last executing test programs: 12m11.241064165s ago: executing program 32 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r1, 0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r2, &(0x7f0000000d00)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c744240077dd0000c74424027fbe0000c7442406000000000f011c2466460f3881460a0f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ba4100ed40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@local, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x2, 0x2, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10m52.811954927s ago: executing program 0 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') fcntl$setpipe(r0, 0x11, 0xffffffff80000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)="8008", 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='4\n', 0x2) close(r3) write(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='6', 0x1) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x8000, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) 10m49.999947955s ago: executing program 0 (id=129): r0 = syz_open_procfs(0x0, 0x0) r1 = syz_usb_connect(0x3, 0x50, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xcd) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x4, 0x3) 10m45.967345724s ago: executing program 0 (id=132): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) open$dir(0x0, 0x400, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$nl_generic(r4, 0x0, 0x8010) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x8}, {0x9, 0xc8}}}}, 0x9) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m40.318358062s ago: executing program 0 (id=138): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x2, 0x0, 0xfd8e, 0x7}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(r1, 0x85, 0x7d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000090a010400000000000000000a0000040900020073797a3100000000c617000b3f6983de8608000a40fffffffc08000540000080090001006c6173740000000004000280140001800c000100636f756e746572000400028014000000110001000000"], 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) close(0x3) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000480)={{[0x1, 0xa86, 0x3, 0x200]}, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800009) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00001ae000/0x2000)=nil, 0x2000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 10m35.357627852s ago: executing program 0 (id=142): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r1, r0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x2b8, 0x2b8, 0xfeffffff, 0x370, 0x2b8, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x924, 0x2, 0x0, 'syz1\x00'}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'gre0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0x4, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) syz_open_dev$sndctrl(0x0, 0x1, 0x280) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 10m34.29666587s ago: executing program 0 (id=144): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c0002800500"], 0xc8}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) recvmsg$unix(r0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f0000000100)) close(0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xe, 0xb}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) kexec_load(0x3, 0x0, 0x0, 0x0) shutdown(r5, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 10m29.696261844s ago: executing program 1 (id=148): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) userfaultfd(0x80801) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = socket(0x2b, 0x800, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, 0x0, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) alarm(0x1) alarm(0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x5, 0x0, 0x205, 0x0, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x480000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) 10m26.106649663s ago: executing program 1 (id=152): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "4fe846155ed9"}}}}}}}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x1000000}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r6, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[], 0x94}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc98}, 0x94) 10m21.502771145s ago: executing program 1 (id=156): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r1, r0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x2b8, 0x2b8, 0xfeffffff, 0x370, 0x2b8, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x924, 0x2, 0x0, 'syz1\x00'}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'gre0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0x4, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) syz_open_dev$sndctrl(0x0, 0x1, 0x280) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 10m20.6262744s ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r0, 0x0, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x10400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000001100"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000014) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) write(r0, &(0x7f0000000280)='disconnect 11:aa:aa:aa:aa:aa 0\n', 0x1f) 10m18.93674923s ago: executing program 33 (id=144): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c0002800500"], 0xc8}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) recvmsg$unix(r0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f0000000100)) close(0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xe, 0xb}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) kexec_load(0x3, 0x0, 0x0, 0x0) shutdown(r5, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 10m0.994945057s ago: executing program 1 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x1, &(0x7f0000000280)='\\\':\x00') openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet(r1, &(0x7f00000028c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r3, 0x1) r4 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000340)={0x2, r4, 0x80000}) 9m58.004312747s ago: executing program 1 (id=177): unshare(0x42000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007006e61740014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setitimer(0x2, 0x0, 0x0) mkdir(0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r3, 0x14b3, 0xeeb8, 0x16, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 9m42.800142453s ago: executing program 34 (id=177): unshare(0x42000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007006e61740014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setitimer(0x2, 0x0, 0x0) mkdir(0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r3, 0x14b3, 0xeeb8, 0x16, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 9m13.814248165s ago: executing program 4 (id=204): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100060808004149004001040800", 0x58}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"b6bd46c0e6ae7d646ab06185fc623085", 0x0, 0x0, {0x5, 0x5}, {0x1, 0x10001}, 0x10000, [0x80000000, 0x8000000000000001, 0x7, 0xffffffffffffffff, 0xfffffffffffffffb, 0x3ff, 0x100000001, 0x2, 0xfff, 0x7b, 0x3, 0x5, 0xbdd4, 0x7, 0x0, 0x8]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000540)={{r1}, r5, 0x1e, @inherit={0x60, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000003000000000000000100000000000000020000000000000004000000000000000700000000000000020000000000000147540000000000000400000000ff0500000000415960b8df0a59c1888142000000090000000000"]}, @subvolid=0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="fb640000", @ANYRES16=r7, @ANYBLOB="01000000000000000000100000001800018014000200766c616e30000000000000000000000005000b0002000000"], 0x34}}, 0x4044890) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000003, 0x11012, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r10) sendmsg$NET_DM_CMD_START(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r11, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r12 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r12, 0xc0445624, &(0x7f0000000040)={0xf0f026, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e6002000", 0x9, 0xbd6, 0xff, 0x2, 0x28}) 9m8.68848224s ago: executing program 4 (id=209): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4044044) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r8, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) 9m3.020567008s ago: executing program 4 (id=212): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x5961, 0x10000, 0x2, 0x4d}, &(0x7f0000000540), &(0x7f0000000400), &(0x7f0000000500)) socket(0x1d, 0x2, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) sched_setaffinity(r6, 0x47, &(0x7f0000000200)=0x7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000004d867a74"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 9m1.571989931s ago: executing program 4 (id=213): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00008c1000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x111102, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) 8m56.74864042s ago: executing program 4 (id=218): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xbd) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x126c3, 0xc) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x18cc0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000380), 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 8m54.934680827s ago: executing program 4 (id=219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x148, 0x1a, 0x633, 0x1, 0x25dfdbfd, {{@in=@empty, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in=@local, 0x0, 0x32}, @in=@empty, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x8000}, {0x1}, 0x50bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_drop_time={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x40040c0}, 0x200080d4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/19, 0x13}, {&(0x7f0000001540)=""/109, 0x6d}], 0x6}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="001509d17fb62e0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00001e0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r5, &(0x7f0000000240)={0x2, 0x0, @loopback, 0x5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="9b0cb39bf267ce9b5ddf3432ca97", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1469000) r8 = socket(0x10, 0x2, 0x0) userfaultfd(0x80001) getsockopt$sock_cred(r8, 0x1, 0x1c, &(0x7f0000002a80), &(0x7f0000cab000)=0xc) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 8m38.855156324s ago: executing program 35 (id=219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x148, 0x1a, 0x633, 0x1, 0x25dfdbfd, {{@in=@empty, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in=@local, 0x0, 0x32}, @in=@empty, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x8000}, {0x1}, 0x50bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_drop_time={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x40040c0}, 0x200080d4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/19, 0x13}, {&(0x7f0000001540)=""/109, 0x6d}], 0x6}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="001509d17fb62e0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00001e0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r5, &(0x7f0000000240)={0x2, 0x0, @loopback, 0x5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="9b0cb39bf267ce9b5ddf3432ca97", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1469000) r8 = socket(0x10, 0x2, 0x0) userfaultfd(0x80001) getsockopt$sock_cred(r8, 0x1, 0x1c, &(0x7f0000002a80), &(0x7f0000cab000)=0xc) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 7m44.746414221s ago: executing program 5 (id=278): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) sendfile(r10, r3, 0x0, 0x4000000053d2) 7m43.227354659s ago: executing program 5 (id=280): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000', @ANYRES16]) r2 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) fsetxattr(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x4, &(0x7f0000000440)=[{0x3, 0x0, 0x8, 0x7fff0000}, {0x3, 0x0, 0x10}, {0xe, 0x5, 0x20, 0x3ff}, {0x1000, 0x0, 0x8, 0x1ff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x282, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @loopback, 0x2}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @loopback}, &(0x7f0000000200)=0xc) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r7, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000010) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6a00000000181100fe8000000000000000000000000000aa4e1d4e200018907804000000f400000003000000000000001ca722141245a902ac51881a23dc78ad4f5d7870f17197b1a9dab9a6997eb562a4fd42b307ab875ae74483e3344500"/121], 0x0) 7m40.911035527s ago: executing program 8 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)}, 0x68) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000005c0), &(0x7f0000000580)=""/24}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000200)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1901, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x1, r4, r5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r7, &(0x7f0000000140), 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) 7m39.576002691s ago: executing program 5 (id=283): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007000000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x48) syz_emit_vhci(0x0, 0x14) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r6, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 7m39.431379823s ago: executing program 8 (id=285): r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000080000000000000"], 0x48) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x2a100) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(r3, 0x2, &(0x7f0000000240)={0x7089, 0x8}, &(0x7f0000000340)) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="210000000000000000000000000010000004", @ANYRESDEC=r3], 0x48) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), 0x0}, 0x20) 7m36.283551263s ago: executing program 5 (id=288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{0x0}], 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) 7m36.080365418s ago: executing program 8 (id=289): syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000340)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x2000, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x3ffffffffffffffd, 0x3) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000100)=""/127, 0x7f}, {0x0}], 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x8000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1000, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @mcast1}}}, 0x108) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) 7m32.559260308s ago: executing program 5 (id=291): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7m28.411556271s ago: executing program 5 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x40000) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x6}, 0xb) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r9, 0x111, 0x1, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m18.441450109s ago: executing program 36 (id=289): syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000340)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x2000, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x3ffffffffffffffd, 0x3) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000100)=""/127, 0x7f}, {0x0}], 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x8000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1000, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @mcast1}}}, 0x108) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) 7m11.458434032s ago: executing program 37 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x40000) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x6}, 0xb) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r9, 0x111, 0x1, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.703116129s ago: executing program 7 (id=781): syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x3, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 34.521041131s ago: executing program 7 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setns(0xffffffffffffffff, 0x64000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, 0x0, 0x0) listen(r6, 0xff) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r8, &(0x7f0000000340)='hist:', 0x5) 33.073404265s ago: executing program 7 (id=786): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 32.434642986s ago: executing program 7 (id=789): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@dev}, {@initdev}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000400)='rtdev=./loop0\x00') r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x1) fallocate(r5, 0x21, 0x4008, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0), 0x4) faccessat(r4, &(0x7f0000000140)='./file0\x00', 0xa0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) 31.252859487s ago: executing program 7 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x8, 0x4, 0x101, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x12, &(0x7f00000004c0)=@framed={{}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = syz_clone3(&(0x7f0000001180)={0x100240000, &(0x7f0000000100), &(0x7f0000000f80), &(0x7f0000000fc0), {0x7}, 0x0, 0x0, &(0x7f0000001040)=""/241, &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x3}, 0x58) r3 = getpgrp(r2) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() capget(0x0, &(0x7f0000000300)={0x8000, 0x1ff, 0x9, 0x1, 0xc, 0xd7}) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x80000000000003) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x20004004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d42", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) pread64(r0, &(0x7f0000000580)=""/96, 