unknown, defaulting to 1000 [ 803.079430][T13297] lo speed is unknown, defaulting to 1000 [ 803.086135][T13297] lo speed is unknown, defaulting to 1000 [ 803.092807][T13297] lo speed is unknown, defaulting to 1000 [ 803.457801][T13322] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1406'. [ 804.995800][T13337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1410'. [ 805.474611][ T3913] bridge_slave_1: left allmulticast mode [ 805.474751][ T3913] bridge_slave_1: left promiscuous mode [ 805.553213][ T3913] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.639059][ T3913] bridge_slave_0: left allmulticast mode [ 805.659855][ T3913] bridge_slave_0: left promiscuous mode [ 805.685972][ T3913] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.996443][T13358] ipt_ECN: cannot use operation on non-tcp rule [ 807.061162][ T3913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.084927][ T3913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.106455][ T3913] bond0 (unregistering): Released all slaves [ 807.153052][T13348] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1408'. [ 807.213831][ T3913] : left promiscuous mode [ 807.265864][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 807.265876][ T30] audit: type=1400 audit(1764740251.583:6594): avc: denied { create } for pid=13371 comm="syz.2.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 807.277308][T13333] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1408'. [ 807.488864][T13338] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1408'. [ 807.996202][ T30] audit: type=1400 audit(1764740251.621:6595): avc: denied { write } for pid=13371 comm="syz.2.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 808.047028][ T3913] IPVS: stopping backup sync thread 11712 ... [ 808.081414][ T30] audit: type=1400 audit(1764740251.621:6596): avc: denied { prog_load } for pid=13371 comm="syz.2.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 808.135277][ T30] audit: type=1400 audit(1764740251.621:6597): avc: denied { bpf } for pid=13371 comm="syz.2.1424" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 808.250958][T13379] audit: audit_backlog=65 > audit_backlog_limit=64 [ 808.257560][T13379] audit: audit_lost=102 audit_rate_limit=0 audit_backlog_limit=64 [ 808.266656][T13379] audit: backlog limit exceeded [ 808.398608][T13385] audit: audit_backlog=65 > audit_backlog_limit=64 [ 808.405234][T13385] audit: audit_lost=103 audit_rate_limit=0 audit_backlog_limit=64 [ 808.413575][T13385] audit: backlog limit exceeded [ 811.858295][T13420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1421'. [ 812.717580][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 812.717615][ T30] audit: type=1400 audit(1764740256.681:6802): avc: denied { create } for pid=13435 comm="syz.7.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 812.954048][ T30] audit: type=1400 audit(1764740256.896:6803): avc: denied { allowed } for pid=13435 comm="syz.7.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 813.156143][ T30] audit: type=1400 audit(1764740256.924:6804): avc: denied { create } for pid=13435 comm="syz.7.1425" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 813.223040][ T30] audit: type=1400 audit(1764740256.924:6805): avc: denied { map } for pid=13435 comm="syz.7.1425" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 813.286802][ T30] audit: type=1400 audit(1764740256.924:6806): avc: denied { read write } for pid=13435 comm="syz.7.1425" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 813.351925][ T30] audit: type=1400 audit(1764740257.121:6807): avc: denied { write } for pid=13435 comm="syz.7.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 813.772615][ T30] audit: type=1400 audit(1764740257.663:6808): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.800566][ T30] audit: type=1400 audit(1764740257.691:6809): avc: denied { search } for pid=5489 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.903130][ T30] audit: type=1400 audit(1764740257.691:6810): avc: denied { read write } for pid=11546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.078213][T13445] tmpfs: Bad value for 'mpol' [ 814.079556][ T30] audit: type=1400 audit(1764740257.691:6811): avc: denied { open } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.501593][T13451] Cannot find set identified by id 65534 to match [ 815.309712][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 815.486613][T13455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.933581][ T6058] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 818.494017][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 818.494035][ T30] audit: type=1400 audit(1764740261.657:6984): avc: denied { write } for pid=13464 comm="syz.7.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 818.704090][ T30] audit: type=1400 audit(1764740261.685:6985): avc: denied { read write } for pid=13464 comm="syz.7.1432" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 818.761070][ T30] audit: type=1400 audit(1764740261.685:6986): avc: denied { open } for pid=13464 comm="syz.7.1432" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.881117][ T30] audit: type=1400 audit(1764740262.116:6987): avc: denied { read write } for pid=10137 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.971276][ T30] audit: type=1400 audit(1764740262.116:6988): avc: denied { open } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 820.170671][T13497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 820.177277][T13497] audit: audit_lost=130 audit_rate_limit=0 audit_backlog_limit=64 [ 820.185638][T13497] audit: backlog limit exceeded [ 820.190996][T13480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 820.197541][T13480] audit: audit_lost=131 audit_rate_limit=0 audit_backlog_limit=64 [ 820.460000][T13501] fuse: Invalid rootmode [ 821.639927][ T3913] hsr_slave_0: left promiscuous mode [ 821.813427][ T3913] hsr_slave_1: left promiscuous mode [ 822.338179][ T3913] veth1_macvtap: left promiscuous mode [ 822.358332][ T3913] veth0_macvtap: left promiscuous mode [ 822.375239][ T3913] veth1_vlan: left promiscuous mode [ 822.396651][ T3913] veth0_vlan: left promiscuous mode [ 822.629934][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1443'. [ 822.922585][T13518] syz.2.1441 (13518): drop_caches: 2 [ 823.827292][T13535] libceph: resolve '0..' (ret=-3): failed [ 824.164870][T13543] tipc: Can't bind to reserved service type 2 [ 824.171245][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 824.171259][ T30] audit: type=1400 audit(1764740267.382:7202): avc: denied { create } for pid=13539 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 824.284538][ T30] audit: type=1400 audit(1764740267.382:7203): avc: denied { bind } for pid=13539 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 824.331551][T13543] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1445'. [ 824.341491][ T30] audit: type=1400 audit(1764740267.541:7204): avc: denied { create } for pid=13539 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 824.472943][ T7000] smc: removing ib device syz2 [ 824.478509][ T30] audit: type=1400 audit(1764740267.541:7205): avc: denied { write } for pid=13539 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 824.567800][ T30] audit: type=1400 audit(1764740267.541:7206): avc: denied { nlmsg_write } for pid=13539 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 824.676881][ T30] audit: type=1400 audit(1764740267.607:7207): avc: denied { create } for pid=13539 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.821955][ T30] audit: type=1400 audit(1764740267.607:7208): avc: denied { read write } for pid=13539 comm="syz.7.1445" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 824.851175][ T30] audit: type=1400 audit(1764740267.607:7209): avc: denied { open } for pid=13539 comm="syz.7.1445" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 825.195719][ T30] audit: type=1400 audit(1764740267.607:7210): avc: denied { read write } for pid=13539 comm="syz.7.1445" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 825.337497][ T30] audit: type=1400 audit(1764740267.607:7211): avc: denied { open } for pid=13539 comm="syz.7.1445" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 826.151064][ T3913] team0 (unregistering): Port device team_slave_1 removed [ 826.803095][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 826.864483][ T3913] team0 (unregistering): Port device team_slave_0 removed [ 829.423043][T13556] XFS (nbd2): SB validate failed with error -5. [ 830.024582][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 830.024598][ T30] audit: type=1400 audit(1764740272.873:7255): avc: denied { execmem } for pid=13558 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 830.108734][ T30] audit: type=1400 audit(1764740272.920:7256): avc: denied { bpf } for pid=13558 comm="syz.5.1449" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 830.177689][ T30] audit: type=1400 audit(1764740272.966:7257): avc: denied { read write } for pid=13558 comm="syz.5.1449" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.232093][ T30] audit: type=1400 audit(1764740272.985:7258): avc: denied { open } for pid=13558 comm="syz.5.1449" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.265632][ T30] audit: type=1400 audit(1764740272.985:7259): avc: denied { ioctl } for pid=13558 comm="syz.5.1449" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.315146][ T30] audit: type=1400 audit(1764740273.097:7260): avc: denied { ioctl } for pid=13558 comm="syz.5.1449" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.345597][ T30] audit: type=1400 audit(1764740273.172:7261): avc: denied { ioctl } for pid=13558 comm="syz.5.1449" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.409558][ T5931] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 830.529878][ T30] audit: type=1400 audit(1764740273.341:7262): avc: denied { read write } for pid=10137 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.555118][ T30] audit: type=1400 audit(1764740273.341:7263): avc: denied { open } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.573110][ T5931] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.602752][ T5931] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.622150][ T5931] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.631675][ T30] audit: type=1400 audit(1764740273.341:7264): avc: denied { ioctl } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.639272][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.690514][ T5931] usb 6-1: Product: syz [ 830.694758][ T5931] usb 6-1: Manufacturer: syz [ 830.705286][ T5931] usb 6-1: SerialNumber: syz [ 831.440096][ T5931] usb 6-1: 0:2 : does not exist [ 831.525673][T13530] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1442'. [ 831.905886][ T5931] usb 6-1: USB disconnect, device number 10 [ 832.297168][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1454'. [ 833.063568][T13591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.471439][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.993706][T13610] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 835.330679][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1458'. [ 835.391733][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 835.391752][ T30] audit: type=1400 audit(1764740277.849:7518): avc: denied { execmem } for pid=13616 comm="syz.7.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 835.865038][ T30] audit: type=1400 audit(1764740277.952:7519): avc: denied { prog_load } for pid=13606 comm="syz.9.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 835.908746][ T30] audit: type=1400 audit(1764740277.952:7520): avc: denied { bpf } for pid=13606 comm="syz.9.1458" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 835.943102][ T30] audit: type=1400 audit(1764740277.952:7521): avc: denied { perfmon } for pid=13606 comm="syz.9.1458" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 836.057578][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1459'. [ 836.157467][ T30] audit: type=1400 audit(1764740277.952:7522): avc: denied { prog_run } for pid=13606 comm="syz.9.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 836.834812][T13630] audit: audit_backlog=65 > audit_backlog_limit=64 [ 836.837653][T13631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 836.852002][T13631] audit: audit_lost=141 audit_rate_limit=0 audit_backlog_limit=64 [ 836.862337][T13630] audit: audit_lost=142 audit_rate_limit=0 audit_backlog_limit=64 [ 836.872807][ T30] audit: type=1400 audit(1764740277.980:7523): avc: denied { search } for pid=13615 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.056306][T13642] syz.7.1464 (13642): drop_caches: 2 [ 839.879403][ T3913] IPVS: stop unused estimator thread 0... [ 840.747303][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 840.747314][ T30] audit: type=1400 audit(1764740282.900:7740): avc: denied { read write } for pid=10137 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 840.940022][ T30] audit: type=1400 audit(1764740282.938:7741): avc: denied { open } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 841.189943][T13675] audit: audit_backlog=65 > audit_backlog_limit=64 [ 841.193507][ T30] audit: type=1400 audit(1764740282.938:7742): avc: denied { ioctl } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 841.224535][T13674] audit: audit_backlog=65 > audit_backlog_limit=64 [ 841.231142][T13674] audit: audit_lost=143 audit_rate_limit=0 audit_backlog_limit=64 [ 841.233168][ T30] audit: type=1400 audit(1764740283.013:7743): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 841.239214][T13674] audit: backlog limit exceeded [ 841.259532][ T30] audit: type=1400 audit(1764740283.041:7744): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 841.288704][T13675] audit: audit_lost=144 audit_rate_limit=0 audit_backlog_limit=64 [ 841.484479][T13674] overlayfs: failed lookup in lower (newroot/130, name='bus', err=-40): overlapping layers [ 841.498067][T13674] overlayfs: failed lookup in lower (newroot/130, name='bus', err=-40): overlapping layers [ 841.508470][T13674] overlayfs: failed to resolve './bus': -40 [ 841.665984][T13683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1473'. [ 842.075767][T13700] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1475'. [ 842.297512][ T1017] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 843.179047][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.221160][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.281534][ T1017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.339216][ T1017] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.467244][ T1017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.480389][ T1017] usb 3-1: config 0 descriptor?? [ 843.617765][T13723] overlay: filesystem on ./bus not supported [ 844.667618][T13733] netlink: 'syz.9.1479': attribute type 1 has an invalid length. [ 844.752245][ T1017] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 844.862386][T13739] netlink: 'syz.9.1479': attribute type 10 has an invalid length. [ 844.913713][T13739] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1479'. [ 845.042650][T13733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.254227][T13735] bond1: (slave veth3): Enslaving as an active interface with a down link [ 845.912875][T13737] bond1: (slave dummy0): making interface the new active one [ 846.044586][T13737] dummy0: entered promiscuous mode [ 846.067402][T13737] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 846.098477][T13739] bond1: (slave dummy0): Releasing active interface [ 846.107496][ T30] kauditd_printk_skb: 346 callbacks suppressed [ 846.107513][ T30] audit: type=1400 audit(1764740287.905:8084): avc: denied { search } for pid=13755 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.160555][T13714] lo speed is unknown, defaulting to 1000 [ 846.166595][ T30] audit: type=1400 audit(1764740287.905:8085): avc: denied { search } for pid=13755 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.200906][ T30] audit: type=1400 audit(1764740287.905:8086): avc: denied { search } for pid=13755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.236844][T13759] input: syz1 as /devices/virtual/input/input18 [ 846.324659][T13761] syz.5.1482 (13761): drop_caches: 2 [ 846.366530][ T30] audit: type=1400 audit(1764740287.905:8087): avc: denied { search } for pid=13755 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.471418][ T6914] usb 3-1: USB disconnect, device number 22 [ 846.536839][ T30] audit: type=1400 audit(1764740287.914:8088): avc: denied { create } for pid=13754 comm="syz.5.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 846.619656][T13759] netlink: 'syz.8.1481': attribute type 1 has an invalid length. [ 846.644743][ T30] audit: type=1400 audit(1764740288.026:8089): avc: denied { read write } for pid=13751 comm="syz.8.1481" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 846.737128][T13762] gretap1: entered allmulticast mode [ 846.745710][T13762] bond1: (slave gretap1): making interface the new active one [ 846.755412][T13762] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 846.786837][ T30] audit: type=1400 audit(1764740288.026:8090): avc: denied { open } for pid=13751 comm="syz.8.1481" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 846.835445][ T30] audit: type=1400 audit(1764740288.026:8091): avc: denied { ioctl } for pid=13751 comm="syz.8.1481" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 847.035087][ T30] audit: type=1400 audit(1764740288.054:8092): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=3170 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 847.179612][ T30] audit: type=1400 audit(1764740288.054:8093): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3170 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 848.621316][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1486'. [ 848.734167][T13795] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1488'. [ 848.881705][T13791] libceph: resolve '0..' (ret=-3): failed [ 851.180105][ T5820] Bluetooth: hci2: unexpected event for opcode 0x041b [ 851.502204][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 851.502223][ T30] audit: type=1400 audit(1764740292.937:8327): avc: denied { create } for pid=13828 comm="syz.8.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 851.594214][T13832] misc userio: Invalid payload size [ 851.611319][T13832] misc userio: Invalid payload size [ 851.707667][ T30] audit: type=1400 audit(1764740292.947:8328): avc: denied { shutdown } for pid=13828 comm="syz.8.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 851.727833][ T30] audit: type=1400 audit(1764740293.012:8329): avc: denied { append } for pid=13828 comm="syz.8.1494" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 851.750704][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.860072][ T30] audit: type=1400 audit(1764740293.021:8330): avc: denied { open } for pid=13828 comm="syz.8.1494" path="/dev/userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.136784][ T30] audit: type=1400 audit(1764740293.087:8331): avc: denied { shutdown } for pid=13828 comm="syz.8.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 852.340556][ T30] audit: type=1400 audit(1764740293.115:8332): avc: denied { read write } for pid=13828 comm="syz.8.1494" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 852.589258][ T30] audit: type=1400 audit(1764740293.115:8333): avc: denied { open } for pid=13828 comm="syz.8.1494" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 852.676999][T13841] XFS (nbd5): SB validate failed with error -5. [ 852.807969][ T60] wlan0: Trigger new scan to find an IBSS to join [ 852.820002][ T30] audit: type=1400 audit(1764740293.134:8334): avc: denied { allowed } for pid=13828 comm="syz.8.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 852.854664][ T30] audit: type=1400 audit(1764740293.134:8335): avc: denied { create } for pid=13828 comm="syz.8.1494" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 852.877249][ T30] audit: type=1400 audit(1764740293.134:8336): avc: denied { map } for pid=13828 comm="syz.8.1494" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 854.165360][ T60] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 854.351223][T12001] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 854.414110][T13862] syz.7.1499 (13862): drop_caches: 2 [ 854.449263][T13868] fuse: Bad value for 'fd' [ 854.645720][T12001] usb 3-1: Using ep0 maxpacket: 16 [ 854.653213][T12001] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 854.766567][T12001] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 854.776092][T12001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.784161][T12001] usb 3-1: Product: syz [ 854.797796][T12001] usb 3-1: Manufacturer: syz [ 854.805452][T12001] usb 3-1: SerialNumber: syz [ 855.259949][T12001] usb 3-1: config 0 descriptor?? [ 855.275501][T12001] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 855.301594][T12001] usb 3-1: Detected FT232R [ 855.564479][T12001] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 855.967927][T13070] IPVS: starting estimator thread 0... [ 856.138380][T13884] IPVS: using max 54 ests per chain, 129600 per kthread [ 856.976136][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 856.976154][ T30] audit: type=1400 audit(1764740297.839:8504): avc: denied { prog_load } for pid=13894 comm="syz.7.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 856.977895][T12001] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 857.004861][ T30] audit: type=1400 audit(1764740297.839:8505): avc: denied { bpf } for pid=13894 comm="syz.7.1508" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 857.076475][ T3913] wlan0: Trigger new scan to find an IBSS to join [ 857.254719][ T30] audit: type=1400 audit(1764740297.839:8506): avc: denied { perfmon } for pid=13894 comm="syz.7.1508" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 857.396051][ T30] audit: type=1400 audit(1764740298.063:8507): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.428240][T12001] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 857.894907][ T30] audit: type=1400 audit(1764740298.063:8508): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 858.006848][ T30] audit: type=1400 audit(1764740298.063:8509): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 858.112941][T12001] usb 3-1: USB disconnect, device number 23 [ 858.148156][ T30] audit: type=1400 audit(1764740298.250:8510): avc: denied { create } for pid=13890 comm="syz.8.