0x60, 0x10001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0xf1}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/121, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x54}, 0x23) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 28.844615671s ago: executing program 7 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='pstore\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x1, 0x1, 0x2000, 0x1000, &(0x7f000012d000/0x1000)=nil}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0, 0x8c}}, 0x4081) 18.993179623s ago: executing program 9 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) bind$xdp(r6, 0x0, 0x0) 17.368152817s ago: executing program 9 (id=812): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r1, r0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x2b8, 0x2b8, 0xfeffffff, 0x370, 0x2b8, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x924, 0x2, 0x0, 'syz1\x00'}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'gre0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0x4, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) syz_open_dev$sndctrl(0x0, 0x1, 0x280) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 17.334970388s ago: executing program 3 (id=814): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@dev}, {@initdev}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000400)='rtdev=./loop0\x00') r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x1) fallocate(r5, 0x21, 0x4008, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) faccessat(r4, &(0x7f0000000140)='./file0\x00', 0xa0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) 17.308140289s ago: executing program 6 (id=815): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x2e24, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x264, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x238, 0x2, [@m_connmark={0x13c, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x4d, 0x6, 0x1, 0x3ff}, 0x80}}]}, {0xed, 0x6, "f6f50e4f1209659002552e754117d02f6a15ff482c3c396f14a1f4ac27144e0c93e17a1024f3b75c46594d18f8d55845f2172099bba57e57aa1bfd7a277fc130e4bd9b6e419a497e4332ece0da1f0f4a2f2b270dd69379e6e706dd97c6343857be0c8a8de492f828efb2f6dcce47bbc145b1707da9f1fb56830774252588a187ecef0c9e7657235fc43a5eea9754bd2907977e13f7b6506311824636ba267c23556ec56793c72708a1ced9ed89e9e5b4830fdb2b84b25c28d60b3e42179d07e8c7c135e3ca7067087d65fe82416dc1b22141cc48d4ecbb67957af7432a61d87a8ba725e4251424a709"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xf8, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0xcd, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91f782136cdc0714b85775a04918ee4cc6888787bef8a7ea2ff8719f6ea958d1c3bf43b9dab1460884c3fd5343c0ff92e083c9c4643b86542ab19d54d274212f9a29de4e77dbd8df27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2b5c, 0x2, [@TCA_CGROUP_ACT={0x2b58, 0x1, [@m_pedit={0x2b54, 0xb, 0x0, 0x0, {{0xa}, {0x2b28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}, {0x6, 0xec4a, 0xff, 0xfffffffe, 0x7}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x60d1, 0x1, 0x1}, {0x5, 0x1, 0x4, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0xffffffff, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x2, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0xfffffffe, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x2, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x5, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x5, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xd0, 0x572, 0x3}, 0x7f, 0x2, [{0xfffffff6, 0x5, 0x7, 0x9, 0x2, 0xd}]}, [{0x8001, 0x3, 0x4, 0x6, 0x9, 0x5}, {0x0, 0x2, 0x40, 0x7e2, 0xfffffffd, 0x7fffffff}, {0x8, 0x1, 0x8, 0x2, 0xb348, 0x400}, {0x101, 0x7, 0x8, 0x2, 0xfffffffa}, {0x6, 0x1, 0x414587ef, 0x8, 0xffffffff, 0x6}, {0x6, 0x9, 0x7fff, 0x9, 0x2, 0x8}, {0x7, 0x9, 0x6, 0x2, 0x1ff, 0x4}, {0xc, 0x5, 0x6, 0xffff, 0x1, 0x2}, {0x0, 0x1b4, 0xf, 0xf8b, 0x7, 0xca}, {0xb, 0x1, 0x5, 0x71, 0xc}, {0x0, 0x0, 0x7, 0x80, 0x66}, {0x8, 0xe4ee, 0x7, 0x6, 0x97, 0x1000}, {0x38ef, 0x6, 0x900000, 0x7, 0x0, 0x4}, {0x0, 0x5, 0xfffe00, 0xe2, 0xffffff00, 0x8}, {0x2, 0xe000, 0x7, 0x1, 0xffffff01, 0x80}, {0xd, 0x7fff, 0x15e, 0x1, 0x3, 0x7}, {0x6, 0xffffffff, 0x6, 0x1ff, 0x7, 0x3}, {0x7f, 0xfff, 0x8, 0xf4, 0x6c0, 0x2}, {0x5, 0x0, 0x8, 0x4, 0xffffffff, 0x5}, {0x400, 0x5, 0x0, 0x7, 0x1, 0x3}, {0x2, 0x8, 0x6a, 0x4, 0x36, 0x8001}, {0x3ff, 0x1, 0x0, 0xffffffff, 0x7, 0x6}, {0x2, 0x8fe, 0x123, 0xd, 0x5, 0x4}, {0xfffffff8, 0x2, 0x6, 0x2, 0x3, 0x6d2}, {0x7, 0xbee6, 0x6, 0x8000, 0x4, 0x1000}, {0x9, 0x9, 0x1, 0x2, 0x0, 0x1000}, {0x0, 0x5, 0xfffffe00, 0x5, 0x8, 0x5}, {0x784, 0x3, 0xfff, 0xfc, 0x200, 0x7fffffff}, {0x9, 0xfffff801, 0x7, 0x686, 0x80000001, 0x9}, {0xc, 0xc597214, 0x9, 0x170e, 0x23, 0x6}, {0x80000000, 0x0, 0x7, 0x3, 0x3, 0xffff}, {0x7fffffff, 0x3, 0x9, 0x6c1, 0xdb, 0xff}, {0x1, 0x8, 0x8001, 0xb, 0x7, 0x3}, {0x10001, 0x2, 0xf, 0x7, 0x100, 0x7}, {0x9, 0x7, 0x0, 0x8, 0x5a40, 0x4}, {0x7fff, 0x39, 0x3, 0x9, 0x236, 0x8}, {0x4, 0xfff, 0x0, 0x8001, 0x40, 0x8}, {0x101, 0x8000, 0x6, 0x1, 0xc57f, 0x1}, {0x1, 0x8903, 0x4, 0x8, 0x1c98}, {0x518e31c, 0x5, 0x1000, 0x2, 0x5, 0x4}, {0x7, 0x2, 0xfd, 0x6, 0x5, 0x1}, {0x800, 0x7fffffff, 0x3, 0xfffff800, 0x10000, 0x8}, {0xc, 0x1, 0x401, 0x3, 0x6d, 0x978c}, {0xa1, 0x9a, 0x44d, 0x9, 0x194, 0x5}, {0x7, 0x0, 0x9, 0xc, 0x6e, 0x7}, {0x5, 0x5, 0x9, 0x101, 0x4, 0x5}, {0x4, 0x0, 0xfffff697, 0x6, 0x6, 0x3}, {0xe, 0x10001, 0xc637, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x3, 0x1, 0xf, 0x87}, {0x2, 0x3, 0x7, 0xa, 0x80000000, 0x9}, {0xfffff461, 0x7ffbffff, 0x71, 0x2, 0x80000001, 0xc}, {0x3, 0x3, 0x8000, 0x7f, 0x9, 0x2}, {0x8, 0x3, 0xffff, 0xe220, 0x9, 0x96}, {0x3, 0x9, 0xffffcaec, 0x6, 0x8, 0xfffffffe}, {0x1, 0x7f, 0x1, 0xffffc3a6, 0x401, 0x9}, {0x40000000, 0x6, 0xffff, 0x7, 0x7, 0x2}, {0xbab7, 0x5, 0x6, 0x1a, 0x5, 0x2}, {0x0, 0xfffffffa, 0x1, 0x80000001, 0x28c, 0x40}, {0xebb, 0x8001, 0x4, 0xa, 0x4, 0x3}, {0x2, 0x35a, 0x2, 0x4, 0x4, 0x3}, {0x2, 0x2, 0x5, 0x3, 0x5, 0x8}, {0x2, 0x4, 0x4, 0xf3, 0x9, 0x3}, {0x2, 0xc51, 0x4, 0x4, 0x3ff, 0x7}, {0xf, 0x0, 0x8, 0x6, 0x1cc, 0x2}, {0x1, 0x5, 0x1, 0x9, 0x100}, {0x5, 0x3, 0x5, 0x8, 0x9, 0x6}, {0x4, 0x4, 0x2, 0x9356, 0x9, 0x392}, {0x400, 0x5ba5, 0x5, 0x3, 0x0, 0x9}, {0xffff1b0f, 0x8001, 0xffffdb93, 0x81, 0xffff, 0x2}, {0x9, 0x5, 0x7, 0x1, 0x8, 0xf}, {0x9, 0x4, 0x80000001, 0x2, 0xfaca, 0x28e}, {0x2, 0x4, 0x3, 0x9, 0x4, 0x37}, {0xdd, 0xb7a0, 0x7f, 0x7, 0x1ff, 0xff}, {0xb, 0x9, 0x1, 0x3, 0x100, 0xf4}, {0x2, 0x6, 0xc1, 0x9, 0x1000, 0x2}, {0x8, 0x3, 0x9, 0x0, 0x0, 0x9e}, {0x8, 0x10001, 0x40ee, 0x7, 0x3, 0x7f}, {0x7, 0x8, 0x4, 0x7f, 0x6a79, 0x4}, {0x487d, 0x0, 0x10000, 0x2a, 0x100, 0x64c4686e}, {0x8, 0xce7a, 0xb, 0x23c9036d, 0x7, 0x10}, {0xff, 0xcfb, 0x80000000, 0x1, 0xe, 0x4d4}, {0x31e0e21f, 0x6, 0x7bd, 0x5, 0x1000, 0x8}, {0xe, 0xb667, 0x610, 0x8, 0x8, 0xd2c5}, {0x80000000, 0x7, 0x7, 0x1ff, 0xa694, 0x4}, {0x2, 0x9, 0x1a1, 0x200, 0xf072, 0xfffff72e}, {0x7, 0x8000, 0x5, 0x4, 0x7, 0x1}, {0x8d56, 0x3, 0xb9, 0x9, 0x10001, 0xfffffffd}, {0xc, 0x4, 0x7, 0xafb6, 0x3a48, 0x8}, {0xf, 0x6, 0x2, 0xa638, 0xffffffff, 0x6}, {0x1, 0x80, 0x200, 0x1ff, 0x3, 0x4}, {0x4, 0x22b4, 0x3, 0x3, 0x9, 0x3a}, {0xe, 0x800, 0x9, 0x6, 0x92, 0x800}, {0xb, 0x4, 0x8, 0x7, 0xed70, 0x2}, {0x1, 0x6ef, 0x80000000, 0x10000, 0x80, 0x5}, {0x8, 0x7fffffff, 0xe5f9, 0x5, 0x80000001, 0x8}, {0x1, 0x10000, 0xb, 0x8000, 0x2, 0xc7}, {0x0, 0x5, 0x8, 0x1f31, 0x61}, {0x7ff, 0xd292, 0x8, 0xfffffffc, 0x3, 0x8}, {0x0, 0x2, 0x1000, 0xffffff98, 0x4800000}, {0x401, 0x9, 0x4, 0x4, 0x4, 0x10001}, {0x5, 0x9, 0xfffffff9, 0x7, 0x9}, {0xe, 0xd94, 0x4, 0x2, 0x4, 0x9}, {0x3ff, 0x3, 0x7, 0xf0f0, 0x7, 0x10}, {0x80, 0xff, 0x101, 0x4, 0x6, 0x8001}, {0x120000, 0x4, 0x7, 0x73a, 0xf48e, 0x1}, {0x10, 0x7, 0x3, 0x0, 0x1, 0xfffffff7}, {0x3ff, 0x9, 0x9e, 0x8, 0x5, 0x7}, {0xa4, 0x2, 0xffff, 0x9, 0x7}, {0xb, 0x9, 0x40, 0xd8, 0x1, 0x3400000}, {0x2, 0x8e, 0x68fc, 0xff, 0x6, 0x5}, {0x2, 0x0, 0x3, 0x9, 0x275, 0x2}, {0x6, 0x1ff, 0x10, 0x5, 0x400, 0xfff}, {0x4, 0x0, 0xffffff80, 0x80000001, 0x1, 0x6}, {0x4, 0x6, 0x0, 0x1000, 0x7feb, 0x4}, {0x4, 0x520c, 0x618, 0x3, 0x6, 0xa}, {0x3, 0x81, 0x0, 0x9, 0x5, 0xffffffff}, {0x7, 0x7, 0x3, 0x0, 0x80, 0x1}, {0x40, 0x3, 0x3, 0x101, 0x0, 0x31}, {0x2, 0xfffffff8, 0x9, 0xf, 0x1, 0x1}, {0xfffffff9, 0x5, 0xb, 0x1, 0x8, 0x1}, {0xfffffff9, 0x7, 0xff, 0x7, 0x8, 0x6}, {0x5, 0xffffffff, 0x7f80000, 0x8001, 0x1000100, 0x4}, {0x5, 0x8, 0x5, 0x5, 0x4, 0xfffffff7}, {0x0, 0xffffff9e, 0x6, 0x5, 0x4, 0x40}, {0x4, 0x0, 0x4, 0x7, 0x47, 0x4}, {0x8, 0x6, 0x81, 0x5, 0x8e6c, 0x6}, {0x8, 0x9, 0xd, 0x7, 0xfffffffd, 0x3}, {0xc9f, 0x1, 0x3, 0x2, 0x5, 0x271}], [{0x3, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x9a2bdb8565d0b58f, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x38776387de302820}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x2dbe85d22b710ec5}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xfff, 0x5, 0x7, 0x10, 0x4}, 0xe, 0x8, [{0x2a7, 0xfffffffd, 0x9bc8, 0x0, 0xa, 0x9}, {0x5, 0x7, 0x3, 0xb5b, 0x8, 0x3}, {0x7ee, 0xa1, 0xffffff7f, 0x4, 0x2, 0xfff}, {0xffffffff, 0x2, 0x2, 0x9, 0x4, 0x3ff}, {0xe, 0x9, 0x2, 0x6521667, 0x1000}]}, [{0x6, 0x4e98, 0x7c159ba2, 0x9, 0xd9, 0x80}, {0x7f, 0x9, 0x9, 0xfffffffb, 0x100, 0x6}, {0x4, 0x8, 0x4, 0x2, 0x80000001, 0x5}, {0xfe, 0x7fffffff, 0x100, 0x1, 0x0, 0x9d}, {0x0, 0x2e, 0x6, 0x8, 0xba48, 0x1ff}, {0x1, 0xb5, 0x5, 0x2, 0x7, 0xfffffff7}, {0x9, 0x5, 0xf69, 0x8, 0x401, 0x9}, {0x39086aa7, 0xe0, 0x6, 0x1, 0x95, 0x4}, {0x5, 0x8, 0x2, 0x81, 0x4, 0x7}, {0x7, 0x7fffffff, 0x7fff, 0x0, 0x1, 0x1}, {0x8851, 0x8, 0xffff, 0x5, 0x5, 0x2}, {0x0, 0xffff, 0x8, 0x9, 0x6, 0x5246}, {0x7, 0x7fff, 0x9, 0x7d, 0xb8e, 0x2}, {0xca43, 0x311, 0x800, 0x7fffffff, 0x8001, 0xdf}, {0x698100, 0x5, 0x9, 0x1, 0x800, 0x4}, {0x10000, 0x5, 0x5, 0xc01e, 0x7, 0x400}, {0x5, 0xeb4, 0x4, 0x0, 0x4, 0x5286}, {0x1, 0x9, 0x5, 0x2, 0x0, 0x55}, {0xe9, 0x101, 0x5, 0x2, 0x8, 0x85}, {0x0, 0x2, 0x10001, 0x3ff, 0x99, 0x7}, {0x0, 0x2, 0x1, 0x3, 0x8, 0x9}, {0x6, 0x2, 0x10, 0x9eb, 0x8, 0x949f}, {0x7, 0x7, 0x9, 0x7, 0x40, 0x7}, {0x5, 0x0, 0x4716, 0x4, 0x1, 0x1}, {0x0, 0x7bd, 0x7fff, 0x180a, 0x7fff, 0x7}, {0x45, 0xb, 0x4, 0xb, 0xcb7, 0x6}, {0x7, 0x2374, 0x10, 0x7, 0x9, 0x7}, {0x6, 0x0, 0x8001, 0xff, 0x3, 0x8}, {0x1, 0x8, 0x7, 0xe35, 0x8, 0x7f}, {0x5, 0x6, 0x7, 0xffffffff, 0x401, 0x8}, {0x2, 0x2a0a, 0xea6e, 0x1, 0x8, 0x80}, {0xffffffff, 0x3ff, 0x1, 0x9, 0xf, 0xff}, {0xda, 0x66bf, 0x7, 0xd4, 0x7, 0x5}, {0x8, 0x80, 0x40, 0x10001, 0x0, 0x7ff}, {0x0, 0x0, 0x8, 0x6, 0x5, 0x6}, {0x4, 0x1, 0x9, 0x5, 0x5, 0x3e}, {0x80000001, 0x8, 0x38e, 0xac74, 0x7, 0x10000}, {0x7, 0x3, 0x7, 0x9, 0x49, 0x7fffffff}, {0x3, 0x401, 0x9, 0x0, 0x0, 0x5}, {0x9, 0x6, 0x3, 0x80000001, 0x4, 0x1}, {0x5, 0x0, 0x6, 0x8, 0x80000000, 0x7}, {0x584, 0x7fffffff, 0x5, 0x8000, 0xfffffffc, 0x4}, {0x4, 0x8, 0x3ff, 0x3, 0x1, 0x8}, {0x8001, 0x8, 0xff, 0x5, 0x7f, 0x80000001}, {0x2, 0xc, 0x101, 0x7, 0x6, 0x7}, {0x1, 0x5, 0x101, 0x1, 0x94e, 0x4}, {0xfe, 0x6, 0x5f2, 0x3, 0xfffff000}, {0x9de2, 0x4, 0x80000001, 0x2, 0x6, 0x3}, {0x9, 0x3, 0x5, 0x0, 0x70, 0x4}, {0x213a, 0x8, 0x2, 0x5, 0x7, 0xb2}, {0xfffffff7, 0x1, 0xf9ec, 0x2, 0x7ff, 0x40000000}, {0x7, 0x10001, 0x7, 0x1ff, 0x3, 0x2}, {0x6, 0x2, 0x80000001, 0x0, 0xd, 0x7ff}, {0x4, 0xc, 0x3, 0x6, 0x7, 0x3}, {0x9, 0x0, 0x5254, 0x58, 0x4, 0x927}, {0xffffff74, 0x100, 0x2, 0xfa, 0x81}, {0x9, 0x3, 0x79000000, 0x3, 0x8, 0xfffffffc}, {0x200, 0x9, 0x8d2c, 0xfffffffc, 0x2, 0x10000000}, {0xa, 0x2, 0x40, 0x5, 0xffffffaa, 0x18}, {0x0, 0x3, 0x5, 0x6, 0x0, 0x9515}, {0xd, 0x4, 0x2, 0x7, 0x80, 0xdc}, {0x6, 0x1, 0x1, 0x9, 0x7f, 0x3}, {0x54, 0x3, 0x1, 0x5, 0x800, 0xb}, {0xfffffff7, 0x6, 0x8, 0xffffffff, 0xa, 0x7}, {0x7, 0x9, 0x1, 0x8c, 0xff, 0x795000}, {0x6, 0x80, 0x1, 0x4, 0x7ff, 0x74}, {0x3, 0x7, 0x9, 0x6, 0x4, 0x800}, {0x1, 0x3, 0x8, 0x0, 0x8, 0x8000}, {0xfff, 0x5b, 0x6, 0x8, 0xffffffff, 0x1}, {0x0, 0x0, 0x3, 0x9, 0xb, 0x400}, {0x5, 0x4, 0x3, 0x4f3, 0x9, 0x1ff}, {0x7, 0x401, 0x5, 0x3, 0x6, 0x3}, {0x6, 0x2, 0x4, 0x0, 0x100, 0x6}, {0x35e, 0xd, 0x9, 0x800, 0x4, 0x3}, {0x4, 0x4, 0x10, 0x5, 0xff, 0x3}, {0x2, 0x0, 0xa, 0x80, 0x7f, 0x3}, {0xd110, 0x200, 0x7, 0x8, 0x2d, 0x3}, {0x6, 0x2, 0xda843d7, 0x0, 0x188316d3, 0x8}, {0xb, 0x2, 0x1977, 0xdbe, 0x4, 0x9}, {0xfffffffa, 0x5, 0x1, 0x1, 0x6, 0x7}, {0x7fff, 0x8000, 0x101, 0x4, 0x1, 0x8}, {0x3, 0x10001, 0x9, 0x4, 0x8, 0xffff}, {0x7fffffff, 0x7d79, 0x1, 0x8, 0x9, 0xc}, {0x2, 0x9, 0xb1f4, 0x3, 0x20000000, 0x1fa6}, {0x81, 0x4, 0x80000001, 0x6, 0xc, 0x800}, {0x80, 0x100, 0x0, 0x0, 0x0, 0xfff}, {0x4, 0x8, 0x8, 0x1, 0x5, 0x5}, {0x3, 0x1, 0x5, 0x9, 0x30e6, 0xa}, {0x8, 0x10, 0x5, 0x2, 0x6, 0x8}, {0x83df, 0x4, 0x9, 0x25f1, 0x1, 0x100}, {0x9, 0x3ff, 0x3, 0x6, 0x5, 0x3}, {0x9, 0x80, 0x1, 0x4, 0x6}, {0x0, 0x4270, 0x9, 0x9, 0x9, 0x2}, {0x5, 0x6d5, 0x8, 0xc0, 0x6, 0x3}, {0x40, 0x5, 0x7ff8, 0x4, 0x4, 0xfffffffc}, {0x8, 0x200, 0x5, 0x9, 0x200, 0x8001}, {0x5, 0x80, 0x100, 0x5, 0x7, 0x5d2}, {0x3, 0x8, 0x5, 0xfffffe00, 0x200}, {0xd, 0x1, 0xbb, 0x4, 0x4, 0x2a7}, {0x1, 0x1c000, 0x3, 0x0, 0x4ba2, 0x3}, {0x80000001, 0x8, 0x1000, 0x1, 0x5, 0x6}, {0x6, 0x6000000, 0x80000000, 0x2, 0xfffffff9, 0x7}, {0x2, 0x233, 0x6, 0x134, 0xff, 0x7}, {0x0, 0x7, 0xffffffff, 0xff, 0x2, 0x5}, {0x4, 0x10000, 0x2, 0x0, 0x20ffff, 0x4}, {0x2, 0x7f, 0xffffffff, 0x1, 0x7, 0x80000001}, {0x2, 0x10, 0x8, 0x1fb, 0xee, 0x4}, {0xfffff8b3, 0xff, 0xe, 0x9, 0x1, 0x9}, {0xb, 0x3, 0x7, 0x8, 0x8, 0x800}, {0x4, 0x0, 0x1, 0x1, 0x8000, 0x1}, {0x0, 0x7fffffff, 0x4, 0x800, 0x4, 0x7a9b}, {0x3, 0x6, 0xffff3c3c, 0xaf5a, 0x2, 0xbe0}, {0xec, 0x4f, 0x6, 0x2000, 0x8, 0x1}, {0x3, 0x2, 0x90000000, 0x411, 0x1}, {0x1, 0x1ff, 0x4, 0x7, 0x9, 0x5}, {0x2, 0xe, 0x2, 0x9, 0x9, 0x6}, {0x88ac, 0x401, 0x40, 0x6, 0x9, 0x4}, {0x7fff, 0x1a, 0x8, 0xe468000, 0x400, 0x518}, {0x8, 0x2, 0x74, 0x7, 0x64d6, 0x8000}, {0x3, 0x8, 0x7, 0x1, 0x10001, 0x401}, {0x8, 0x3, 0x464, 0x2, 0x9, 0x81}, {0xa2, 0x3, 0x2, 0x7f, 0x5, 0x7}, {0x2, 0x2bec41ce, 0x0, 0x5, 0x1000, 0x401}, {0x10001, 0x6, 0x2, 0x7, 0x1, 0xe}, {0x1, 0x6, 0xfff, 0xd, 0x0, 0x90}, {0x5, 0x0, 0x1, 0x9, 0x2, 0x2}, {0x4, 0x3, 0x9, 0xe, 0xbf, 0xfffffff8}, {0x9, 0x6, 0x7, 0xd1, 0x81, 0x9}], [{0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x353c1e9c68583be0}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {0x7}, {0x2}, {0x2, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x22bf1690da1ec7cf}, {0x6}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0xf}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4}, {}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x4}, {0xe, 0x1}, {0x3, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2e24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000800850000007b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 16.163724309s ago: executing program 9 (id=816): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@dev}, {@initdev}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000400)='rtdev=./loop0\x00') r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x1) fallocate(r5, 0x21, 0x4008, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) faccessat(r4, &(0x7f0000000140)='./file0\x00', 0xa0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) 13.673204174s ago: executing program 6 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mknodat(r1, &(0x7f0000000040)='./file2\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 12.252147987s ago: executing program 38 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='pstore\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x1, 0x1, 0x2000, 0x1000, &(0x7f000012d000/0x1000)=nil}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0, 0x8c}}, 0x4081) 12.213476035s ago: executing program 6 (id=820): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)={0x40, 0xa, 0x2e, "c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94e294b4b18ff7b023cc83b30b268c3b5f50b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0xb45d, 0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x2400404e) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) 10.100632103s ago: executing program 3 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setns(0xffffffffffffffff, 0x64000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, 0x0, 0x0) listen(r6, 0xff) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r8, &(0x7f0000000340)='hist:', 0x5) 10.072405456s ago: executing program 2 (id=824): r0 = socket(0xa, 0x5, 0x0) unshare(0x40400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0, 0x80}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x101c40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000030000000000000000000000bab16ff609b38749b52bf28500"/40], 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004d349a4080d17022a69a0defa000000", @ANYRES32=r5, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, 0x0, 0x0, 0xfe}, 0x20) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000008400000005000000200000000008000012000000000000008400000006000000070000000000000030"], 0x60, 0x8890}, 0x24000052) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "33e275106ce797ba", "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) unshare(0x26020480) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000140000000000000000000000000000000085617a8ffb48bed588a5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r10, 0x68, &(0x7f0000000200)}, 0x10) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) write$tun(r8, &(0x7f00000000c0)=ANY=[], 0xfdef) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r11, 0x5c, 'Qe{', "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"}}, 0x110) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00fdfffffffbdbdf2500000200000000000800010001000000"], 0x20}}, 0x4000000) 8.958534528s ago: executing program 3 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='pstore\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x1, 0x1, 0x2000, 0x1000, &(0x7f000012d000/0x1000)=nil}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0, 0x8c}}, 0x4081) 7.715425783s ago: executing program 9 (id=826): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r1, r0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x2b8, 0x2b8, 0xfeffffff, 0x370, 0x2b8, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x924, 0x2, 0x0, 'syz1\x00'}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'gre0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0x4, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) syz_open_dev$sndctrl(0x0, 0x1, 0x280) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 6.485068759s ago: executing program 9 (id=827): fsopen(&(0x7f0000000000)='ceph\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) inotify_init1(0x800) pipe(&(0x7f00000001c0)) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) write(r0, &(0x7f0000000300)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x20) write(r5, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.464471711s ago: executing program 3 (id=828): mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000240)='upperdir', 0x40480, &(0x7f0000000280)={@_ha_fsid={[0xaa5d, 0x8]}, {0x2, 0x6, 0x80000000, 0x43a}}, 0x62e, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x8000, 0x3992653d, 0x5, 0x7f, 0x9, 0x3, 0x1, 0x97ff, 0x6, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x1ff, 0x8]}, &(0x7f0000000540)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000005c0)={r2, 0x200, 0x8, 0x5}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0x4}}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0x2, 0x4, 0x0, 0x4, 0x0, 0x3, 0xc2d, [{0x5, 0x5, 0x1, 0x5}, {0xfdd, 0x9, 0x6, 0x3}, {0x8, 0x1000, 0x75, 0x3ff}, {0x400, 0x2658, 0x40000, 0x1}]}}]}}]}, 0x8c}}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(0x0, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = open(0x0, 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0xee00, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000005100850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r9, &(0x7f0000000780)}, 0x20) 6.434497903s ago: executing program 2 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6.106200267s ago: executing program 2 (id=830): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x10, 0x1, 0xa43a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000500)='GPL\x00', 0x7, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x1}, {0x4, 0x1, 0x10}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex=r7, r5, 0x1d, 0x10, 0x0, @void, @value=r8, @void, @void, r6}, 0x20) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r9 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r9, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000600)={0x1, r4}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 5.521976574s ago: executing program 6 (id=831): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4044044) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r9, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) 4.057854589s ago: executing program 2 (id=832): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@dev}, {@initdev}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000400)='rtdev=./loop0\x00') r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x1) fallocate(r5, 0x21, 0x4008, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) faccessat(r4, &(0x7f0000000140)='./file0\x00', 0xa0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) 3.329403174s ago: executing program 6 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='pstore\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x1, 0x1, 0x2000, 0x1000, &(0x7f000012d000/0x1000)=nil}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0, 0x8c}}, 0x4081) 2.977505093s ago: executing program 2 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x10, 0x2, 0x9, 0x3, 0x3, 0x5, 0x7, 0x5, 0x7f, 0x31, 0x1, 0x2, 0x7, 0xe}, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/sched/filter\x00', 0x201, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) write(r1, &(0x7f0000000400), 0x0) r2 = syz_open_dev$vim2m(0x0, 0x4, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1, 0x0, 0x42}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x80, "3173bd53cb064a7e67268bca02a4c9fa34825187c1b94d651bf1db50c41a024c", 0x51424752}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000001c0), 0x10) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0xba8, 0x0, 0x168, 0x10, 0x908, 0xb, 0xad8, 0x250, 0x250, 0xad8, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x8e0, 0x908, 0x0, {0x0, 0x28e}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x200}, {0x7}, {0xf41, 0x2}, {0x80000000}, {0xa0000}, {0x2}, {0xb0, 0x2}, {0xfffffff3, 0x3}, {0x6, 0x1}, {0x9, 0x3}, {0x9, 0x3}], [{0x2, 0x3}, {0x7fff, 0x4}, {0xfff, 0x8}, {0x4, 0x2}, {0x1, 0xb3}, {0x3, 0x10001}, {0x747, 0x8001}, {0x4, 0xd}, {0x48f5, 0xfffffffa}, {0x0, 0x7ff}, {0xfff}], 0x2, 0x1}, {[{0x81}, {0x80000000, 0x1}, {0x6, 0x3}, {0x8, 0x2}, {0xfffffffa, 0x1}, {0x401}, {0x7, 0x2}, {0x7}, {0x3df2, 0x99ffdcbf898bd3b2}, {0x8000}, {0xa, 0x2}], [{0x4, 0x8000}, {0xfffffff8, 0xfff}, {0x20, 0x200}, {0x5, 0x6}, {0x5000, 0x5}, {0x3, 0x3}, {0x2000000, 0x5e}, {0x7, 0x7}, {0x3, 0xdc}, {0x9, 0x3}, {0x5, 0x7fffffff}], 0x8, 0xb}, {[{0x6, 0xc44cb69118c6bc3}, {0x4, 0x3}, {0xfffffff9, 0x3}, {0x1000}, {0x9, 0x3}, {0xff, 0x3}, {0x6, 0x2}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}], [{0x80000001}, {0x8, 0xf30}, {0x9, 0x577}, {0xd, 0xa18}, {0x3, 0x2}, {0x0, 0xd4}, {0x4, 0x10000}, {0x6, 0x7e}, {0xf, 0x6}, {0x1, 0x2}, {0x8, 0x5}], 0x5, 0x7}, {[{0x6, 0x3}, {0x6b43, 0x1}, {0xffffff5f}, {}, {0x4c, 0x1}, {0x7, 0x3}, {0x8, 0x2}, {0xc3}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x1}], [{0x1, 0x9}, {0x2, 0xff}, {0x0, 0x40}, {}, {0x80000001, 0x5}, {0x3, 0x3}, {0xffffff60, 0x5}, {0x10, 0x7f}, {0x5, 0xfff}, {0x9, 0x7ff}, {0xec7f, 0x8}], 0x0, 0x8}, {[{0x8, 0x3}, {0x4, 0x3}, {0x0, 0x21e5da8cfd88894d}, {0x7f, 0x1}, {0x4, 0x2}, {0x28bb, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7f, 0x2}, {0xfff, 0x3}, {0xffff5887, 0x1}], [{0x2}, {0xc768, 0xb0e}, {0x3, 0x8}, {0x8, 0x2}, {0x9, 0x8a0}, {0x5, 0xd0e}, {0x2, 0xfffffff9}, {0x9, 0x59}, {0xc000, 0x2f9}, {0x800, 0x3dcf}, {0xfffffffb, 0xe}], 0x9, 0x4}, {[{0x5, 0x3}, {0x6, 0x3}, {0x117452e, 0x1}, {0x0, 0x2}, {0xf7, 0x3}, {0xaa5a}, {0x8000, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x80, 0x3}, {0x5}], [{0x7, 0x1}, {0x8000, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x7a3}, {0x5, 0x4}, {0x8, 0x2}, {0x6c0, 0x7fffffff}, {0x0, 0x5}, {0x81, 0x3}, {0xa, 0x1}], 0x6, 0xb}, {[{0x4, 0x1}, {0x5, 0x1}, {0x1ff, 0x1}, {0x2, 0x2}, {0xb, 0x3}, {0xfffffff8, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0xff, 0x1}, {0x6, 0x1}, {0x9, 0x3}], [{0xc6a7, 0x7}, {0x4, 0x9}, {0x5, 0x10000}, {0x2, 0xeb}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x400, 0x4}, {0x400, 0x2}, {0x6, 0x40}, {0x10, 0xeb}], 0x1, 0x5}, {[{0x1, 0x2}, {0x1, 0x1}, {0xab6, 0x1}, {}, {0x7}, {0x101, 0x1}, {0xc, 0x30cfb1736fa8c266}, {0xfd, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x1}], [{0x41b, 0x70}, {0x7f, 0xaf}, {0x0, 0x8}, {0xc62, 0xfffffffd}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x4}, {0x10, 0x6}, {0x0, 0x9}, {0x40, 0x1}], 0x5, 0x5}, {[{0xc07}, {0x5}, {0x6, 0x2}, {0x800, 0x3}, {0x61}, {0x3, 0x2}, {0x94, 0x3}, {0x80, 0x3}, {0x8, 0x1}, {0xada, 0x1}, {0xd, 0x1}], [{0x1, 0x400}, {0x7, 0x57}, {0x9, 0xab}, {0x5, 0x8}, {0xffffffff, 0x200}, {0x9a2a, 0xdd}, {0x4ee, 0x100}, {0x8003, 0x6}, {0x5, 0xb0d9}, {0x1, 0x17000000}, {0x8000, 0xd}], 0x8, 0xb}, {[{0xad40, 0x2}, {0x91}, {0xfff}, {}, {0x2}, {0x3, 0x3}, {0x3, 0x2}, {0x8, 0x3}, {0x4}, {0x2}, {0x4}], [{0x1ff, 0x8}, {0x0, 0xfb6b}, {0xfff, 0xfffffbff}, {0x5, 0x4}, {0x1, 0x800}, {0x10001, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x4c55}, {0x8, 0x100}, {0x2, 0x9}], 0x3, 0x3}, {[{0x4, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x401, 0x2}, {0x9}, {0x8, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x40, 0x2}, {0xffffffff, 0x2}, {0x18000000, 0x3}], [{0x4a, 0xfffffffa}, {0x9, 0x81}, {0x800, 0x3ff}, {0x3ff, 0x8}, {0x65, 0x5}, {0x0, 0x3}, {0x2, 0x7ff}, {0x2, 0x82}, {0x6, 0x5}, {0x1}, {0x9, 0x10001}], 0x2}]}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0xfffffffd, 0x10000, 0x80000001, 0x82}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3cd}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc08) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000002140)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000040)=0x2) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r6, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000280)) close(r5) write$binfmt_format(r1, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) 2.806028245s ago: executing program 6 (id=835): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r3, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0xa7, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0x48, 0xcf, 0xb, 0x10, 0x19d2, 0x1297, 0x8215, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x8, 0x5, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x0, 0xff, 0xff, 0xff}}, {{0x9, 0x4, 0x79, 0x8, 0x0, 0xc7, 0x49, 0x55, 0x7d}}, {{0x9, 0x4, 0x51, 0x80, 0xa, 0xdb, 0x75, 0x72, 0x66, [], [{{0x9, 0x5, 0x0, 0x8, 0x10, 0xfc, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x1, 0x4, 0x68}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x4, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0xd7, 0x10, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x2, 0x9}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x1, 0xf, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x21, 0x1}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x1, 0x6, 0xc, [@generic={0x2, 0x3}]}}, {{0x9, 0x5, 0x3, 0xab86983d5e27b31e, 0x40, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf1, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x0, 0x1a, 0x25}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x0, 0x3, 0x23, 0xf9, 0xff, 0x3}, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r7, 0x0, 0x44004) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x700}, 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 1.366136326s ago: executing program 3 (id=836): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r1, r0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x2b8, 0x2b8, 0xfeffffff, 0x370, 0x2b8, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x924, 0x2, 0x0, 'syz1\x00'}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'gre0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0x4, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) syz_open_dev$sndctrl(0x0, 0x1, 0x280) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 1.231582159s ago: executing program 2 (id=837): futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xa201ffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000640)=ANY=[], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x1000a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/553, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0xff07}, 0x2000000) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats\x00') r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x6000000d}) poll(&(0x7f0000000100)=[{r9, 0x5f4b8f9e57b39c22}], 0x1, 0x80) r10 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SYNC_REGS(r12, 0x4068aea3, 0x0) ioctl$KVM_SET_PIT(r11, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x807, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 1.185497244s ago: executing program 9 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='pstore\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x1, 0x1, 0x2000, 0x1000, &(0x7f000012d000/0x1000)=nil}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0, 0x8c}}, 0x4081) 0s ago: executing program 3 (id=839): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, 0x0, 0x0) socket$inet(0x2, 0x5, 0xc) kernel console output (not intermixed with test programs): [ T5883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.088778][ T5883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.089082][ T5883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.089302][ T5883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.153376][ T5598] Bluetooth: hci4: command tx timeout [ 583.513846][ T30] audit: type=1400 audit(1790196643.699:1812): avc: denied { mount } for pid=9292 comm="syz.3.480" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 584.759825][ T30] audit: type=1400 audit(1790196645.229:1813): avc: denied { read write } for pid=9307 comm="syz.3.481" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 584.760477][ T30] audit: type=1400 audit(1790196645.229:1814): avc: denied { open } for pid=9307 comm="syz.3.481" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 585.232883][ T5598] Bluetooth: hci4: command tx timeout [ 587.313904][ T5598] Bluetooth: hci4: command tx timeout [ 587.415686][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.419933][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.439628][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.564857][ T30] audit: type=1400 audit(1790196647.959:1815): avc: denied { write } for pid=9315 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 588.318722][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.339819][ T9327] 9pnet_virtio: no channels available for device syz [ 588.340116][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.440073][ T9327] fuse: Bad value for 'fd' [ 588.580900][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.490'. [ 588.844504][ T30] audit: type=1400 audit(1790196649.319:1816): avc: denied { sqpoll } for pid=9335 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 590.017362][ T5602] Bluetooth: hci4: command tx timeout [ 590.293504][ T30] audit: type=1400 audit(1790196650.769:1817): avc: denied { write } for pid=9306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.435941][ T5602] Bluetooth: hci0: command tx timeout [ 590.503503][ T30] audit: type=1400 audit(1790196650.979:1818): avc: denied { ioctl } for pid=9348 comm="syz.7.478" path="socket:[25539]" dev="sockfs" ino=25539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.504100][ T30] audit: type=1400 audit(1790196650.979:1819): avc: denied { setopt } for pid=9348 comm="syz.7.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.504614][ T30] audit: type=1400 audit(1790196650.979:1820): avc: denied { bind } for pid=9348 comm="syz.7.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.505243][ T30] audit: type=1400 audit(1790196650.979:1821): avc: denied { connect } for pid=9348 comm="syz.7.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.506794][ T30] audit: type=1400 audit(1790196650.979:1822): avc: denied { write } for pid=9348 comm="syz.7.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.841901][ T30] audit: type=1400 audit(1790196651.309:1823): avc: denied { write } for pid=9352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.583479][ T9359] Cannot find add_set index 2 as target [ 592.754952][ T5602] Bluetooth: hci0: command tx timeout [ 592.776846][ T30] audit: type=1400 audit(1790196652.309:1824): avc: denied { ioctl } for pid=9358 comm="syz.3.487" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 592.776943][ T30] audit: type=1400 audit(1790196653.159:1825): avc: denied { create } for pid=9358 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 594.189044][ T30] audit: type=1400 audit(1790196653.869:1826): avc: denied { create } for pid=9355 comm="syz.7.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.189099][ T30] audit: type=1400 audit(1790196654.199:1827): avc: denied { bind } for pid=9355 comm="syz.7.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.189135][ T30] audit: type=1400 audit(1790196654.399:1828): avc: denied { connect } for pid=9355 comm="syz.7.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.189172][ T30] audit: type=1400 audit(1790196654.599:1829): avc: denied { write } for pid=9355 comm="syz.7.485" path="socket:[26544]" dev="sockfs" ino=26544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.189214][ T30] audit: type=1400 audit(1790196654.659:1830): avc: denied { shutdown } for pid=9355 comm="syz.7.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.189251][ T30] audit: type=1800 audit(1790196654.659:1831): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.485" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 594.832877][ T5602] Bluetooth: hci0: command tx timeout [ 595.277915][ T30] audit: type=1400 audit(1790196655.749:1832): avc: denied { write } for pid=9360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.379549][ T30] audit: type=1400 audit(1790196655.849:1833): avc: denied { write } for pid=9381 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.980222][ T9392] ªªªªªª: renamed from vlan0 (while UP) [ 596.021604][ T196] bridge_slave_1: left allmulticast mode [ 596.021659][ T196] bridge_slave_1: left promiscuous mode [ 596.021968][ T196] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.055882][ T196] bridge_slave_0: left allmulticast mode [ 596.055937][ T196] bridge_slave_0: left promiscuous mode [ 596.056275][ T196] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.432507][ T5602] Bluetooth: hci0: command tx timeout [ 598.016045][ T196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.071456][ T196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.697485][ T196] bond0 (unregistering): Released all slaves [ 601.056547][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 601.056560][ T30] audit: type=1400 audit(1790196660.699:1837): avc: denied { mmap_zero } for pid=9417 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 601.056597][ T30] audit: type=1400 audit(1790196661.449:1838): avc: denied { mount } for pid=9417 comm="syz.3.496" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 601.056639][ T30] audit: type=1400 audit(1790196661.459:1839): avc: denied { search } for pid=9417 comm="syz.3.496" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 601.056664][ T30] audit: type=1400 audit(1790196661.459:1840): avc: denied { append } for pid=9417 comm="syz.3.496" name="uprobe_events" dev="tracefs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 601.056696][ T30] audit: type=1400 audit(1790196661.459:1841): avc: denied { open } for pid=9417 comm="syz.3.496" path="/156/tracing/uprobe_events" dev="tracefs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 601.056738][ T30] audit: type=1400 audit(1790196661.459:1842): avc: denied { append } for pid=9417 comm="syz.3.496" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 601.056770][ T30] audit: type=1400 audit(1790196661.529:1843): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 601.341912][ T196] hsr_slave_0: left promiscuous mode [ 601.350318][ T196] hsr_slave_1: left promiscuous mode [ 601.351085][ T196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.369574][ T196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.483118][ T9427] 9pnet_virtio: no channels available for device syz [ 602.700620][ T196] team0 (unregistering): Port device team_slave_1 removed [ 602.733020][ T196] team0 (unregistering): Port device team_slave_0 removed [ 602.983987][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.984075][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.984189][ T9281] bridge_slave_0: entered allmulticast mode [ 602.985773][ T9281] bridge_slave_0: entered promiscuous mode [ 603.048353][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.497'. [ 603.048836][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.048916][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.049039][ T9281] bridge_slave_1: entered allmulticast mode [ 603.050591][ T9281] bridge_slave_1: entered promiscuous mode [ 603.241016][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.256880][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.799571][ T30] audit: type=1400 audit(1790196664.769:1844): avc: denied { ioctl } for pid=9434 comm="syz.7.499" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26727 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 604.799632][ T30] audit: type=1400 audit(1790196665.189:1845): avc: denied { write } for pid=9434 comm="syz.7.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 604.869026][ T9281] team0: Port device team_slave_0 added [ 604.897450][ T9281] team0: Port device team_slave_1 added [ 605.166452][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.166469][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.166491][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.287048][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.287065][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.287088][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.326561][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.326659][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.326769][ T9320] bridge_slave_0: entered allmulticast mode [ 605.331795][ T9320] bridge_slave_0: entered promiscuous mode [ 605.339107][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.342219][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.342344][ T9320] bridge_slave_1: entered allmulticast mode [ 605.352136][ T9320] bridge_slave_1: entered promiscuous mode [ 605.434529][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.501'. [ 606.547465][ T30] audit: type=1400 audit(1790196666.729:1846): avc: denied { listen } for pid=9449 comm="syz.6.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 606.547520][ T30] audit: type=1400 audit(1790196666.759:1847): avc: denied { ioctl } for pid=9449 comm="syz.6.501" path="socket:[26760]" dev="sockfs" ino=26760 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 606.547560][ T30] audit: type=1400 audit(1790196666.919:1848): avc: denied { listen } for pid=9449 comm="syz.6.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 606.939563][ T30] audit: type=1400 audit(1790196667.409:1849): avc: denied { write } for pid=9437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.409923][ T30] audit: type=1400 audit(1790196668.579:1850): avc: denied { write } for pid=9457 comm="syz.3.498" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 608.677865][ T196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.792855][ T9281] hsr_slave_0: entered promiscuous mode [ 608.833363][ T9281] hsr_slave_1: entered promiscuous mode [ 608.833877][ T9281] debugfs: 'hsr0' already exists in 'hsr' [ 608.833889][ T9281] Cannot create hsr debugfs directory [ 608.903944][ T30] audit: type=1400 audit(1790196669.369:1851): avc: denied { write } for pid=9463 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.916556][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.940215][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.346191][ T196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.628763][ T9320] team0: Port device team_slave_0 added [ 611.224971][ T30] audit: type=1400 audit(1790196671.699:1852): avc: denied { mount } for pid=9489 comm="syz.6.505" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 611.470545][ T30] audit: type=1400 audit(1790196671.939:1853): avc: denied { wake_alarm } for pid=9489 comm="syz.6.505" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 611.711671][ T196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.794229][ T30] audit: type=1400 audit(1790196673.270:1854): avc: denied { read write } for pid=9496 comm="syz.7.506" name="video7" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 611.794880][ T30] audit: type=1400 audit(1790196673.270:1855): avc: denied { open } for pid=9496 comm="syz.7.506" path="/dev/video7" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 611.807265][ T30] audit: type=1400 audit(1790196673.280:1856): avc: denied { ioctl } for pid=9496 comm="syz.7.506" path="/dev/video7" dev="devtmpfs" ino=943 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 611.896968][ T30] audit: type=1400 audit(1790196673.370:1857): avc: denied { write } for pid=9467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.002053][ T30] audit: type=1400 audit(1790196673.470:1858): avc: denied { write } for pid=9501 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.008041][ T9320] team0: Port device team_slave_1 added [ 612.066078][ T9484] syz_tun: entered allmulticast mode [ 612.066265][ T9484] syz_tun: left allmulticast mode [ 612.232673][ T983] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 613.354138][ T983] usb 8-1: device descriptor read/64, error -71 [ 613.392227][ T196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.413209][ T9512] ubi: bad wear-leveling threshold 813332851 [ 613.594888][ T983] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 613.722614][ T983] usb 8-1: device descriptor read/64, error -71 [ 613.832888][ T983] usb usb8-port1: attempt power cycle [ 613.991051][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.991114][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.991173][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.087141][ T9513] ipvlan2: entered allmulticast mode [ 614.087171][ T9513] macvlan1: entered allmulticast mode [ 614.091603][ T9513] batman_adv: batadv0: Adding interface: ipvlan2 [ 614.091842][ T9513] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.092065][ T9513] batman_adv: batadv0: Interface activated: ipvlan2 [ 614.292669][ T983] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 614.301142][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.301195][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.301248][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.435382][ T983] usb 8-1: device descriptor read/8, error -71 [ 614.443962][ T30] audit: type=1400 audit(1790196675.910:1859): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 614.673706][ T983] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 614.693427][ T983] usb 8-1: device descriptor read/8, error -71 [ 614.804355][ T9320] hsr_slave_0: entered promiscuous mode [ 614.806300][ T983] usb usb8-port1: unable to enumerate USB device [ 614.810678][ T9320] hsr_slave_1: entered promiscuous mode [ 614.811241][ T9320] debugfs: 'hsr0' already exists in 'hsr' [ 614.811260][ T9320] Cannot create hsr debugfs directory [ 615.696157][ T30] audit: type=1400 audit(1790196677.170:1860): avc: denied { write } for pid=9511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.994974][ T9537] loop9: detected capacity change from 0 to 2640 [ 616.016191][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016238][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016268][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016295][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016322][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016366][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016407][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016433][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016460][ T9537] ldm_validate_partition_table(): Disk read failed. [ 616.016486][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016514][ T9537] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.016562][ T9537] Dev loop9: unable to read RDB block 0 [ 616.016722][ T9537] loop9: unable to read partition table [ 616.874372][ T9537] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 617.022506][ T30] audit: type=1400 audit(1790196678.460:1861): avc: denied { write } for pid=9540 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.945567][ T196] bridge_slave_1: left allmulticast mode [ 618.945592][ T196] bridge_slave_1: left promiscuous mode [ 618.945786][ T196] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.974349][ T196] bridge_slave_0: left allmulticast mode [ 618.974375][ T196] bridge_slave_0: left promiscuous mode [ 618.974560][ T196] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.117175][ T30] audit: type=1400 audit(1790196681.260:1862): avc: denied { mount } for pid=9555 comm="syz.3.515" name="/" dev="ocfs2_dlmfs" ino=27962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 620.255443][ T9556] o2cb: This node has not been configured. [ 620.255458][ T9556] o2cb: Cluster check failed. Fix errors before retrying. [ 620.255479][ T9556] (syz.3.515,9556,1):user_dlm_register:674 ERROR: status = -22 [ 620.255505][ T9556] (syz.3.515,9556,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 620.255685][ T30] audit: type=1400 audit(1790196681.730:1863): avc: denied { write } for pid=9555 comm="syz.3.515" name="/" dev="ocfs2_dlmfs" ino=27962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 620.255735][ T30] audit: type=1400 audit(1790196681.730:1864): avc: denied { add_name } for pid=9555 comm="syz.3.515" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 620.262575][ T30] audit: type=1400 audit(1790196681.730:1865): avc: denied { create } for pid=9555 comm="syz.3.515" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 620.262621][ T30] audit: type=1400 audit(1790196681.730:1866): avc: denied { associate } for pid=9555 comm="syz.3.515" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 621.209809][ T30] audit: type=1400 audit(1790196682.680:1867): avc: denied { write } for pid=9551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.306216][ T196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.320828][ T196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.331361][ T196] bond0 (unregistering): Released all slaves [ 621.334261][ T9569] jffs2: notice: (9569) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 621.343643][ T30] audit: type=1400 audit(1790196682.820:1868): avc: denied { mount } for pid=9564 comm="syz.6.517" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 621.573105][ T196] hsr_slave_0: left promiscuous mode [ 621.573752][ T196] hsr_slave_1: left promiscuous mode [ 621.574480][ T196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.574498][ T196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.576579][ T196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.576600][ T196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.578671][ T30] audit: type=1400 audit(1790196683.050:1869): avc: denied { write } for pid=9574 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.626551][ T196] veth1_macvtap: left promiscuous mode [ 621.626600][ T196] veth0_macvtap: left promiscuous mode [ 621.626734][ T196] veth1_vlan: left promiscuous mode [ 621.626793][ T196] veth0_vlan: left promiscuous mode [ 622.526232][ T30] audit: type=1400 audit(1790196684.000:1870): avc: denied { unmount } for pid=9582 comm="syz.7.518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 622.619633][ T196] team0 (unregistering): Port device team_slave_1 removed [ 622.986819][ T30] audit: type=1800 audit(1790196684.450:1871): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.516" name="syzkaller0" dev="sda1" ino=2049 res=0 errno=0 [ 623.735441][ T30] audit: type=1400 audit(1790196685.200:1872): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 624.045083][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.068594][ T196] team0 (unregistering): Port device team_slave_0 removed [ 626.960571][ T9604] fuse: Bad value for 'fd' [ 626.962095][ T30] audit: type=1400 audit(1790196688.430:1873): avc: denied { remount } for pid=9603 comm="syz.6.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 629.487618][ T30] audit: type=1400 audit(1790196690.960:1874): avc: denied { write } for pid=9599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.943860][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.528'. [ 629.999174][ T9627] 9pnet_virtio: no channels available for device syz [ 630.021977][ T9627] fuse: Bad value for 'fd' [ 630.310781][ T30] audit: type=1400 audit(1790196691.780:1875): avc: denied { write } for pid=9633 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.435859][ T9635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9635 comm=syz.6.529 [ 630.461318][ T9635] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 631.961102][ T30] audit: type=1400 audit(1790196693.340:1876): avc: denied { map } for pid=9637 comm="syz.3.530" path="socket:[27236]" dev="sockfs" ino=27236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 631.961277][ T30] audit: type=1400 audit(1790196693.340:1877): avc: denied { read } for pid=9637 comm="syz.3.530" path="socket:[27236]" dev="sockfs" ino=27236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 631.976181][ T30] audit: type=1400 audit(1790196693.450:1878): avc: denied { create } for pid=9637 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 635.091045][ T9281] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 635.189886][ T9281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 635.208752][ T9281] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 635.232305][ T9281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 635.240077][ T9281] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 635.283041][ T9281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 635.288281][ T9281] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 635.355399][ T9281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.383839][ T30] audit: type=1400 audit(1790196696.860:1879): avc: denied { write } for pid=9650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.501116][ T30] audit: type=1400 audit(1790196696.970:1880): avc: denied { write } for pid=9677 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.823690][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 637.220259][ T30] audit: type=1400 audit(1790196698.690:1881): avc: denied { setopt } for pid=9683 comm="syz.6.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 637.535705][ T9320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 637.597187][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.597879][ T9320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 637.636053][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.662290][ T9320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 637.687159][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.726722][ T9320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 637.753488][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.871868][ T30] audit: type=1400 audit(1790196699.340:1882): avc: denied { write } for pid=9685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.991072][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.031376][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 638.083987][ T30] audit: type=1400 audit(1790196699.550:1883): avc: denied { write } for pid=9713 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.130658][ T9281] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.188405][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.188489][ T5881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.275569][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.275664][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.472020][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.585136][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.620521][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.620594][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.680714][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.680787][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.648008][ T30] audit: type=1400 audit(1790196702.120:1884): avc: denied { write } for pid=9721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.837891][ T30] audit: type=1400 audit(1790196702.310:1885): avc: denied { write } for pid=9748 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.987505][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 640.994480][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 641.015964][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 641.016758][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 641.017220][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 641.324862][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 642.618268][ T9782] 9pnet_virtio: no channels available for device syz [ 642.995092][ T9782] fuse: Bad value for 'fd' [ 643.072731][ T5602] Bluetooth: hci5: command tx timeout [ 643.790850][ T30] audit: type=1400 audit(1790196705.260:1886): avc: denied { write } for pid=9771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.862124][ T30] audit: type=1400 audit(1790196705.330:1887): avc: denied { write } for pid=9793 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.055510][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.544'. [ 644.133656][ T9796] XFS (nbd3): Invalid device [./loop0], error=-2 [ 644.732920][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 645.154824][ T5602] Bluetooth: hci5: command tx timeout [ 645.318375][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.7.547'. [ 645.495680][ T30] audit: type=1400 audit(1790196706.970:1888): avc: denied { open } for pid=9811 comm="syz.3.548" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 645.626600][ T30] audit: type=1400 audit(1790196707.100:1889): avc: denied { ioctl } for pid=9811 comm="syz.3.548" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 645.636800][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.665991][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.671424][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.688133][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.690573][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.805241][ T30] audit: type=1400 audit(1790196707.280:1890): avc: denied { bind } for pid=9811 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.980407][ T9824] netlink: 'syz.3.548': attribute type 4 has an invalid length. [ 646.031510][ T30] audit: type=1400 audit(1790196707.500:1891): avc: denied { write } for pid=9811 comm="syz.3.548" path="socket:[27583]" dev="sockfs" ino=27583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 646.217397][ T30] audit: type=1400 audit(1790196707.690:1892): avc: denied { connect } for pid=9815 comm="syz.6.