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 858.173852][T12001] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 858.270632][ T30] audit: type=1400 audit(1764740298.250:8511): avc: denied { create } for pid=13890 comm="syz.8.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 858.293609][T12001] ftdi_sio 3-1:0.0: device disconnected [ 858.340661][T13915] syz.7.1510 (13915): drop_caches: 2 [ 858.482321][ T30] audit: type=1400 audit(1764740298.250:8512): avc: denied { create } for pid=13890 comm="syz.8.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 858.639037][ T30] audit: type=1400 audit(1764740298.250:8513): avc: denied { create } for pid=13890 comm="syz.8.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 858.917746][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.302742][T13938] GUP no longer grows the stack in syz.5.1511 (13938): 200000004000-20000000a000 (200000002000) [ 859.313923][T13938] CPU: 0 UID: 0 PID: 13938 Comm: syz.5.1511 Not tainted syzkaller #0 PREEMPT(full) [ 859.313968][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 859.313976][T13938] Call Trace: [ 859.313982][T13938] [ 859.313987][T13938] dump_stack_lvl+0x16c/0x1f0 [ 859.314005][T13938] gup_vma_lookup+0x1d2/0x220 [ 859.314021][T13938] __get_user_pages+0x241/0x33c0 [ 859.314045][T13938] ? __pfx___schedule+0x10/0x10 [ 859.314056][T13938] ? __pfx___get_user_pages+0x10/0x10 [ 859.314074][T13938] get_user_pages_remote+0x243/0xab0 [ 859.314090][T13938] ? __pfx_get_user_pages_remote+0x10/0x10 [ 859.314105][T13938] ? __access_remote_vm+0x502/0x850 [ 859.314117][T13938] __access_remote_vm+0x24d/0x850 [ 859.314130][T13938] ? do_raw_spin_lock+0x12c/0x2b0 [ 859.314148][T13938] ? __pfx___access_remote_vm+0x10/0x10 [ 859.314160][T13938] ? set_page_refcounted+0xbd/0x230 [ 859.314177][T13938] proc_pid_cmdline_read+0x4de/0x8e0 [ 859.314191][T13938] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 859.314203][T13938] ? rw_verify_area+0xcf/0x6c0 [ 859.314215][T13938] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 859.314225][T13938] vfs_readv+0x5c1/0x8b0 [ 859.314240][T13938] ? __pfx_vfs_readv+0x10/0x10 [ 859.314263][T13938] ? __fget_files+0x20e/0x3c0 [ 859.314282][T13938] ? do_preadv+0x1a6/0x270 [ 859.314293][T13938] do_preadv+0x1a6/0x270 [ 859.314304][T13938] ? __pfx_do_preadv+0x10/0x10 [ 859.314320][T13938] do_syscall_64+0xcd/0xf80 [ 859.314333][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.314344][T13938] RIP: 0033:0x7fc89778f749 [ 859.314354][T13938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.314365][T13938] RSP: 002b:00007fc8986d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 859.314379][T13938] RAX: ffffffffffffffda RBX: 00007fc8979e6090 RCX: 00007fc89778f749 [ 859.314385][T13938] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 859.314391][T13938] RBP: 00007fc897813f91 R08: 0000000000000000 R09: 0000000000000000 [ 859.314397][T13938] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 859.314403][T13938] R13: 00007fc8979e6128 R14: 00007fc8979e6090 R15: 00007ffd1639dd88 [ 859.314417][T13938] [ 860.608408][T13946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.983207][T13970] input: syz1 as /devices/virtual/input/input19 [ 862.202298][T13972] (syz.8.1516,13972,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 862.210237][T13972] (syz.8.1516,13972,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 862.217843][T13972] (syz.8.1516,13972,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 862.226741][T13972] (syz.8.1516,13972,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 862.363876][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 862.363895][ T30] audit: type=1400 audit(1764740302.834:8720): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3174 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 862.539137][T13966] netlink: 'syz.9.1518': attribute type 10 has an invalid length. [ 862.561335][ T30] audit: type=1400 audit(1764740302.871:8721): avc: denied { create } for pid=13954 comm="syz.8.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 862.611711][T13970] netlink: 'syz.2.1515': attribute type 1 has an invalid length. [ 862.672972][ T30] audit: type=1400 audit(1764740302.909:8722): avc: denied { getopt } for pid=13954 comm="syz.8.1516" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 862.718719][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 862.729199][ T30] audit: type=1400 audit(1764740302.927:8723): avc: denied { mounton } for pid=13954 comm="syz.8.1516" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 862.759198][ T30] audit: type=1400 audit(1764740302.965:8724): avc: denied { prog_load } for pid=13965 comm="syz.9.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 862.821027][T13976] syz.7.1517 (13976): drop_caches: 2 [ 863.001506][ T30] audit: type=1400 audit(1764740302.965:8725): avc: denied { bpf } for pid=13965 comm="syz.9.1518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.056245][T13950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 863.085164][T11546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 863.126235][T13950] audit: audit_lost=147 audit_rate_limit=0 audit_backlog_limit=64 [ 863.147513][T13941] block nbd5: shutting down sockets [ 863.334695][ T30] audit: type=1400 audit(1764740303.161:8726): avc: denied { search } for pid=13968 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.515365][T13977] gretap1: entered allmulticast mode [ 863.584959][T13977] bond2: (slave gretap1): making interface the new active one [ 863.720467][T13977] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 864.220054][T13966] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 864.424065][T13973] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 865.616028][T14011] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1522'. [ 865.805038][T14012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14012 comm=syz.7.1523 [ 866.007233][T14010] syz.5.1524 (14010): drop_caches: 2 [ 866.242111][T14020] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 866.412621][T14023] comedi comedi1: ni_at_a2150: a I/O base address must be specified [ 866.452301][T14023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1525'. [ 866.843245][T14020] overlayfs: missing 'lowerdir' [ 867.774610][ T30] kauditd_printk_skb: 351 callbacks suppressed [ 867.774626][ T30] audit: type=1400 audit(1764740308.184:9024): avc: denied { ioctl } for pid=14028 comm="syz.8.1528" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 867.857926][T14043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.069255][ T30] audit: type=1400 audit(1764740308.250:9025): avc: denied { search } for pid=14038 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.113199][T14049] netlink: 'syz.5.1530': attribute type 10 has an invalid length. [ 868.180305][ T30] audit: type=1400 audit(1764740308.250:9026): avc: denied { read } for pid=14038 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 868.236513][T14053] netlink: 'syz.5.1530': attribute type 10 has an invalid length. [ 868.244474][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1530'. [ 868.280900][ T30] audit: type=1400 audit(1764740308.250:9027): avc: denied { open } for pid=14038 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 868.425478][ T30] audit: type=1400 audit(1764740308.250:9028): avc: denied { getattr } for pid=14038 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 868.465173][ T30] audit: type=1400 audit(1764740308.287:9029): avc: denied { search } for pid=14002 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.636017][ T30] audit: type=1400 audit(1764740308.287:9030): avc: denied { search } for pid=14002 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.872472][ T30] audit: type=1400 audit(1764740308.287:9031): avc: denied { search } for pid=14002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.954887][ T30] audit: type=1400 audit(1764740308.287:9032): avc: denied { getattr } for pid=14002 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.141940][ T30] audit: type=1400 audit(1764740308.287:9033): avc: denied { add_name } for pid=14002 comm="dhcpcd-run-hook" name="resolv.conf.eth19.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.068353][T14065] fuse: Unknown parameter 'user_i00000000000000000000' [ 870.451383][T14049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.461962][T14049] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 870.471943][T14053] batadv0: entered promiscuous mode [ 870.485258][T14053] batadv0: entered allmulticast mode [ 870.512619][T14053] bond0: (slave batadv0): Releasing backup interface [ 870.526655][T14053] bridge0: port 3(batadv0) entered blocking state [ 870.533549][T14053] bridge0: port 3(batadv0) entered disabled state [ 870.682591][T14065] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.690390][T14065] netlink: 'syz.9.1532': attribute type 3 has an invalid length. [ 870.698658][T14065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 871.069248][ T3727] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 871.078856][ T3727] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 873.189490][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 873.189507][ T30] audit: type=1400 audit(1764740568.396:9211): avc: denied { create } for pid=14078 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 873.226329][ T30] audit: type=1400 audit(1764740568.396:9212): avc: denied { write } for pid=14078 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 873.261109][T14087] infiniband syz2: set down [ 873.265703][T14087] infiniband syz2: added ipvlan0 [ 873.890701][T14087] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 873.894957][T14087] infiniband syz2: Couldn't open port 1 [ 874.305942][ T30] audit: type=1400 audit(1764740568.668:9213): avc: denied { read } for pid=14078 comm="syz.5.1535" dev="nsfs" ino=4026534095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 874.329068][T14087] RDS/IB: syz2: added [ 874.333126][T14087] smc: adding ib device syz2 with port count 1 [ 874.339398][T14087] smc: ib device syz2 port 1 has no pnetid [ 874.444491][ T30] audit: type=1400 audit(1764740568.668:9214): avc: denied { open } for pid=14078 comm="syz.5.1535" path="net:[4026534095]" dev="nsfs" ino=4026534095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 875.099118][T14094] audit: audit_backlog=65 > audit_backlog_limit=64 [ 875.114144][T14094] audit: audit_lost=166 audit_rate_limit=0 audit_backlog_limit=64 [ 875.127326][ T30] audit: type=1400 audit(1764740568.677:9215): avc: denied { create } for pid=14078 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 875.148307][T14094] audit: backlog limit exceeded [ 875.213336][ T30] audit: type=1400 audit(1764740568.845:9216): avc: denied { prog_load } for pid=14078 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 875.223188][T14102] audit: audit_backlog=65 > audit_backlog_limit=64 [ 875.246607][T14089] netlink: 'syz.7.1537': attribute type 10 has an invalid length. [ 875.255083][T14089] bond0: (slave wlan1): Opening slave failed [ 875.572579][T14108] overlayfs: missing 'lowerdir' [ 875.683682][T14109] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 875.982481][T14110] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 875.991013][T14110] overlayfs: overlapping lowerdir path [ 877.224464][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 877.235253][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 877.244621][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 877.254851][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 877.264336][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 877.950208][T14120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1543'. [ 878.596934][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 878.597881][ T30] audit: type=1400 audit(1764740574.289:9406): avc: denied { prog_load } for pid=14126 comm="syz.8.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 880.415375][T14134] XFS (nbd7): SB validate failed with error -5. [ 880.477183][ T30] audit: type=1400 audit(1764740574.308:9407): avc: denied { bpf } for pid=14126 comm="syz.8.1545" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 880.508467][ T30] audit: type=1400 audit(1764740574.327:9408): avc: denied { perfmon } for pid=14126 comm="syz.8.1545" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 880.529923][ T30] audit: type=1400 audit(1764740574.336:9409): avc: denied { map_create } for pid=14131 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 880.552663][ T30] audit: type=1400 audit(1764740574.336:9410): avc: denied { map_read map_write } for pid=14131 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 880.599117][ T30] audit: type=1400 audit(1764740574.411:9411): avc: denied { prog_load } for pid=14131 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 880.826388][ T30] audit: type=1400 audit(1764740574.411:9412): avc: denied { bpf } for pid=14131 comm="syz.5.1547" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 881.895591][ T30] audit: type=1400 audit(1764740574.411:9413): avc: denied { perfmon } for pid=14131 comm="syz.5.1547" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 881.917274][ T30] audit: type=1400 audit(1764740574.411:9414): avc: denied { execmem } for pid=14126 comm="syz.8.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 882.067625][ T30] audit: type=1400 audit(1764740574.664:9415): avc: denied { mount } for pid=14131 comm="syz.5.1547" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 882.357330][T14173] random: crng reseeded on system resumption [ 882.413819][T14173] comedi comedi3: pcl818: I/O port conflict (0xffffffff80008001,16) [ 882.759091][T14178] syz.8.1552 (14178): drop_caches: 2 [ 883.556778][T14189] netlink: 'syz.5.1555': attribute type 10 has an invalid length. [ 883.676873][T14196] tmpfs: Bad value for 'mpol' [ 884.402687][T14202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.489897][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 884.489911][ T30] audit: type=1400 audit(1764740579.425:9664): avc: denied { ioctl } for pid=14195 comm="syz.2.1558" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 884.549513][T13065] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 884.739145][ T30] audit: type=1400 audit(1764740579.621:9665): avc: denied { mounton } for pid=14198 comm="syz.7.1557" path="/146/file1" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 885.308684][T13065] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.395811][T13065] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.398952][T14210] ceph: No mds server is up or the cluster is laggy [ 885.421633][ T38] libceph: connect (1)[c::]:6789 error -101 [ 885.428794][ T30] audit: type=1400 audit(1764740579.724:9666): avc: denied { write } for pid=14198 comm="syz.7.1557" name="tcp" dev="proc" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 885.435534][ T38] libceph: mon0 (1)[c::]:6789 connect error [ 885.452090][T13065] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 885.508993][T13065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.517070][T13065] usb 6-1: Product: syz [ 885.531769][ T30] audit: type=1400 audit(1764740579.808:9667): avc: denied { ioctl } for pid=14186 comm="syz.5.1555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 885.674201][T13065] usb 6-1: Manufacturer: syz [ 885.679551][T13065] usb 6-1: SerialNumber: syz [ 885.687095][ T30] audit: type=1400 audit(1764740579.855:9668): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 886.295578][ T30] audit: type=1400 audit(1764740579.855:9669): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 886.357950][ T30] audit: type=1400 audit(1764740579.855:9670): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 886.383535][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.404369][ T30] audit: type=1400 audit(1764740579.892:9671): avc: denied { ioctl } for pid=14186 comm="syz.5.1555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 886.588142][ T30] audit: type=1400 audit(1764740579.911:9672): avc: denied { read write } for pid=14207 comm="syz.2.1559" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 886.612504][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.690304][ T30] audit: type=1400 audit(1764740579.911:9673): avc: denied { open } for pid=14207 comm="syz.2.1559" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 887.091123][T14189] bond0: (slave wlan1): Opening slave failed [ 887.219346][T14220] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 887.348376][T13065] usb 6-1: 0:2 : does not exist [ 887.501485][T13065] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 888.462235][T13065] usb 6-1: USB disconnect, device number 11 [ 889.184762][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1566'. [ 889.715074][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.890292][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 889.890311][ T30] audit: type=1400 audit(1764740584.794:9776): avc: denied { execute } for pid=14233 comm="syz.8.1565" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 889.997512][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1568'. [ 890.028486][ T30] audit: type=1400 audit(1764740584.859:9777): avc: denied { read write } for pid=14250 comm="syz.7.1569" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 890.252204][ T30] audit: type=1400 audit(1764740584.859:9778): avc: denied { read open } for pid=14250 comm="syz.7.1569" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 890.394640][ T30] audit: type=1400 audit(1764740584.859:9779): avc: denied { write } for pid=14246 comm="syz.2.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 890.561400][T14254] netlink: 'syz.7.1569': attribute type 23 has an invalid length. [ 890.765697][ T30] audit: type=1400 audit(1764740584.906:9780): avc: denied { read } for pid=14246 comm="syz.2.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 890.881023][ T30] audit: type=1400 audit(1764740584.925:9781): avc: denied { read write } for pid=14238 comm="syz.5.1567" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 891.084198][ T30] audit: type=1400 audit(1764740584.925:9782): avc: denied { open } for pid=14238 comm="syz.5.1567" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 891.228670][ T30] audit: type=1400 audit(1764740584.934:9783): avc: denied { create } for pid=14238 comm="syz.5.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 891.382725][ T30] audit: type=1400 audit(1764740584.934:9784): avc: denied { connect } for pid=14238 comm="syz.5.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 891.422665][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1570'. [ 891.461422][T14264] siw: device registration error -23 [ 891.510613][ T30] audit: type=1400 audit(1764740584.934:9785): avc: denied { setopt } for pid=14238 comm="syz.5.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 892.483900][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 893.523596][T14293] can0: slcan on ttyS3. [ 893.553183][T14293] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 893.626850][ T38] IPVS: starting estimator thread 0... [ 893.805167][T14295] IPVS: using max 82 ests per chain, 196800 per kthread [ 894.190738][T14282] can0 (unregistered): slcan off ttyS3. [ 894.428587][T14300] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1579'. [ 895.571460][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 895.571476][ T30] audit: type=1400 audit(1764740590.182:9927): avc: denied { read write } for pid=11546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 895.635924][ T30] audit: type=1400 audit(1764740590.191:9928): avc: denied { open } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.103736][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1581'. [ 896.317521][ T30] audit: type=1400 audit(1764740590.191:9929): avc: denied { ioctl } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.515857][ T30] audit: type=1400 audit(1764740590.229:9930): avc: denied { create } for pid=14307 comm="syz.5.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 896.634515][ T30] audit: type=1400 audit(1764740590.238:9931): avc: denied { write } for pid=14307 comm="syz.5.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 896.732419][ T30] audit: type=1400 audit(1764740590.275:9932): avc: denied { create } for pid=14307 comm="syz.5.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 896.798670][ T30] audit: type=1400 audit(1764740590.275:9933): avc: denied { write } for pid=14307 comm="syz.5.1582" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 896.854196][ T30] audit: type=1400 audit(1764740590.285:9934): avc: denied { read } for pid=14307 comm="syz.5.1582" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 897.244526][T14310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14310 comm=syz.8.1581 [ 897.262798][T14310] netlink: 'syz.8.1581': attribute type 1 has an invalid length. [ 897.270884][T14310] netlink: 'syz.8.1581': attribute type 2 has an invalid length. [ 897.307207][T14310] bond2: entered allmulticast mode [ 897.312635][T14310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 897.341621][T14325] fuse: Bad value for 'fd' [ 897.356679][T14325] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1593'. [ 897.375372][ T30] audit: type=1400 audit(1764740590.285:9935): avc: denied { open } for pid=14307 comm="syz.5.1582" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 897.480624][ T30] audit: type=1400 audit(1764740590.453:9936): avc: denied { create } for pid=14307 comm="syz.5.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 897.622034][T14325] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1593'. [ 898.413664][T14343] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1586'. [ 901.026232][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 901.026248][ T30] audit: type=1400 audit(1764740595.280:10079): avc: denied { execmem } for pid=14355 comm="syz.8.