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 646.243471][ T30] audit: type=1400 audit(1790196707.700:1893): avc: denied { bind } for pid=9815 comm="syz.6.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 646.306400][ T30] audit: type=1400 audit(1790196707.780:1894): avc: denied { write } for pid=9806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.440720][ T30] audit: type=1400 audit(1790196707.910:1895): avc: denied { write } for pid=9837 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.719905][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 646.730685][ T5883] bridge_slave_1: left allmulticast mode [ 646.730709][ T5883] bridge_slave_1: left promiscuous mode [ 646.730890][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.760995][ T5883] bridge_slave_0: left allmulticast mode [ 646.761019][ T5883] bridge_slave_0: left promiscuous mode [ 646.763337][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.933299][ T30] audit: type=1400 audit(1790196708.410:1896): avc: denied { create } for pid=9849 comm="syz.6.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 646.935658][ T30] audit: type=1400 audit(1790196708.410:1897): avc: denied { bind } for pid=9849 comm="syz.6.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 646.935864][ T30] audit: type=1400 audit(1790196708.410:1898): avc: denied { name_bind } for pid=9849 comm="syz.6.552" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 646.936080][ T30] audit: type=1400 audit(1790196708.410:1899): avc: denied { node_bind } for pid=9849 comm="syz.6.552" saddr=ff01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 647.132198][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.148823][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.156155][ T5883] bond0 (unregistering): Released all slaves [ 647.197512][ T9851] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 647.233231][ T5598] Bluetooth: hci5: command tx timeout [ 647.312933][ T9855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.415001][ T5883] hsr_slave_0: left promiscuous mode [ 647.419125][ T5883] hsr_slave_1: left promiscuous mode [ 647.420387][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.425191][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.940225][ T5598] Bluetooth: hci0: command tx timeout [ 648.506526][ T9871] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 648.719181][ T5883] team0 (unregistering): Port device team_slave_1 removed [ 648.735789][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 650.236451][ T5598] Bluetooth: hci5: command tx timeout [ 650.441509][ T5598] Bluetooth: hci0: command tx timeout [ 650.821140][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 650.821189][ T30] audit: type=1400 audit(1790196712.250:1901): avc: denied { write } for pid=9874 comm="syz.3.555" name="functions" dev="configfs" ino=19141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 650.821330][ T30] audit: type=1400 audit(1790196712.260:1902): avc: denied { read write } for pid=9874 comm="syz.3.555" name="c_srate" dev="configfs" ino=28835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 650.821455][ T30] audit: type=1400 audit(1790196712.270:1903): avc: denied { open } for pid=9874 comm="syz.3.555" path="/180/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=28835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 650.833324][ T30] audit: type=1400 audit(1790196712.300:1904): avc: denied { ioctl } for pid=9874 comm="syz.3.555" path="/180/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=28835 ioctlcmd=0x587e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 651.078172][ T9880] FAULT_INJECTION: forcing a failure. [ 651.078172][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 651.078238][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.3.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.078268][ T9880] Tainted: [L]=SOFTLOCKUP [ 651.078277][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 651.078294][ T9880] Call Trace: [ 651.078302][ T9880] [ 651.078310][ T9880] dump_stack_lvl+0x100/0x190 [ 651.078349][ T9880] should_fail_ex.cold+0x5/0xa [ 651.078381][ T9880] should_failslab+0xc2/0x120 [ 651.078411][ T9880] kmem_cache_alloc_bulk_noprof+0x77/0x890 [ 651.078437][ T9880] ? __pfx___cant_migrate+0x10/0x10 [ 651.078471][ T9880] xdp_test_run_batch.constprop.0+0x1561/0x1ca0 [ 651.078511][ T9880] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 651.078535][ T9880] ? lock_acquire+0x1d1/0x380 [ 651.078561][ T9880] ? find_held_lock+0x2b/0x80 [ 651.078597][ T9880] ? ktime_get+0x23e/0x320 [ 651.078619][ T9880] ? ktime_get+0x1a4/0x320 [ 651.078648][ T9880] bpf_test_run_xdp_live+0x367/0x760 [ 651.078673][ T9880] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 651.078698][ T9880] ? exp_funnel_lock+0x361/0x3c0 [ 651.078719][ T9880] ? __pfx_exp_funnel_lock+0x10/0x10 [ 651.078744][ T9880] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 651.078766][ T9880] ? find_held_lock+0x2b/0x80 [ 651.078793][ T9880] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 651.078846][ T9880] ? 0xffffffffa04047c0 [ 651.078867][ T9880] ? 0xffffffffa04047c0 [ 651.078885][ T9880] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 651.078922][ T9880] bpf_prog_test_run_xdp+0xd86/0x1670 [ 651.078958][ T9880] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 651.078991][ T9880] ? fput+0x7c/0x100 [ 651.079018][ T9880] ? __bpf_prog_get+0x97/0x290 [ 651.079046][ T9880] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 651.079070][ T9880] __sys_bpf+0x2265/0x4a30 [ 651.079107][ T9880] ? __pfx___sys_bpf+0x10/0x10 [ 651.079129][ T9880] ? find_held_lock+0x2b/0x80 [ 651.079159][ T9880] ? futex_wake+0x4ea/0x5e0 [ 651.079184][ T9880] ? futex_private_hash_put.part.0+0xdc/0x180 [ 651.079213][ T9880] ? futex_private_hash_put+0x24/0x30 [ 651.079245][ T9880] ? __pfx_futex_wake+0x10/0x10 [ 651.079270][ T9880] ? rcu_read_lock_any_held+0x6a/0x90 [ 651.079299][ T9880] ? find_held_lock+0x2b/0x80 [ 651.079326][ T9880] ? ksys_write+0x190/0x250 [ 651.079347][ T9880] ? ksys_write+0x190/0x250 [ 651.079387][ T9880] ? __x64_sys_futex+0x34f/0x4d0 [ 651.079413][ T9880] ? __x64_sys_futex+0x358/0x4d0 [ 651.079444][ T9880] ? xfd_validate_state+0x129/0x190 [ 651.079471][ T9880] ? __x64_sys_bpf+0xce/0x140 [ 651.079491][ T9880] __x64_sys_bpf+0xce/0x140 [ 651.079513][ T9880] ? do_syscall_64+0xae/0x790 [ 651.079546][ T9880] do_syscall_64+0x123/0x790 [ 651.079581][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.079605][ T9880] RIP: 0033:0x7f3a0799e159 [ 651.079624][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.079646][ T9880] RSP: 002b:00007f3a088ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.079678][ T9880] RAX: ffffffffffffffda RBX: 00007f3a07c26090 RCX: 00007f3a0799e159 [ 651.079692][ T9880] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 651.079706][ T9880] RBP: 00007f3a07a3506b R08: 0000000000000000 R09: 0000000000000000 [ 651.079719][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.079732][ T9880] R13: 00007f3a07c26128 R14: 00007f3a07c26090 R15: 00007fff011318b8 [ 651.079764][ T9880] [ 651.758130][ T30] audit: type=1400 audit(1790196713.230:1905): avc: denied { read } for pid=9884 comm="syz.7.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 651.797616][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.797686][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.797820][ T9751] bridge_slave_0: entered allmulticast mode [ 651.799043][ T9751] bridge_slave_0: entered promiscuous mode [ 651.855819][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.855894][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.856009][ T9751] bridge_slave_1: entered allmulticast mode [ 651.860839][ T9751] bridge_slave_1: entered promiscuous mode [ 651.965230][ T9751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.971886][ T9751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.232103][ T9751] team0: Port device team_slave_0 added [ 652.266426][ T9751] team0: Port device team_slave_1 added [ 652.303862][ T30] audit: type=1400 audit(1790196713.780:1906): avc: denied { read } for pid=9900 comm="syz.3.559" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 652.311603][ T30] audit: type=1400 audit(1790196713.780:1907): avc: denied { open } for pid=9900 comm="syz.3.559" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 652.372191][ T30] audit: type=1400 audit(1790196713.840:1908): avc: denied { write } for pid=9889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.514114][ T5598] Bluetooth: hci0: command tx timeout [ 652.740077][ T30] audit: type=1400 audit(1790196714.000:1909): avc: denied { listen } for pid=9900 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 652.740195][ T30] audit: type=1400 audit(1790196714.000:1910): avc: denied { accept } for pid=9900 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 653.330365][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.330395][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.330432][ T9751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.379394][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.379423][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.379459][ T9751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.592499][ T5598] Bluetooth: hci0: command tx timeout [ 654.856003][ T5261] 8021q: adding VLAN 0 to HW filter on device eth21 [ 654.893528][ T9751] hsr_slave_0: entered promiscuous mode [ 654.894301][ T9751] hsr_slave_1: entered promiscuous mode [ 654.894815][ T9751] debugfs: 'hsr0' already exists in 'hsr' [ 654.894828][ T9751] Cannot create hsr debugfs directory [ 655.246452][ T9917] FAULT_INJECTION: forcing a failure. [ 655.246452][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 655.246490][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.3.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.246522][ T9917] Tainted: [L]=SOFTLOCKUP [ 655.246530][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 655.246543][ T9917] Call Trace: [ 655.246551][ T9917] [ 655.246559][ T9917] dump_stack_lvl+0x100/0x190 [ 655.246596][ T9917] should_fail_ex.cold+0x5/0xa [ 655.246626][ T9917] should_failslab+0xc2/0x120 [ 655.246653][ T9917] kmem_cache_alloc_noprof+0x92/0x6a0 [ 655.246676][ T9917] ? d_instantiate+0x8a/0xb0 [ 655.246706][ T9917] ? alloc_empty_file+0x5b/0x1c0 [ 655.246740][ T9917] alloc_empty_file+0x5b/0x1c0 [ 655.246769][ T9917] alloc_file_pseudo+0x183/0x290 [ 655.246800][ T9917] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 655.246829][ T9917] ? alloc_fd+0x471/0x7a0 [ 655.246860][ T9917] sock_alloc_file+0x50/0x210 [ 655.246889][ T9917] __sys_socket+0x1c0/0x260 [ 655.246911][ T9917] ? __pfx___sys_socket+0x10/0x10 [ 655.246934][ T9917] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 655.246965][ T9917] __x64_sys_socket+0x72/0xb0 [ 655.246985][ T9917] ? lockdep_hardirqs_on+0x7d/0x110 [ 655.247025][ T9917] do_syscall_64+0x123/0x790 [ 655.247060][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.247083][ T9917] RIP: 0033:0x7f3a0799e159 [ 655.247101][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.247120][ T9917] RSP: 002b:00007f3a088db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 655.247140][ T9917] RAX: ffffffffffffffda RBX: 00007f3a07c25fa0 RCX: 00007f3a0799e159 [ 655.247154][ T9917] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 655.247167][ T9917] RBP: 00007f3a07a3506b R08: 0000000000000000 R09: 0000000000000000 [ 655.247180][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.247192][ T9917] R13: 00007f3a07c26038 R14: 00007f3a07c25fa0 R15: 00007fff011318b8 [ 655.247220][ T9917] [ 655.336152][ T9917] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 656.975846][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.975976][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.976078][ T9816] bridge_slave_0: entered allmulticast mode [ 656.978541][ T9816] bridge_slave_0: entered promiscuous mode [ 657.009567][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 657.009584][ T30] audit: type=1400 audit(1790196718.480:1916): avc: denied { setopt } for pid=9937 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 657.114081][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.114226][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.114331][ T9816] bridge_slave_1: entered allmulticast mode [ 657.117700][ T9816] bridge_slave_1: entered promiscuous mode [ 657.225425][ T30] audit: type=1400 audit(1790196718.700:1917): avc: denied { write } for pid=9938 comm="syz.3.565" name="subsystems" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 657.229707][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.471721][ T30] audit: type=1400 audit(1790196718.940:1918): avc: denied { write } for pid=9915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.484416][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.606099][ T30] audit: type=1400 audit(1790196719.080:1919): avc: denied { write } for pid=9948 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.756665][ T5261] 8021q: adding VLAN 0 to HW filter on device eth22 [ 657.813560][ T9816] team0: Port device team_slave_0 added [ 657.817401][ T9816] team0: Port device team_slave_1 added [ 657.867925][ T30] audit: type=1400 audit(1790196719.340:1920): avc: denied { accept } for pid=9950 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 657.934811][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.934843][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.934888][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.993922][ T9956] overlayfs: failed to clone upperpath [ 658.015765][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.015823][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.015923][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.442293][ T9816] hsr_slave_0: entered promiscuous mode [ 658.470797][ T9816] hsr_slave_1: entered promiscuous mode [ 658.487363][ T9816] debugfs: 'hsr0' already exists in 'hsr' [ 658.487527][ T9816] Cannot create hsr debugfs directory [ 658.853427][ T30] audit: type=1400 audit(1790196720.330:1921): avc: denied { bind } for pid=9954 comm="syz.6.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 658.884063][ T30] audit: type=1400 audit(1790196720.340:1922): avc: denied { shutdown } for pid=9954 comm="syz.6.