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 901.320469][ T30] audit: type=1400 audit(1764740595.308:10080): avc: denied { create } for pid=14359 comm="syz.9.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 901.341635][ T30] audit: type=1400 audit(1764740595.458:10081): avc: denied { prog_load } for pid=14355 comm="syz.8.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 901.361456][ T30] audit: type=1400 audit(1764740595.458:10082): avc: denied { bpf } for pid=14355 comm="syz.8.1591" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 901.382623][ T30] audit: type=1400 audit(1764740595.458:10083): avc: denied { perfmon } for pid=14355 comm="syz.8.1591" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 901.407131][ T30] audit: type=1400 audit(1764740595.467:10084): avc: denied { prog_run } for pid=14355 comm="syz.8.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 901.426614][ T30] audit: type=1400 audit(1764740595.467:10085): avc: denied { create } for pid=14355 comm="syz.8.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 901.470930][ T30] audit: type=1400 audit(1764740595.476:10086): avc: denied { write } for pid=14355 comm="syz.8.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 901.512775][ T30] audit: type=1400 audit(1764740595.476:10087): avc: denied { read } for pid=14355 comm="syz.8.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 901.663809][ T30] audit: type=1400 audit(1764740595.476:10088): avc: denied { read } for pid=14355 comm="syz.8.1591" dev="nsfs" ino=4026532957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 901.859512][T14364] overlayfs: failed to clone lowerpath [ 901.906818][T14365] /dev/nullb0: Can't lookup blockdev [ 902.310288][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 902.317898][T14371] afs: Unknown parameter 'dynèô½6é³Ú' [ 902.446773][T14374] syz.5.1596 (14374): drop_caches: 2 [ 903.222016][T14386] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 904.462685][T14385] netlink: 'syz.7.1599': attribute type 13 has an invalid length. [ 906.101976][T14385] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.109537][T14385] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.922932][ T30] kauditd_printk_skb: 188 callbacks suppressed [ 906.922976][ T30] audit: type=1400 audit(1764740600.387:10277): avc: denied { create } for pid=14405 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 906.980077][ T30] audit: type=1400 audit(1764740600.396:10278): avc: denied { create } for pid=14405 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 907.011281][ T30] audit: type=1400 audit(1764740600.424:10279): avc: denied { create } for pid=14405 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 907.073071][ T30] audit: type=1400 audit(1764740600.434:10280): avc: denied { write } for pid=14405 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 907.126750][ T30] audit: type=1400 audit(1764740600.443:10281): avc: denied { read } for pid=14405 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 907.138001][T14408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.208762][ T30] audit: type=1400 audit(1764740600.462:10282): avc: denied { write } for pid=14405 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 907.254146][ T30] audit: type=1400 audit(1764740600.471:10283): avc: denied { prog_load } for pid=14405 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 907.329124][ T30] audit: type=1400 audit(1764740600.471:10284): avc: denied { bpf } for pid=14405 comm="syz.8.1605" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 907.409384][ T30] audit: type=1400 audit(1764740600.490:10285): avc: denied { ioctl } for pid=14405 comm="syz.8.1605" path="socket:[41336]" dev="sockfs" ino=41336 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 907.467020][ T30] audit: type=1400 audit(1764740600.499:10286): avc: denied { mount } for pid=14405 comm="syz.8.1605" name="/" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 907.632177][T14385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.645142][T14385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.412630][ T3727] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.421826][ T3727] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.431254][ T3727] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.600638][ T3727] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.324489][T14440] binder: 14425:14440 ioctl c018620c 200000000000 returned -1 [ 909.352967][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 910.129561][ T5937] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 910.419987][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.512957][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.541767][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 910.788448][ T5937] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 910.824157][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.874404][ T5937] usb 3-1: config 0 descriptor?? [ 911.531335][ T5937] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 912.357107][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 912.357125][ T30] audit: type=1400 audit(1764740605.794:10445): avc: denied { execmem } for pid=14462 comm="syz.8.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 912.475019][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1615'. [ 912.597073][ T30] audit: type=1400 audit(1764740605.915:10446): avc: denied { read write } for pid=9366 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 912.829299][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.984013][T14472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.030737][ T30] audit: type=1400 audit(1764740605.915:10447): avc: denied { open } for pid=9366 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 914.277778][ T5930] usb 3-1: USB disconnect, device number 24 [ 914.352047][ T30] audit: type=1400 audit(1764740605.915:10448): avc: denied { ioctl } for pid=9366 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 914.441277][ T30] audit: type=1400 audit(1764740605.962:10449): avc: denied { execmem } for pid=14467 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 914.627585][T14490] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1620'. [ 914.852006][ T30] audit: type=1400 audit(1764740605.990:10450): avc: denied { create } for pid=14462 comm="syz.8.1615" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 914.928899][ T30] audit: type=1400 audit(1764740606.046:10451): avc: denied { ioctl } for pid=14462 comm="syz.8.1615" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42472 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 915.050265][T14488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 915.056878][T14488] audit: audit_lost=185 audit_rate_limit=0 audit_backlog_limit=64 [ 915.065091][T14488] audit: backlog limit exceeded [ 915.084641][T14488] syz.7.1618 (14488): drop_caches: 2 [ 916.557606][T14509] IPv6: syztnl2: Disabled Multicast RS [ 917.723146][T14525] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1628'. [ 918.138805][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 918.138842][ T30] audit: type=1400 audit(1764740610.854:10621): avc: denied { map_create } for pid=14517 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 918.265051][ T30] audit: type=1400 audit(1764740610.864:10622): avc: denied { map_read map_write } for pid=14517 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 918.341285][T14527] IPVS: sh: FWM 3 0x00000003 - no destination available [ 918.349134][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 918.509563][ T5931] IPVS: starting estimator thread 0... [ 918.650006][T14529] IPVS: using max 58 ests per chain, 139200 per kthread [ 918.762476][ T30] audit: type=1400 audit(1764740610.873:10623): avc: denied { prog_load } for pid=14517 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 918.857210][ T30] audit: type=1400 audit(1764740610.873:10624): avc: denied { bpf } for pid=14517 comm="syz.2.1628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 918.912331][ T30] audit: type=1400 audit(1764740610.873:10625): avc: denied { perfmon } for pid=14517 comm="syz.2.1628" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 919.026472][ T30] audit: type=1400 audit(1764740610.882:10626): avc: denied { prog_run } for pid=14517 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 919.047702][ T30] audit: type=1400 audit(1764740610.938:10627): avc: denied { bpf } for pid=14517 comm="syz.2.1628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 919.068825][ T30] audit: type=1400 audit(1764740610.985:10628): avc: denied { mounton } for pid=14517 comm="syz.2.1628" path="/338/file1/file0" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 919.120786][ T30] audit: type=1400 audit(1764740611.013:10629): avc: denied { unlink } for pid=14517 comm="syz.2.1628" name="#3f" dev="tmpfs" ino=1883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 919.348525][T14540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 919.861355][T14542] ubi31: detaching mtd0 [ 920.563897][T14542] ubi31: mtd0 is detached [ 922.123214][T14558] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1635'. [ 922.870732][T14567] lo speed is unknown, defaulting to 1000 [ 923.503337][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 923.503357][ T30] audit: type=1400 audit(1764740616.261:10786): avc: denied { execmem } for pid=14570 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 923.644328][ T30] audit: type=1400 audit(1764740616.364:10787): avc: denied { prog_load } for pid=14571 comm="syz.8.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 924.017344][ T30] audit: type=1400 audit(1764740616.364:10788): avc: denied { bpf } for pid=14571 comm="syz.8.1640" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 924.038779][ T30] audit: type=1400 audit(1764740616.373:10789): avc: denied { append } for pid=14571 comm="syz.8.1640" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 924.077917][ T30] audit: type=1400 audit(1764740616.382:10790): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 924.402933][T14580] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=14580 comm=syz.8.1640 [ 925.087105][ T30] audit: type=1400 audit(1764740616.382:10791): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 925.112427][ T30] audit: type=1400 audit(1764740616.382:10792): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 925.217776][ T30] audit: type=1400 audit(1764740616.392:10793): avc: denied { prog_load } for pid=14571 comm="syz.8.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 925.434167][ T30] audit: type=1400 audit(1764740616.392:10794): avc: denied { bpf } for pid=14571 comm="syz.8.1640" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 925.480965][ T30] audit: type=1400 audit(1764740616.392:10795): avc: denied { perfmon } for pid=14571 comm="syz.8.1640" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 928.220439][T14611] syz.2.1646 (14611): drop_caches: 4 [ 928.866476][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 928.866493][ T30] audit: type=1400 audit(1764740621.321:10910): avc: denied { create } for pid=14607 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 928.927149][ T30] audit: type=1400 audit(1764740621.331:10911): avc: denied { bind } for pid=14607 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 928.963498][ T30] audit: type=1400 audit(1764740621.331:10912): avc: denied { setopt } for pid=14607 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 929.129570][T14621] xt_TCPMSS: Only works on TCP SYN packets [ 929.167429][ T30] audit: type=1400 audit(1764740621.331:10913): avc: denied { accept } for pid=14607 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 929.230696][ T30] audit: type=1400 audit(1764740621.331:10914): avc: denied { write } for pid=14607 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 929.318225][ T30] audit: type=1400 audit(1764740621.331:10915): avc: denied { read } for pid=14607 comm="syz.7.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 929.353241][T14625] netlink: 'syz.9.1650': attribute type 10 has an invalid length. [ 929.381232][T14625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.395676][T14625] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 929.429670][ T30] audit: type=1400 audit(1764740621.527:10916): avc: denied { create } for pid=14618 comm="syz.8.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 929.458668][ T30] audit: type=1400 audit(1764740621.536:10917): avc: denied { read } for pid=14618 comm="syz.8.1649" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 929.493697][T14625] netlink: 'syz.9.1650': attribute type 10 has an invalid length. [ 929.517661][T14625] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1650'. [ 929.530244][ T30] audit: type=1400 audit(1764740621.536:10918): avc: denied { open } for pid=14618 comm="syz.8.1649" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 929.628878][T14625] batadv0: entered promiscuous mode [ 929.634182][T14625] batadv0: entered allmulticast mode [ 929.702831][ T30] audit: type=1400 audit(1764740621.555:10919): avc: denied { create } for pid=14618 comm="syz.8.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 929.736856][T14625] bond0: (slave batadv0): Releasing backup interface [ 929.863118][T14625] bridge0: port 3(batadv0) entered blocking state [ 929.871382][T14625] bridge0: port 3(batadv0) entered disabled state [ 930.118987][T14629] binder: 14627:14629 ioctl 400c620e 200000000500 returned -22 [ 930.495231][ T6051] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 930.504480][ T6051] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 931.603648][T14638] fuse: Bad value for 'fd' [ 931.618696][T14638] SELinux: Context unconfined is not valid (left unmapped). [ 932.206290][T14647] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1653'. [ 932.782938][ T5903] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 933.276787][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.287592][ T5903] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 933.297402][ T5903] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 933.307276][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.580864][ T5903] usb 6-1: config 0 descriptor?? [ 934.246465][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 934.246476][ T30] audit: type=1400 audit(1764740626.354:11105): avc: denied { create } for pid=14663 comm="syz.9.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 934.295101][ T30] audit: type=1400 audit(1764740626.391:11106): avc: denied { prog_load } for pid=14663 comm="syz.9.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 934.347927][ T30] audit: type=1400 audit(1764740626.391:11107): avc: denied { bpf } for pid=14663 comm="syz.9.1659" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 934.371338][ T30] audit: type=1400 audit(1764740626.391:11108): avc: denied { perfmon } for pid=14663 comm="syz.9.1659" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 934.497888][ T30] audit: type=1400 audit(1764740626.588:11109): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 934.522241][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.614088][ T30] audit: type=1400 audit(1764740626.588:11110): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 934.681585][ T30] audit: type=1400 audit(1764740626.588:11111): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 934.859027][ T30] audit: type=1400 audit(1764740626.634:11112): avc: denied { read write } for pid=10137 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 934.897246][T14673] exFAT-fs (loop2): unable to read boot sector [ 934.944983][ T30] audit: type=1400 audit(1764740626.634:11113): avc: denied { open } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 934.969367][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.051195][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1662'. [ 935.641768][ T30] audit: type=1400 audit(1764740626.634:11114): avc: denied { ioctl } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 935.667971][T14673] exFAT-fs (loop2): failed to read boot sector [ 935.743488][T14673] exFAT-fs (loop2): failed to recognize exfat type [ 936.112528][ T5930] usb 6-1: USB disconnect, device number 12 [ 936.897106][T14690] libceph: resolve '0..' (ret=-3): failed [ 937.719311][T14696] XFS (nbd5): SB validate failed with error -5. [ 939.853932][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 939.853955][ T30] audit: type=1400 audit(1764740631.601:11295): avc: denied { create } for pid=14721 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 940.191419][ T30] audit: type=1400 audit(1764740631.676:11296): avc: denied { prog_load } for pid=14721 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 940.211023][ T30] audit: type=1400 audit(1764740631.695:11297): avc: denied { bpf } for pid=14721 comm="syz.5.1674" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 940.231756][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.330790][ T30] audit: type=1400 audit(1764740631.695:11298): avc: denied { perfmon } for pid=14721 comm="syz.5.1674" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 940.418644][ T30] audit: type=1400 audit(1764740631.714:11299): avc: denied { prog_run } for pid=14721 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 940.491810][ T30] audit: type=1400 audit(1764740631.798:11300): avc: denied { execmem } for pid=14721 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 940.573832][ T30] audit: type=1400 audit(1764740631.910:11301): avc: denied { read write } for pid=10137 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 940.695458][ T30] audit: type=1400 audit(1764740631.910:11302): avc: denied { open } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 940.719844][ T30] audit: type=1400 audit(1764740631.910:11303): avc: denied { ioctl } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 940.985411][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 941.012073][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 941.767853][ T30] audit: type=1400 audit(1764740631.985:11304): avc: denied { create } for pid=14721 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 942.165530][T14740] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1676'. [ 944.748776][T14769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=14769 comm=syz.7.1685 [ 945.228886][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 945.228903][ T30] audit: type=1400 audit(1764740636.016:11430): avc: denied { create } for pid=14760 comm="syz.9.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 945.796595][ T30] audit: type=1400 audit(1764740636.016:11431): avc: denied { execmem } for pid=14760 comm="syz.9.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 945.857483][ T30] audit: type=1400 audit(1764740636.138:11432): avc: denied { write } for pid=14761 comm="syz.7.1685" name="ptype" dev="proc" ino=4026533432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 945.974866][ T30] audit: type=1400 audit(1764740636.213:11433): avc: denied { create } for pid=14761 comm="syz.7.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 946.032321][ T30] audit: type=1400 audit(1764740636.241:11434): avc: denied { write } for pid=14761 comm="syz.7.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 946.149508][ T30] audit: type=1400 audit(1764740636.250:11435): avc: denied { read } for pid=14761 comm="syz.7.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 946.226250][ T30] audit: type=1400 audit(1764740636.260:11436): avc: denied { ioctl } for pid=14761 comm="syz.7.1685" path="socket:[43133]" dev="sockfs" ino=43133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 946.312205][ T30] audit: type=1400 audit(1764740636.699:11437): avc: denied { read } for pid=14763 comm="syz.2.1686" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 946.391189][ T30] audit: type=1400 audit(1764740636.699:11438): avc: denied { open } for pid=14763 comm="syz.2.1686" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 946.598261][ T30] audit: type=1400 audit(1764740636.727:11439): avc: denied { create } for pid=14760 comm="syz.9.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 947.474570][T14791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 947.773548][T14789] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1 [ 948.150165][T14798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1692'. [ 949.610980][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 950.098867][T14815] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1697'. [ 950.585357][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 950.585371][ T30] audit: type=1400 audit(1764740641.638:11594): avc: denied { prog_load } for pid=14805 comm="syz.5.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 950.873889][ T30] audit: type=1400 audit(1764740641.638:11595): avc: denied { bpf } for pid=14805 comm="syz.5.1695" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 950.992109][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.339514][ T30] audit: type=1400 audit(1764740641.666:11596): avc: denied { prog_load } for pid=14805 comm="syz.5.