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 662.641271][ T30] audit: type=1400 audit(1790196724.110:1923): avc: denied { write } for pid=9966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.807483][ T5883] bridge_slave_1: left allmulticast mode [ 662.807512][ T5883] bridge_slave_1: left promiscuous mode [ 662.807687][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.834029][ T5883] bridge_slave_0: left allmulticast mode [ 662.834056][ T5883] bridge_slave_0: left promiscuous mode [ 662.834226][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.018359][ T30] audit: type=1400 audit(1790196724.490:1924): avc: denied { write } for pid=9987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.651496][ T9994] jffs2: notice: (9994) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 663.680720][ T9995] gadgetfs: bound to dummy_udc driver [ 663.726159][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.737203][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.755671][ T5883] bond0 (unregistering): Released all slaves [ 663.922483][ T5585] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 663.922701][ C1] gadgetfs: connected [ 663.922833][ T5585] gadgetfs: disconnected [ 663.989657][ T5261] 8021q: adding VLAN 0 to HW filter on device eth24 [ 664.007664][ T5883] hsr_slave_0: left promiscuous mode [ 664.008144][ T5883] hsr_slave_1: left promiscuous mode [ 664.021431][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.038250][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.079130][ C1] gadgetfs: connected [ 664.079267][ T5585] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 664.079867][ T5585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.107433][ C1] gadgetfs: configuration #1 [ 664.116179][ T5585] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11 [ 664.126251][ T30] audit: type=1400 audit(1790196725.590:1925): avc: denied { read } for pid=4951 comm="acpid" name="mouse1" dev="devtmpfs" ino=2917 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 664.126304][ T30] audit: type=1400 audit(1790196725.590:1926): avc: denied { open } for pid=4951 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2917 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 664.126344][ T30] audit: type=1400 audit(1790196725.600:1927): avc: denied { ioctl } for pid=4951 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2917 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 664.448030][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'. [ 664.459265][ T9990] gadgetfs: suspended from state 3 [ 664.459919][ T983] usb 1-1: USB disconnect, device number 4 [ 664.465599][ T9990] gadgetfs: disconnected [ 665.039999][ T5883] team0 (unregistering): Port device team_slave_1 removed [ 665.076958][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 665.758518][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.577'. [ 665.758714][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.921655][T10019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.032685][ T5781] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 666.147932][ T30] audit: type=1400 audit(1790196727.620:1928): avc: denied { write } for pid=10022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.223598][ T5781] usb 4-1: Using ep0 maxpacket: 32 [ 666.224260][ T5781] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 666.225139][ T5781] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 666.225162][ T5781] usb 4-1: config 0 has no interface number 0 [ 666.225197][ T5781] usb 4-1: config 0 interface 184 has no altsetting 0 [ 666.227046][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.227069][ T5781] usb 4-1: Product: syz [ 666.227084][ T5781] usb 4-1: Manufacturer: syz [ 666.227098][ T5781] usb 4-1: SerialNumber: syz [ 666.259098][ T5781] usb 4-1: config 0 descriptor?? [ 667.996827][ T30] audit: type=1400 audit(1790196729.470:1929): avc: denied { write } for pid=10040 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.100150][ T9751] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 668.119068][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.125817][ T9751] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 668.150633][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.170976][ T9751] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 668.208697][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.214727][ T9751] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 668.244017][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.246845][ T5261] 8021q: adding VLAN 0 to HW filter on device eth23 [ 668.371089][ T5781] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 668.371124][ T5781] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 668.701483][ T30] audit: type=1400 audit(1790196730.170:1930): avc: denied { ioctl } for pid=10015 comm="syz.3.576" path="socket:[29911]" dev="sockfs" ino=29911 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 668.971292][ T30] audit: type=1400 audit(1790196730.440:1931): avc: denied { write } for pid=10050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.267356][ T30] audit: type=1400 audit(1790196730.740:1932): avc: denied { write } for pid=10070 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.833551][ T5781] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 670.833582][ T5781] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 670.833603][ T5781] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 670.833628][ T5781] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 670.834152][ T5781] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 670.874223][ T9751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.910833][ T5781] usb 4-1: USB disconnect, device number 14 [ 670.992019][ T9751] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.081970][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.082111][ T6832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.182121][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.182260][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.371874][ T9751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 671.371898][ T9751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 671.552875][ T30] audit: type=1400 audit(1790196733.030:1933): avc: denied { write } for pid=10077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.973674][ T30] audit: type=1400 audit(1790196733.380:1934): avc: denied { write } for pid=10086 comm="syz.7.584" path="socket:[30030]" dev="sockfs" ino=30030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 672.625019][ T30] audit: type=1400 audit(1790196734.100:1935): avc: denied { write } for pid=10088 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 672.665381][T10094] syz.3.585 uses obsolete (PF_INET,SOCK_PACKET) [ 672.771991][ T30] audit: type=1400 audit(1790196734.240:1936): avc: denied { read } for pid=10088 comm="syz.3.585" path="socket:[29531]" dev="sockfs" ino=29531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 673.081111][ T9816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 673.112545][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.114013][ T9816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 673.135838][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.140162][ T9816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 673.171106][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.185491][ T9816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 673.203992][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.322660][ T30] audit: type=1400 audit(1790196734.790:1937): avc: denied { write } for pid=10104 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.804192][T10117] ip6gretap1: left allmulticast mode [ 674.378385][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.439621][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.469740][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.469820][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.524198][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.524271][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.787297][ T30] audit: type=1400 audit(1790196736.260:1938): avc: denied { read write } for pid=10106 comm="syz.3.587" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 674.787624][ T30] audit: type=1400 audit(1790196736.260:1939): avc: denied { open } for pid=10106 comm="syz.3.587" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 675.050069][ T9751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.146626][ T30] audit: type=1400 audit(1790196736.610:1940): avc: denied { execute } for pid=10136 comm="syz.3.589" path="/dev/dsp" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 675.247041][ T30] audit: type=1400 audit(1790196736.720:1941): avc: denied { bind } for pid=10136 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 675.248826][ T30] audit: type=1400 audit(1790196736.720:1942): avc: denied { name_bind } for pid=10136 comm="syz.3.589" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 675.250840][ T30] audit: type=1400 audit(1790196736.720:1943): avc: denied { node_bind } for pid=10136 comm="syz.3.589" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 675.987032][ T30] audit: type=1400 audit(1790196737.460:1944): avc: denied { watch } for pid=10136 comm="syz.3.589" path="/190/file0" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 676.065485][T10142] jffs2: notice: (10142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 678.902379][ T30] audit: type=1400 audit(1790196740.370:1945): avc: denied { write } for pid=10124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.194564][ T9751] veth0_vlan: entered promiscuous mode [ 679.308602][T10172] 9pnet_virtio: no channels available for device syz [ 679.363544][ T9751] veth1_vlan: entered promiscuous mode [ 680.207359][ T30] audit: type=1400 audit(1790196741.680:1946): avc: denied { write } for pid=10173 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.415425][ T9751] veth0_macvtap: entered promiscuous mode [ 680.449432][ T9751] veth1_macvtap: entered promiscuous mode [ 681.642220][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.716765][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.852839][ T5819] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.852886][ T5819] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.852910][ T5819] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.852934][ T5819] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.950590][ T30] audit: type=1400 audit(1790196743.420:1947): avc: denied { watch } for pid=10184 comm="syz.3.595" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 682.070079][ T30] audit: type=1400 audit(1790196743.540:1948): avc: denied { read write } for pid=10184 comm="syz.3.595" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 682.070133][ T30] audit: type=1400 audit(1790196743.540:1949): avc: denied { open } for pid=10184 comm="syz.3.595" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 682.129552][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.140736][ T8378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.140761][ T8378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.368876][ T5881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.368897][ T5881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.426403][ T30] audit: type=1400 audit(1790196743.900:1950): avc: denied { mounton } for pid=9751 comm="syz-executor" path="/root/syzkaller.nKTJQn/syz-tmp" dev="sda1" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 682.475372][ T30] audit: type=1400 audit(1790196743.910:1951): avc: denied { mounton } for pid=9751 comm="syz-executor" path="/root/syzkaller.nKTJQn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 682.475428][ T30] audit: type=1400 audit(1790196743.950:1952): avc: denied { mounton } for pid=9751 comm="syz-executor" path="/root/syzkaller.nKTJQn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 682.514637][ T30] audit: type=1400 audit(1790196743.960:1953): avc: denied { checkpoint_restore } for pid=10184 comm="syz.3.595" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 682.537449][ T9816] veth0_vlan: entered promiscuous mode [ 682.556298][ T30] audit: type=1400 audit(1790196744.030:1954): avc: denied { mounton } for pid=9751 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 682.610015][ T9816] veth1_vlan: entered promiscuous mode [ 682.800665][ T9816] veth0_macvtap: entered promiscuous mode [ 682.832120][ T9816] veth1_macvtap: entered promiscuous mode [ 682.934583][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.975313][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.056350][ T6832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.056424][ T6832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.056455][ T6832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.056486][ T6832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.927452][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 683.927484][ T30] audit: type=1326 audit(1790196745.400:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 683.927610][ T30] audit: type=1326 audit(1790196745.400:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 683.929446][ T30] audit: type=1326 audit(1790196745.400:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.002956][ T30] audit: type=1326 audit(1790196745.450:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.003007][ T30] audit: type=1326 audit(1790196745.450:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.003049][ T30] audit: type=1326 audit(1790196745.480:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.003090][ T30] audit: type=1326 audit(1790196745.480:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.003132][ T30] audit: type=1326 audit(1790196745.480:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.003176][ T30] audit: type=1326 audit(1790196745.480:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.003217][ T30] audit: type=1326 audit(1790196745.480:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.9.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ddd9e159 code=0x7ffc0000 [ 684.010090][ T5881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.010108][ T5881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.265827][ T5819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.265846][ T5819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.725680][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.597'. [ 684.725721][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.597'. [ 685.917049][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.800243][T10242] 9pnet_virtio: no channels available for device syz [ 687.813443][T10242] fuse: Bad value for 'fd' [ 688.111249][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.9.605'. [ 688.111357][T10249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.182573][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 688.336963][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 688.337882][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 688.337908][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.337927][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 688.337967][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.395115][T10249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.402254][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 688.402281][ T25] usb 4-1: Product: syz [ 688.402296][ T25] usb 4-1: Manufacturer: syz [ 688.820875][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 688.820895][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 688.897206][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 688.897229][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 689.179144][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 689.179176][ T30] audit: type=1400 audit(1790196750.650:2006): avc: denied { read write } for pid=10243 comm="syz.3.604" name="cdc-wdm0" dev="devtmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 689.179267][ T30] audit: type=1400 audit(1790196750.650:2007): avc: denied { open } for pid=10243 comm="syz.3.604" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 689.542936][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.548265][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.517206][ T5717] usb 4-1: USB disconnect, device number 15 [ 693.217651][ T30] audit: type=1400 audit(1790196754.690:2008): avc: denied { remount } for pid=10281 comm="syz.9.610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 693.578341][ T30] audit: type=1400 audit(1790196755.050:2009): avc: denied { read } for pid=10298 comm="syz.3.613" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 693.578420][ T30] audit: type=1400 audit(1790196755.050:2010): avc: denied { open } for pid=10298 comm="syz.3.613" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 693.605441][ T30] audit: type=1400 audit(1790196755.060:2011): avc: denied { ioctl } for pid=10298 comm="syz.3.613" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 693.938241][ T30] audit: type=1400 audit(1790196755.410:2012): avc: denied { ioctl } for pid=10298 comm="syz.3.613" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 694.520957][T10316] 9pnet_virtio: no channels available for device syz [ 694.551538][T10316] fuse: Bad value for 'fd' [ 694.743131][ T30] audit: type=1400 audit(1790196756.220:2013): avc: denied { read write } for pid=10295 comm="syz.2.611" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 696.106444][T10337] 9pnet_virtio: no channels available for device syz [ 696.107294][T10327] netlink: 36 bytes leftover after parsing attributes in process `syz.7.617'. [ 696.107332][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.617'. [ 696.107365][T10327] netlink: 36 bytes leftover after parsing attributes in process `syz.7.617'. [ 696.900695][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 696.955511][ T30] audit: type=1400 audit(1790196758.430:2014): avc: denied { write } for pid=10287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.238960][ T30] audit: type=1400 audit(1790196758.710:2015): avc: denied { write } for pid=10347 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.303694][ T30] audit: type=1400 audit(1790196758.780:2016): avc: denied { ioctl } for pid=10348 comm="syz.2.622" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 697.594984][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 697.809713][T10360] netlink: 28 bytes leftover after parsing attributes in process `syz.9.623'. [ 698.215334][T10362] Cannot find set identified by id 0 to match [ 698.952664][T10371] fuse: Bad value for 'fd' [ 700.687250][T10385] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 700.687279][T10385] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 700.691248][T10385] vhci_hcd vhci_hcd.0: Device attached [ 701.197727][T10386] vhci_hcd: connection closed [ 701.397778][T10384] 9pnet_virtio: no channels available for device syz [ 701.804842][ T1107] vhci_hcd vhci_hcd.2: stop threads [ 702.306826][ T1107] vhci_hcd vhci_hcd.2: release socket [ 702.308005][ T1107] vhci_hcd vhci_hcd.2: disconnect device [ 702.417053][ T983] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 703.353572][T10401] Cannot find add_set index 2 as target [ 704.130552][ T30] audit: type=1400 audit(1790196765.100:2017): avc: denied { write } for pid=10394 comm="syz.9.630" path="socket:[31652]" dev="sockfs" ino=31652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 704.236683][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.421265][ T30] audit: type=1400 audit(1790196765.890:2018): avc: denied { bind } for pid=10404 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 706.242374][T10413] 9pnet_virtio: no channels available for device syz [ 706.264650][T10413] fuse: Bad value for 'fd' [ 706.292756][ T5781] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 706.448442][ T5781] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 706.463498][ T5781] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 706.463524][ T5781] usb 4-1: config 0 has no interface number 0 [ 706.463563][ T5781] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 706.463589][ T5781] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 706.463616][ T5781] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 706.471745][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 706.471781][ T5781] usb 4-1: Product: syz [ 706.471796][ T5781] usb 4-1: SerialNumber: syz [ 706.554785][ T5781] usb 4-1: config 0 descriptor?? [ 706.570446][ T5781] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 706.582705][ T5781] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 706.755375][ T30] audit: type=1400 audit(1790196768.230:2019): avc: denied { write } for pid=10378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.870961][T10420] xt_hashlimit: max too large, truncated to 1048576 [ 707.178884][ T30] audit: type=1400 audit(1790196768.650:2020): avc: denied { setopt } for pid=10404 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 707.387330][ T30] audit: type=1400 audit(1790196768.860:2021): avc: denied { write } for pid=10426 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.550566][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.632'. [ 708.573569][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.632'. [ 708.579245][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.632'. [ 708.606702][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.632'. [ 708.651134][T10439] 9pnet_virtio: no channels available for device syz [ 711.116257][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 711.118283][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 711.118503][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 711.118602][T10045] usb 4-1: USB disconnect, device number 16 [ 711.118705][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 711.118730][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 711.231022][T10045] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 711.356608][ T30] audit: type=1400 audit(1790196772.830:2022): avc: denied { listen } for pid=10450 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 711.462806][T10456] 9pnet_virtio: no channels available for device syz [ 711.731837][T10447] overlayfs: failed to clone upperpath [ 711.762739][T10045] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 711.912558][T10045] usb 4-1: Using ep0 maxpacket: 32 [ 711.915276][T10045] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 711.921100][T10045] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 711.980317][T10045] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 711.980378][T10045] usb 4-1: Product: syz [ 711.980439][T10045] usb 4-1: Manufacturer: syz [ 711.980497][T10045] usb 4-1: SerialNumber: syz [ 712.046477][T10045] usb 4-1: config 0 descriptor?? [ 712.049545][T10455] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 712.088779][T10045] hub 4-1:0.0: bad descriptor, ignoring hub [ 712.089048][T10045] hub 4-1:0.0: probe with driver hub failed with error -5 [ 712.778840][T10451] deleting an unspecified loop device is not supported. [ 712.806310][T10451] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 712.806310][T10451] [ 712.806578][T10451] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 712.806656][T10451] CIFS: Attempting to mount //127.0.0.1/share [ 712.895285][T10451] CIFS: VFS: Error connecting to socket. Aborting operation. [ 712.895336][T10451] CIFS: VFS: cifs_mount failed w/return code = -4 [ 713.062709][ T983] usb 4-1: USB disconnect, device number 17 [ 713.295887][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.644'. [ 713.819114][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 713.875035][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 714.568350][ T30] audit: type=1400 audit(1790196776.040:2023): avc: denied { mount } for pid=10468 comm="syz.7.645" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 714.669869][T10469] netlink: 392 bytes leftover after parsing attributes in process `syz.7.645'. [ 716.356151][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.356178][T10481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.423483][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.423508][T10481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.550679][ T30] audit: type=1400 audit(1790196778.020:2024): avc: denied { write } for pid=10460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.618428][T10492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.901459][ T30] audit: type=1400 audit(1790196780.370:2025): avc: denied { write } for pid=10500 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.007333][ T30] audit: type=1400 audit(1790196780.480:2026): avc: denied { watch } for pid=10502 comm="syz.6.650" path="/120" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 719.248935][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.650'. [ 720.183127][ T30] audit: type=1326 audit(1790196781.660:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.2.652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08edf9e159 code=0x7ffc0000 [ 720.184266][ T30] audit: type=1326 audit(1790196781.660:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.2.652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08edf9e159 code=0x7ffc0000 [ 720.190834][ T30] audit: type=1326 audit(1790196781.660:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.2.652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f08edf9e159 code=0x7ffc0000 [ 720.385642][ T30] audit: type=1400 audit(1790196781.860:2030): avc: denied { write } for pid=10512 comm="syz.7.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 722.502514][T10536] XFS (nbd9): Invalid device [./loop0], error=-2 [ 724.971657][T10538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.324489][T10553] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 726.835232][ T30] audit: type=1400 audit(1790196788.310:2031): avc: denied { write } for pid=10518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.100707][T10560] ªªªªª»: renamed from dummy0 (while UP) [ 727.193416][ T30] audit: type=1400 audit(1790196788.630:2032): avc: denied { create } for pid=10554 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 727.193528][ T30] audit: type=1400 audit(1790196788.640:2033): avc: denied { write } for pid=10554 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 727.536739][ T5585] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 727.714585][ T5585] usb 4-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice= 1.00 [ 727.732180][ T5585] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.732245][ T5585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.784718][ T5585] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 727.841272][ T5585] cdc_acm 4-1:1.1: Zero length descriptor references [ 727.841304][ T5585] cdc_acm 4-1:1.1: probe with driver cdc_acm failed with error -22 [ 727.916699][ T30] audit: type=1400 audit(1790196789.390:2034): avc: denied { write } for pid=10566 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.147056][ T30] audit: type=1400 audit(1790196789.620:2035): avc: denied { mount } for pid=10562 comm="syz.3.662" name="/" dev="rpc_pipefs" ino=31926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 728.365783][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.366158][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.397570][ T30] audit: type=1400 audit(1790196789.870:2036): avc: denied { write } for pid=10574 comm="syz.2.664" path="socket:[30665]" dev="sockfs" ino=30665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 728.397730][T10576] Bluetooth: MGMT ver 1.23 [ 728.455830][ T7802] usb 4-1: USB disconnect, device number 18 [ 728.702917][T10584] jffs2: notice: (10584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 728.848488][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'. [ 728.884635][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'. [ 728.885187][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'. [ 728.898625][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'. [ 728.898847][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'. [ 728.981531][T10588] syz.6.666: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 728.981633][T10588] CPU: 0 UID: 0 PID: 10588 Comm: syz.6.666 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.981652][T10588] Tainted: [L]=SOFTLOCKUP [ 728.981656][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 728.981664][T10588] Call Trace: [ 728.981668][T10588] [ 728.981673][T10588] dump_stack_lvl+0x100/0x190 [ 728.981696][T10588] warn_alloc.cold+0x9e/0xb2 [ 728.981710][T10588] ? __pfx_warn_alloc+0x10/0x10 [ 728.981721][T10588] ? __kasan_kmalloc+0xaa/0xb0 [ 728.981733][T10588] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 728.981749][T10588] ? xskq_create+0x52/0x290 [ 728.981765][T10588] ? do_sock_setsockopt+0xf3/0x1d0 [ 728.981783][T10588] ? do_syscall_64+0x123/0x790 [ 728.981799][T10588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.981818][T10588] ? xsk_setsockopt+0x56f/0xab0 [ 728.981833][T10588] __vmalloc_node_range_noprof+0x123b/0x1420 [ 728.981856][T10588] ? xsk_setsockopt+0x56f/0xab0 [ 728.981873][T10588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.981888][T10588] ? kasan_save_track+0x14/0x30 [ 728.981907][T10588] ? __kasan_kmalloc+0xaa/0xb0 [ 728.981920][T10588] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 728.981939][T10588] ? xskq_create+0x52/0x290 [ 728.981954][T10588] ? xsk_setsockopt+0x56f/0xab0 [ 728.981969][T10588] xskq_create+0x18f/0x290 [ 728.981984][T10588] ? xsk_setsockopt+0x56f/0xab0 [ 728.982001][T10588] xsk_setsockopt+0x56f/0xab0 [ 728.982016][T10588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.982031][T10588] ? find_held_lock+0x2b/0x80 [ 728.982047][T10588] ? __fget_files+0x215/0x3d0 [ 728.982064][T10588] ? selinux_socket_setsockopt+0x6a/0x80 [ 728.982077][T10588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.982092][T10588] do_sock_setsockopt+0xf3/0x1d0 [ 728.982110][T10588] __sys_setsockopt+0x195/0x220 [ 728.982128][T10588] __x64_sys_setsockopt+0xbd/0x160 [ 728.982143][T10588] ? do_syscall_64+0xae/0x790 [ 728.982159][T10588] ? lockdep_hardirqs_on+0x7d/0x110 [ 728.982176][T10588] do_syscall_64+0x123/0x790 [ 728.982194][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.982206][T10588] RIP: 0033:0x7fafb3b9e159 [ 728.982217][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.982227][T10588] RSP: 002b:00007fafb4ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 728.982239][T10588] RAX: ffffffffffffffda RBX: 00007fafb3e26090 RCX: 00007fafb3b9e159 [ 728.982246][T10588] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000f [ 728.982254][T10588] RBP: 00007fafb3c3506b R08: 0000000000000004 R09: 0000000000000000 [ 728.982261][T10588] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.982269][T10588] R13: 00007fafb3e26128 R14: 00007fafb3e26090 R15: 00007ffd85059438 [ 728.982285][T10588] [ 728.982344][T10588] Mem-Info: [ 728.982353][T10588] active_anon:14612 inactive_anon:10 isolated_anon:1825 [ 728.982353][T10588] active_file:115 inactive_file:26206 isolated_file:0 [ 728.982353][T10588] unevictable:1024 dirty:399 writeback:0 [ 728.982353][T10588] slab_reclaimable:9451 slab_unreclaimable:102643 [ 728.982353][T10588] mapped:33659 shmem:9496 pagetables:1718 [ 728.982353][T10588] sec_pagetables:0 bounce:0 [ 728.982353][T10588] kernel_misc_reclaimable:0 [ 728.982353][T10588] free:1317204 free_pcp:13429 free_cma:0 [ 728.986708][T10588] Node 0 active_anon:58348kB inactive_anon:40kB active_file:460kB inactive_file:104696kB unevictable:4096kB isolated(anon):7300kB isolated(file):0kB mapped:134636kB dirty:1596kB writeback:0kB shmem:37784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13808kB pagetables:6740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.986804][T10588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.986873][T10588] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 728.986948][T10588] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 728.987011][T10588] Node 0 DMA32 free:1303068kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:58348kB inactive_anon:40kB active_file:460kB inactive_file:104696kB unevictable:4096kB writepending:1596kB zspages:0kB present:3129332kB managed:2530468kB mlocked:0kB bounce:0kB free_pcp:53680kB local_pcp:28412kB free_cma:0kB [ 728.987129][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 728.987176][T10588] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.987260][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 728.999781][T10588] Node 1 Normal free:3950420kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.999859][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 728.999947][T10588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 729.000189][T10588] Node 0 DMA32: 2364*4kB (UM) 1483*8kB (UME) 1114*16kB (UME) 303*32kB (UME) 292*64kB (UME) 384*128kB (UME) 82*256kB (UME) 96*512kB (UME) 34*1024kB (M) 6*2048kB (M) 261*4096kB (UM) = 1302984kB [ 729.000446][T10588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 729.000613][T10588] Node 1 Normal: 7*4kB (UM) 5*8kB (UM) 7*16kB (UM) 7*32kB (UM) 9*64kB (UM) 7*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950420kB [ 729.031908][T10588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.031938][T10588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.031968][T10588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.031996][T10588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.032025][T10588] 35609 total pagecache pages [ 729.032033][T10588] 0 pages in swap cache [ 729.032059][T10588] Free swap = 124996kB [ 729.032067][T10588] Total swap = 124996kB [ 729.032089][T10588] 2097051 pages RAM [ 729.032095][T10588] 0 pages HighMem/MovableOnly [ 729.032102][T10588] 432801 pages reserved [ 729.032123][T10588] 0 pages cma reserved [ 729.071384][T10592] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 729.071419][T10592] netlink: 212 bytes leftover after parsing attributes in process `syz.2.667'. [ 730.563530][T10577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.849698][ T30] audit: type=1400 audit(1790196792.320:2037): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 731.339781][ T30] audit: type=1400 audit(1790196792.810:2038): avc: denied { write } for pid=10573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.472162][ T30] audit: type=1400 audit(1790196792.940:2039): avc: denied { block_suspend } for pid=10601 comm="syz.6.670" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 731.856032][T10611] XFS (nbd9): Invalid device [./loop0], error=-2 [ 732.707962][ T30] audit: type=1400 audit(1790196794.180:2040): avc: denied { write } for pid=10610 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.148955][T10624] netlink: 'syz.9.671': attribute type 2 has an invalid length. [ 736.339532][T10626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.876269][ T30] audit: type=1400 audit(1790196798.330:2041): avc: denied { map } for pid=10652 comm="syz.3.674" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.876428][ T30] audit: type=1400 audit(1790196798.330:2042): avc: denied { set_context_mgr } for pid=10652 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 737.714423][T10661] mac80211_hwsim hwsim14 »»»»»»: renamed from wlan0 (while UP) [ 737.802301][ T30] audit: type=1400 audit(1790196799.270:2043): avc: denied { mount } for pid=10651 comm="syz.7.675" name="/" dev="ramfs" ino=32064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 737.855262][T10661] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 739.700740][ T30] audit: type=1400 audit(1790196801.170:2044): avc: denied { write } for pid=10629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.821571][ T30] audit: type=1400 audit(1790196801.290:2045): avc: denied { write } for pid=10670 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.953718][ T30] audit: type=1400 audit(1790196801.430:2046): avc: denied { append } for pid=10673 comm="syz.3.678" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 741.106999][T10674] /dev/sg0: Can't lookup blockdev [ 741.108255][ T30] audit: type=1400 audit(1790196802.580:2047): avc: denied { write } for pid=10673 comm="syz.3.678" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 741.281311][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 742.242198][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.9.680'. [ 742.243081][T10698] bridge_slave_1: left allmulticast mode [ 742.243178][T10698] bridge_slave_1: left promiscuous mode [ 742.247358][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.669172][T10698] bridge_slave_0: left allmulticast mode [ 742.669437][T10698] bridge_slave_0: left promiscuous mode [ 742.670572][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.350589][T10719] tipc: Started in network mode [ 744.350619][T10719] tipc: Node identity ac14140f, cluster identity 4711 [ 744.354071][T10719] tipc: New replicast peer: 255.255.255.255 [ 744.354800][T10719] tipc: Enabled bearer , priority 10 [ 