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 951.359022][ T30] audit: type=1400 audit(1764740641.666:11597): avc: denied { perfmon } for pid=14805 comm="syz.5.1695" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 951.587417][ T30] audit: type=1400 audit(1764740641.797:11598): avc: denied { create } for pid=14821 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 951.731046][ T30] audit: type=1400 audit(1764740641.797:11599): avc: denied { bind } for pid=14821 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 951.806287][ T30] audit: type=1400 audit(1764740641.797:11600): avc: denied { accept } for pid=14821 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 951.877867][ T30] audit: type=1400 audit(1764740641.797:11601): avc: denied { setopt } for pid=14821 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 951.946901][T14832] qnx4: no qnx4 filesystem (no root dir). [ 952.061600][ T30] audit: type=1400 audit(1764740641.797:11602): avc: denied { write } for pid=14821 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 952.159135][ T30] audit: type=1400 audit(1764740641.797:11603): avc: denied { create } for pid=14821 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 955.989080][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 955.989096][ T30] audit: type=1400 audit(1764740646.689:11721): avc: denied { read write } for pid=14874 comm="syz.7.1710" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 956.050854][ T30] audit: type=1400 audit(1764740646.755:11722): avc: denied { read write open } for pid=14874 comm="syz.7.1710" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 956.099761][ T30] audit: type=1400 audit(1764740646.774:11723): avc: denied { ioctl } for pid=14874 comm="syz.7.1710" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 956.289607][ T30] audit: type=1400 audit(1764740646.774:11724): avc: denied { read write } for pid=14874 comm="syz.7.1710" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 956.504106][ T30] audit: type=1400 audit(1764740646.774:11725): avc: denied { open } for pid=14874 comm="syz.7.1710" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 956.674018][T14878] XFS (nbd7): SB validate failed with error -5. [ 956.762453][ T30] audit: type=1400 audit(1764740646.783:11726): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 957.052075][ T30] audit: type=1400 audit(1764740646.783:11727): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 957.268658][ T30] audit: type=1400 audit(1764740646.783:11728): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 957.515189][T14893] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1712'. [ 957.929301][ T30] audit: type=1400 audit(1764740646.839:11729): avc: denied { create } for pid=14874 comm="syz.7.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 957.950681][ T30] audit: type=1400 audit(1764740646.839:11730): avc: denied { create } for pid=14874 comm="syz.7.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 958.270409][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.646829][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1717'. [ 961.662516][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 961.662533][ T30] audit: type=1400 audit(1764740651.900:11852): avc: denied { execmem } for pid=14915 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 961.691377][ T30] audit: type=1400 audit(1764740651.900:11853): avc: denied { write } for pid=14918 comm="syz.8.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 961.738549][ T30] audit: type=1400 audit(1764740651.909:11854): avc: denied { create } for pid=14918 comm="syz.8.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 961.764381][ T30] audit: type=1400 audit(1764740651.909:11855): avc: denied { read write } for pid=14918 comm="syz.8.1719" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 962.767614][ T30] audit: type=1400 audit(1764740651.909:11856): avc: denied { open } for pid=14918 comm="syz.8.1719" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 962.803738][ T30] audit: type=1400 audit(1764740651.909:11857): avc: denied { ioctl } for pid=14918 comm="syz.8.1719" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 962.875634][ T30] audit: type=1400 audit(1764740651.909:11858): avc: denied { write } for pid=14918 comm="syz.8.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 962.891948][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1723'. [ 962.911456][ T30] audit: type=1400 audit(1764740651.965:11859): avc: denied { map_create } for pid=14918 comm="syz.8.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 962.934947][ T30] audit: type=1400 audit(1764740651.965:11860): avc: denied { prog_load } for pid=14918 comm="syz.8.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 962.971667][ T30] audit: type=1400 audit(1764740651.965:11861): avc: denied { bpf } for pid=14918 comm="syz.8.1719" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 963.075481][T14939] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1725'. [ 963.745834][T14952] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1728'. [ 964.370889][T14956] XFS (nbd2): SB validate failed with error -5. [ 967.191203][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 967.191218][ T30] audit: type=1400 audit(1764740657.175:12030): avc: denied { read write } for pid=14978 comm="syz.7.1732" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 967.418939][ T30] audit: type=1400 audit(1764740657.213:12031): avc: denied { allowed } for pid=14978 comm="syz.7.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 967.468560][ T30] audit: type=1400 audit(1764740657.213:12032): avc: denied { create } for pid=14978 comm="syz.7.1732" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 967.573030][ T30] audit: type=1400 audit(1764740657.213:12033): avc: denied { read write open } for pid=14978 comm="syz.7.1732" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 967.632548][ T30] audit: type=1400 audit(1764740657.231:12034): avc: denied { map } for pid=14978 comm="syz.7.1732" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 967.664863][ T30] audit: type=1400 audit(1764740657.231:12035): avc: denied { read write } for pid=14978 comm="syz.7.1732" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 967.695586][ T30] audit: type=1400 audit(1764740657.353:12036): avc: denied { read write } for pid=11546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 967.720094][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.726648][ T30] audit: type=1400 audit(1764740657.353:12037): avc: denied { open } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 968.123713][ T30] audit: type=1400 audit(1764740657.353:12038): avc: denied { ioctl } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 968.149557][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.166805][ T30] audit: type=1400 audit(1764740657.521:12039): avc: denied { create } for pid=14978 comm="syz.7.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 970.479733][T14987] evm: overlay not supported [ 970.562975][T15009] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1740'. [ 972.031260][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1743'. [ 972.745010][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 972.745025][ T30] audit: type=1400 audit(1764740662.367:12244): avc: denied { setopt } for pid=15031 comm="syz.8.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 972.906249][ T30] audit: type=1400 audit(1764740662.367:12245): avc: denied { accept } for pid=15031 comm="syz.8.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 972.953289][ T30] audit: type=1400 audit(1764740662.451:12246): avc: denied { create } for pid=15027 comm="syz.7.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 973.100772][ T30] audit: type=1400 audit(1764740662.451:12247): avc: denied { setopt } for pid=15027 comm="syz.7.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 973.163093][ T30] audit: type=1400 audit(1764740662.451:12248): avc: denied { accept } for pid=15027 comm="syz.7.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 973.246584][ T30] audit: type=1400 audit(1764740662.657:12249): avc: denied { read write } for pid=11546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 973.333952][ T30] audit: type=1400 audit(1764740662.657:12250): avc: denied { open } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 973.438380][ T30] audit: type=1400 audit(1764740662.657:12251): avc: denied { ioctl } for pid=11546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 973.491000][ T30] audit: type=1400 audit(1764740662.778:12252): avc: denied { read write } for pid=10137 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 973.572235][T15047] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1 [ 973.663840][ T30] audit: type=1400 audit(1764740662.778:12253): avc: denied { open } for pid=10137 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 974.852563][T15068] xt_l2tp: v2 sid > 0xffff: 117440512 [ 974.871689][T15068] netlink: 'syz.9.1753': attribute type 10 has an invalid length. [ 974.879645][T15068] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1753'. [ 976.308843][T15080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 976.368522][T15082] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1754'. [ 976.509611][T15080] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 976.570906][T15080] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.579695][T15080] bond0: (slave team0): Enslaving as an active interface with an up link [ 977.018056][T15078] delete_channel: no stack [ 977.150796][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 977.850470][T15096] loop6: detected capacity change from 0 to 524287487 [ 977.865371][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 977.969591][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 978.132069][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 978.132090][ T30] audit: type=1400 audit(1764740667.371:12431): avc: denied { create } for pid=15099 comm="syz.2.1761" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 978.315798][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 978.379997][ T30] audit: type=1400 audit(1764740667.380:12432): avc: denied { read write } for pid=15099 comm="syz.2.1761" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 978.409308][ T30] audit: type=1400 audit(1764740667.380:12433): avc: denied { open } for pid=15099 comm="syz.2.1761" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 978.561400][ T30] audit: type=1400 audit(1764740667.380:12434): avc: denied { create } for pid=15099 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 978.614319][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 978.635147][ T30] audit: type=1400 audit(1764740667.380:12435): avc: denied { bind } for pid=15099 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 978.979898][ T30] audit: type=1400 audit(1764740667.380:12436): avc: denied { setopt } for pid=15099 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 979.170910][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.189759][ T30] audit: type=1400 audit(1764740667.380:12437): avc: denied { accept } for pid=15099 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 979.618310][ T30] audit: type=1400 audit(1764740667.380:12438): avc: denied { write } for pid=15099 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 979.638005][ T30] audit: type=1400 audit(1764740667.380:12439): avc: denied { read } for pid=15099 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 979.658399][ T30] audit: type=1400 audit(1764740668.073:12440): avc: denied { read write } for pid=11546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 979.779203][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.816294][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.839019][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.857204][T15096] ldm_validate_partition_table(): Disk read failed. [ 979.867356][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.875615][T15096] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.883883][T15096] Dev loop6: unable to read RDB block 0 [ 979.890348][T15096] loop6: unable to read partition table [ 979.897133][T15096] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 980.407647][T15123] hfsplus: unable to find HFS+ superblock [ 980.835169][T15132] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1765'. [ 982.313759][T15143] netlink: zone id is out of range [ 982.319153][T15143] netlink: zone id is out of range [ 982.327709][T15143] netlink: zone id is out of range [ 982.333067][T15143] netlink: get zone limit has 4 unknown bytes [ 982.424969][T15143] ================================================================== [ 982.433056][T15143] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 982.441016][T15143] Read of size 8 at addr ffff88807b12f830 by task syz.7.1768/15143 [ 982.448877][T15143] [ 982.451178][T15143] CPU: 0 UID: 0 PID: 15143 Comm: syz.7.1768 Not tainted syzkaller #0 PREEMPT(full) [ 982.451193][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 982.451199][T15143] Call Trace: [ 982.451204][T15143] [ 982.451209][T15143] dump_stack_lvl+0x116/0x1f0 [ 982.451227][T15143] print_report+0xcd/0x630 [ 982.451241][T15143] ? __virt_addr_valid+0x81/0x610 [ 982.451252][T15143] ? __phys_addr+0xe8/0x180 [ 982.451263][T15143] ? sysfs_remove_file_ns+0x63/0x70 [ 982.451275][T15143] kasan_report+0xe0/0x110 [ 982.451287][T15143] ? sysfs_remove_file_ns+0x63/0x70 [ 982.451299][T15143] sysfs_remove_file_ns+0x63/0x70 [ 982.451309][T15143] driver_remove_file+0x4a/0x60 [ 982.451327][T15143] bus_remove_driver+0x224/0x2c0 [ 982.451341][T15143] driver_unregister+0x76/0xb0 [ 982.451358][T15143] comedi_device_detach_locked+0x12f/0xa50 [ 982.451377][T15143] do_devconfig_ioctl+0x555/0x710 [ 982.451391][T15143] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 982.451410][T15143] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 982.451427][T15143] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 982.451443][T15143] ? do_vfs_ioctl+0xca/0x14f0 [ 982.451454][T15143] ? do_vfs_ioctl+0xdb7/0x14f0 [ 982.451465][T15143] ? do_vfs_ioctl+0x128/0x14f0 [ 982.451476][T15143] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 982.451487][T15143] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 982.451505][T15143] ? lockdep_hardirqs_on+0x7c/0x110 [ 982.451518][T15143] ? hook_file_ioctl_common+0x145/0x410 [ 982.451531][T15143] ? selinux_file_ioctl+0x180/0x270 [ 982.451545][T15143] ? selinux_file_ioctl+0xb4/0x270 [ 982.451561][T15143] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 982.451576][T15143] __x64_sys_ioctl+0x18e/0x210 [ 982.451588][T15143] do_syscall_64+0xcd/0xf80 [ 982.451611][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.451622][T15143] RIP: 0033:0x7fd2c458f749 [ 982.451633][T15143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.451645][T15143] RSP: 002b:00007fd2c27f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.451656][T15143] RAX: ffffffffffffffda RBX: 00007fd2c47e6090 RCX: 00007fd2c458f749 [ 982.451664][T15143] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 982.451671][T15143] RBP: 00007fd2c4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 982.451678][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.451684][T15143] R13: 00007fd2c47e6128 R14: 00007fd2c47e6090 R15: 00007ffca88906a8 [ 982.451694][T15143] [ 982.451698][T15143] [ 982.702694][T15143] Allocated by task 5985: [ 982.706997][T15143] kasan_save_stack+0x33/0x60 [ 982.711661][T15143] kasan_save_track+0x14/0x30 [ 982.716337][T15143] __kasan_kmalloc+0xaa/0xb0 [ 982.720913][T15143] __kmalloc_noprof+0x32f/0x870 [ 982.725747][T15143] security_inode_init_security+0x13f/0x390 [ 982.731623][T15143] shmem_mknod+0x22e/0x450 [ 982.736020][T15143] lookup_open.isra.0+0x12dc/0x1780 [ 982.741196][T15143] path_openat+0xa95/0x3140 [ 982.745683][T15143] do_filp_open+0x20b/0x470 [ 982.750168][T15143] do_sys_openat2+0x11f/0x280 [ 982.754831][T15143] __x64_sys_openat+0x174/0x210 [ 982.759660][T15143] do_syscall_64+0xcd/0xf80 [ 982.764142][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.770017][T15143] [ 982.772320][T15143] Freed by task 5985: [ 982.776293][T15143] kasan_save_stack+0x33/0x60 [ 982.780949][T15143] kasan_save_track+0x14/0x30 [ 982.785608][T15143] __kasan_save_free_info+0x3b/0x60 [ 982.790791][T15143] __kasan_slab_free+0x5f/0x80 [ 982.795534][T15143] kfree+0x29e/0x710 [ 982.799414][T15143] security_inode_init_security+0x2eb/0x390 [ 982.805290][T15143] shmem_mknod+0x22e/0x450 [ 982.809783][T15143] lookup_open.isra.0+0x12dc/0x1780 [ 982.814959][T15143] path_openat+0xa95/0x3140 [ 982.819444][T15143] do_filp_open+0x20b/0x470 [ 982.823928][T15143] do_sys_openat2+0x11f/0x280 [ 982.828848][T15143] __x64_sys_openat+0x174/0x210 [ 982.833672][T15143] do_syscall_64+0xcd/0xf80 [ 982.838152][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.844027][T15143] [ 982.846330][T15143] The buggy address belongs to the object at ffff88807b12f800 [ 982.846330][T15143] which belongs to the cache kmalloc-256 of size 256 [ 982.860360][T15143] The buggy address is located 48 bytes inside of [ 982.860360][T15143] freed 256-byte region [ffff88807b12f800, ffff88807b12f900) [ 982.874048][T15143] [ 982.876355][T15143] The buggy address belongs to the physical page: [ 982.882759][T15143] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b12e [ 982.891499][T15143] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 982.899972][T15143] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 982.907493][T15143] page_type: f5(slab) [ 982.911456][T15143] raw: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 982.920031][T15143] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 982.928689][T15143] head: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 982.937343][T15143] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 982.945993][T15143] head: 00fff00000000001 ffffea0001ec4b81 00000000ffffffff 00000000ffffffff [ 982.954646][T15143] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 982.963302][T15143] page dumped because: kasan: bad access detected [ 982.969691][T15143] page_owner tracks the page as allocated [ 982.975393][T15143] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5822, tgid 5822 (syz-executor), ts 63789790901, free_ts 63777609269 [ 982.996821][T15143] post_alloc_hook+0x1af/0x220 [ 983.001572][T15143] get_page_from_freelist+0xd0b/0x31a0 [ 983.007025][T15143] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 983.012908][T15143] alloc_pages_mpol+0x1fb/0x550 [ 983.017745][T15143] new_slab+0x24a/0x360 [ 983.021892][T15143] ___slab_alloc+0xee7/0x1cd0 [ 983.026551][T15143] __slab_alloc.constprop.0+0x63/0x110 [ 983.031996][T15143] __kmalloc_noprof+0x501/0x870 [ 983.036831][T15143] fib_create_info+0x53f/0x4680 [ 983.041660][T15143] fib_table_insert+0x177/0x1c40 [ 983.046577][T15143] fib_magic+0x4d4/0x5c0 [ 983.050806][T15143] fib_add_ifaddr+0x16d/0x580 [ 983.055467][T15143] fib_netdev_event+0x38a/0x710 [ 983.060315][T15143] notifier_call_chain+0xbc/0x3e0 [ 983.065357][T15143] call_netdevice_notifiers_info+0xbe/0x110 [ 983.071251][T15143] __dev_notify_flags+0x12c/0x2e0 [ 983.076262][T15143] page last free pid 5817 tgid 5817 stack trace: [ 983.082567][T15143] __free_frozen_pages+0x7df/0x1160 [ 983.087751][T15143] rcu_core+0x79c/0x1500 [ 983.091971][T15143] handle_softirqs+0x219/0x8b0 [ 983.096722][T15143] __irq_exit_rcu+0x109/0x170 [ 983.101412][T15143] irq_exit_rcu+0x9/0x30 [ 983.105659][T15143] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 983.111274][T15143] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 983.117239][T15143] [ 983.119628][T15143] Memory state around the buggy address: [ 983.125234][T15143] ffff88807b12f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 983.133273][T15143] ffff88807b12f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 983.141397][T15143] >ffff88807b12f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 983.149442][T15143] ^ [ 983.155048][T15143] ffff88807b12f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 983.163093][T15143] ffff88807b12f900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 983.171127][T15143] ================================================================== [ 983.179277][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.189282][T15143] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 983.196513][T15143] CPU: 0 UID: 0 PID: 15143 Comm: syz.7.1768 Not tainted syzkaller #0 PREEMPT(full) [ 983.205977][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 983.216034][T15143] Call Trace: [ 983.219316][T15143] [ 983.222239][T15143] dump_stack_lvl+0x3d/0x1f0 [ 983.226831][T15143] vpanic+0x640/0x6f0 [ 983.230811][T15143] panic+0xca/0xd0 [ 983.234530][T15143] ? __pfx_panic+0x10/0x10 [ 983.238945][T15143] ? sysfs_remove_file_ns+0x63/0x70 [ 983.244142][T15143] ? preempt_schedule_common+0x44/0xc0 [ 983.249631][T15143] ? preempt_schedule_thunk+0x16/0x30 [ 983.255017][T15143] check_panic_on_warn+0xab/0xb0 [ 983.259952][T15143] end_report+0x107/0x160 [ 983.264266][T15143] kasan_report+0xee/0x110 [ 983.268669][T15143] ? sysfs_remove_file_ns+0x63/0x70 [ 983.273850][T15143] sysfs_remove_file_ns+0x63/0x70 [ 983.278856][T15143] driver_remove_file+0x4a/0x60 [ 983.283693][T15143] bus_remove_driver+0x224/0x2c0 [ 983.288613][T15143] driver_unregister+0x76/0xb0 [ 983.293361][T15143] comedi_device_detach_locked+0x12f/0xa50 [ 983.299244][T15143] do_devconfig_ioctl+0x555/0x710 [ 983.304251][T15143] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 983.309785][T15143] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 983.315244][T15143] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 983.321068][T15143] ? do_vfs_ioctl+0xca/0x14f0 [ 983.325740][T15143] ? do_vfs_ioctl+0xdb7/0x14f0 [ 983.330494][T15143] ? do_vfs_ioctl+0x128/0x14f0 [ 983.335243][T15143] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 983.340251][T15143] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 983.347098][T15143] ? lockdep_hardirqs_on+0x7c/0x110 [ 983.352283][T15143] ? hook_file_ioctl_common+0x145/0x410 [ 983.357813][T15143] ? selinux_file_ioctl+0x180/0x270 [ 983.363006][T15143] ? selinux_file_ioctl+0xb4/0x270 [ 983.368105][T15143] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 983.373918][T15143] __x64_sys_ioctl+0x18e/0x210 [ 983.378669][T15143] do_syscall_64+0xcd/0xf80 [ 983.383155][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.389028][T15143] RIP: 0033:0x7fd2c458f749 [ 983.393433][T15143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.413036][T15143] RSP: 002b:00007fd2c27f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 983.421463][T15143] RAX: ffffffffffffffda RBX: 00007fd2c47e6090 RCX: 00007fd2c458f749 [ 983.429421][T15143] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 983.437374][T15143] RBP: 00007fd2c4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 983.445337][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.453329][T15143] R13: 00007fd2c47e6128 R14: 00007fd2c47e6090 R15: 00007ffca88906a8 [ 983.461290][T15143] [ 983.464676][T15143] Kernel Offset: disabled [ 983.469078][T15143] Rebooting in 86400 seconds..