744.389204][T10719] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001 [ 744.389671][T10719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10719 comm=syz.7.684 [ 744.390090][T10719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=273 sclass=netlink_route_socket pid=10719 comm=syz.7.684 [ 746.353121][ T5717] tipc: Node number set to 2886997007 [ 746.961585][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.843631][ T30] audit: type=1400 audit(1790196810.320:2048): avc: denied { write } for pid=10708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.975416][ T30] audit: type=1400 audit(1790196810.450:2049): avc: denied { write } for pid=10749 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.856585][T10782] XFS (nbd2): Invalid device [./loop0], error=-2 [ 756.254888][ T30] audit: type=1400 audit(1790196817.730:2050): avc: denied { write } for pid=10751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.496391][T10792] jffs2: notice: (10792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 756.541007][T10793] Set syz1 is full, maxelem 2076 reached [ 756.711070][T10793] input: syz0 as /devices/virtual/input/input13 [ 756.758943][ T30] audit: type=1400 audit(1790196818.230:2051): avc: denied { write } for pid=10801 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.982541][ T5697] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 757.352619][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 757.353585][ T5697] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 757.355190][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.355240][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 757.358400][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.358452][ T5697] usb 3-1: Product: syz [ 757.358467][ T5697] usb 3-1: Manufacturer: syz [ 757.358496][ T5697] usb 3-1: SerialNumber: syz [ 757.474672][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.7.702'. [ 757.478282][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.7.702'. [ 758.995464][ T30] audit: type=1400 audit(1790196820.470:2052): avc: denied { read } for pid=10826 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 759.203088][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 759.507129][ T30] audit: type=1400 audit(1790196820.980:2053): avc: denied { name_bind } for pid=10844 comm="syz.6.706" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 759.534326][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.705'. [ 759.535773][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.705'. [ 759.536423][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.705'. [ 759.536969][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.705'. [ 759.537292][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.705'. [ 759.541782][T10841] 9pnet_virtio: no channels available for device syz [ 759.562099][T10841] fuse: Bad value for 'fd' [ 759.888790][ T5697] usb 3-1: USB disconnect, device number 2 [ 759.920766][T10845] F2FS-fs: Conflicting test_dummy_encryption options [ 759.995085][ T30] audit: type=1400 audit(1790196821.470:2054): avc: denied { write } for pid=10807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.703513][T10802] udevd[10802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.386323][ T5697] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 762.108748][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 762.148080][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.148110][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.148141][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.200500][ T5697] usb 4-1: config 0 descriptor?? [ 762.333585][ T30] audit: type=1400 audit(1790196823.790:2055): avc: denied { write } for pid=10869 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.439682][T10875] Bluetooth: hci5: unexpected event for opcode 0x0035 [ 762.888974][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.714'. [ 763.061615][T10878] serio: Serial port ttynull [ 763.906476][T10866] overlayfs: failed to clone upperpath [ 763.936299][T10875] Bluetooth: hci5: unexpected event for opcode 0x2010 [ 764.134485][T10885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10885 comm=syz.2.714 [ 764.166975][ T5697] usbhid 4-1:0.0: can't add hid device: -71 [ 764.167138][ T5697] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 764.217147][ T5697] usb 4-1: USB disconnect, device number 19 [ 765.980349][T10902] XFS (nbd2): Invalid device [./loop0], error=-2 [ 767.207141][ T30] audit: type=1400 audit(1790196828.680:2056): avc: denied { map } for pid=10912 comm="syz.3.719" path="socket:[33040]" dev="sockfs" ino=33040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 768.447751][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.6.722'. [ 768.555857][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.723'. [ 768.556656][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.723'. [ 768.556952][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.723'. [ 768.557189][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.723'. [ 768.557394][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.723'. [ 768.617353][T10930] 9pnet_virtio: no channels available for device syz [ 768.647123][T10930] fuse: Bad value for 'fd' [ 769.521625][ T5598] Bluetooth: hci0: command 0x0406 tx timeout [ 770.593419][ T30] audit: type=1400 audit(1790196832.070:2057): avc: denied { write } for pid=10890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.862613][ T30] audit: type=1400 audit(1790196832.330:2058): avc: denied { write } for pid=10935 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.972501][T10941] jffs2: notice: (10941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 772.680160][T10953] XFS (nbd9): Invalid device [./loop0], error=-2 [ 773.639178][T10969] XFS (nbd3): Invalid device [./loop0], error=-2 [ 774.022768][T10973] 9pnet_virtio: no channels available for device syz [ 774.908905][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.9.732'. [ 775.020540][T10984] XFS (nbd2): Invalid device [./loop0], error=-2 [ 776.013289][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 776.019547][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 776.032687][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 776.036849][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 776.049004][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 776.058248][T10986] 9pnet_virtio: no channels available for device syz [ 777.309486][ T30] audit: type=1400 audit(1790196838.780:2059): avc: denied { write } for pid=10961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.442048][ T30] audit: type=1400 audit(1790196838.910:2060): avc: denied { create } for pid=10995 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 777.504403][ T30] audit: type=1400 audit(1790196838.980:2061): avc: denied { append } for pid=10995 comm="syz.2.736" name="v4l-subdev5" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 777.579902][ T30] audit: type=1400 audit(1790196839.050:2062): avc: denied { write } for pid=10994 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.812497][ T30] audit: type=1400 audit(1790196841.280:2063): avc: denied { read } for pid=10995 comm="syz.2.736" path="socket:[32552]" dev="sockfs" ino=32552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 780.005726][T11017] XFS (nbd3): Invalid device [./loop0], error=-2 [ 781.581199][T11034] XFS (nbd3): Invalid device [./loop0], error=-2 [ 782.354614][T11016] No source specified [ 783.084629][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.748'. [ 783.085280][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.748'. [ 783.085547][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.748'. [ 783.085748][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.748'. [ 783.085883][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.748'. [ 783.086707][T11041] 9pnet_virtio: no channels available for device syz [ 783.143842][T11041] fuse: Bad value for 'fd' [ 783.229069][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 783.231586][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 783.231867][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 783.232101][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 783.245388][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 783.271200][T11046] 9pnet_virtio: no channels available for device syz [ 784.052881][T10875] Bluetooth: hci5: connection err: -111 [ 788.034495][T11075] XFS (nbd3): Invalid device [./loop0], error=-2 [ 789.780765][ T30] audit: type=1400 audit(1790196851.250:2064): avc: denied { watch watch_reads } for pid=11083 comm="syz.3.760" path="pipe:[33317]" dev="pipefs" ino=33317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 789.882960][T11098] __nla_validate_parse: 1 callbacks suppressed [ 789.883022][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.763'. [ 789.889610][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.763'. [ 789.891873][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.763'. [ 789.901438][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.763'. [ 789.920051][T11098] 9pnet_virtio: no channels available for device syz [ 790.818869][ T30] audit: type=1400 audit(1790196852.280:2065): avc: denied { write } for pid=11036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.095246][ T30] audit: type=1400 audit(1790196852.570:2066): avc: denied { write } for pid=11103 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.324206][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.9.764'. [ 791.349711][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.9.764'. [ 791.352361][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.9.764'. [ 791.353334][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.9.764'. [ 791.367399][T11108] 9pnet_virtio: no channels available for device syz [ 794.631090][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 794.647545][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 794.688730][T11132] 9pnet_virtio: no channels available for device syz [ 795.578029][T11137] __nla_validate_parse: 3 callbacks suppressed [ 795.578048][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.6.770'. [ 795.954432][ T30] audit: type=1400 audit(1790196857.400:2067): avc: denied { mount } for pid=11133 comm="syz.6.770" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 796.262780][T11149] XFS (nbd9): Invalid device [./loop0], error=-2 [ 797.496347][T11161] XFS (nbd3): Invalid device [./loop0], error=-2 [ 799.450934][ T30] audit: type=1400 audit(1790196860.920:2068): avc: denied { listen } for pid=11169 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 799.559480][ T30] audit: type=1400 audit(1790196861.030:2069): avc: denied { write } for pid=11116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.834613][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 799.835313][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 799.835613][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 799.835878][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 799.835997][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 800.182900][T11182] 9pnet_virtio: no channels available for device syz [ 800.314678][T11182] fuse: Bad value for 'fd' [ 801.306259][ T30] audit: type=1400 audit(1790196862.720:2070): avc: denied { write } for pid=11188 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.485870][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.785'. [ 801.488024][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.785'. [ 802.364009][ T30] audit: type=1400 audit(1790196863.820:2071): avc: denied { append } for pid=11198 comm="syz.2.787" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 802.364110][ T30] audit: type=1400 audit(1790196863.820:2072): avc: denied { open } for pid=11198 comm="syz.2.787" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 802.364179][ T30] audit: type=1400 audit(1790196863.820:2073): avc: denied { ioctl } for pid=11198 comm="syz.2.787" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 802.524766][ T30] audit: type=1400 audit(1790196864.000:2074): avc: denied { write } for pid=11197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.826600][ T30] audit: type=1400 audit(1790196864.300:2075): avc: denied { write } for pid=11226 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.369901][T11220] XFS (nbd9): Invalid device [./loop0], error=-2 [ 805.608046][T10875] Bluetooth: hci5: connection err: -111 [ 807.911146][T10875] Bluetooth: hci5: connection err: -111 [ 808.379607][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.801834][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 809.803052][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 809.803340][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 809.803573][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 809.803859][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 809.863745][T11255] 9pnet_virtio: no channels available for device syz [ 811.011940][T11277] XFS (nbd9): Invalid device [./loop0], error=-2 [ 811.592808][T11280] XFS (nbd2): Invalid device [./loop0], error=-2 [ 812.569779][ T30] audit: type=1400 audit(1790196874.040:2076): avc: denied { append } for pid=11281 comm="syz.3.805" name="video1" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 814.178244][T11302] netlink: 'syz.9.808': attribute type 4 has an invalid length. [ 814.234121][T11303] netlink: 'syz.9.808': attribute type 50 has an invalid length. [ 819.565694][T11331] XFS (nbd3): Invalid device [./loop0], error=-2 [ 820.037028][T11341] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 822.000261][ T30] audit: type=1400 audit(1790196883.470:2077): avc: denied { write } for pid=11316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.184167][ T30] audit: type=1400 audit(1790196883.660:2078): avc: denied { write } for pid=11356 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.410752][T11359] jffs2: notice: (11359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 822.511562][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.526465][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 822.527754][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 822.530531][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 822.567412][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 824.217362][T11363] Failed to initialize the IGMP autojoin socket (err -2) [ 824.696249][T10875] Bluetooth: hci4: command tx timeout [ 825.243238][T11392] overlayfs: missing 'lowerdir' [ 825.494997][T11396] XFS (nbd9): Invalid device [./loop0], error=-2 [ 827.551954][T10875] Bluetooth: hci4: command tx timeout [ 827.771347][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 827.816797][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 827.817154][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 827.817385][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 827.817546][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 827.818432][T11404] 9pnet_virtio: no channels available for device syz [ 827.897927][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.898016][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.898167][T11363] bridge_slave_0: entered allmulticast mode [ 827.959273][T11363] bridge_slave_0: entered promiscuous mode [ 827.979491][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.979692][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.979973][T11363] bridge_slave_1: entered allmulticast mode [ 827.991382][T11363] bridge_slave_1: entered promiscuous mode [ 828.011682][ T5585] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 828.173694][ T5585] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 828.176409][ T5585] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 828.176526][ T5585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.176554][ T5585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.176611][ T5585] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 828.180461][ T5585] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 828.180603][ T5585] usb 4-1: Manufacturer: syz [ 828.357837][ T5585] usb 4-1: config 0 descriptor?? [ 829.162306][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.209425][ T5585] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 829.419001][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.454012][ T5585] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 829.555799][T10875] Bluetooth: hci4: command tx timeout [ 829.766607][ T30] audit: type=1400 audit(1790196891.240:2079): avc: denied { write } for pid=11405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.028875][T11363] team0: Port device team_slave_0 added [ 830.105049][T11363] team0: Port device team_slave_1 added [ 830.428683][T11442] XFS (nbd2): Invalid device [./loop0], error=-2 [ 830.730772][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.730803][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.730937][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.794803][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.794905][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.794943][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.834195][T10045] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 830.879081][ T30] audit: type=1400 audit(1790196892.350:2080): avc: denied { write } for pid=11441 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.346281][T11363] hsr_slave_0: entered promiscuous mode [ 831.347262][T11363] hsr_slave_1: entered promiscuous mode [ 831.358669][T11363] debugfs: 'hsr0' already exists in 'hsr' [ 831.358691][T11363] Cannot create hsr debugfs directory [ 831.632446][T10875] Bluetooth: hci4: command tx timeout [ 832.449406][T11459] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 832.577047][ T30] audit: type=1400 audit(1790196894.050:2081): avc: denied { ioctl } for pid=11447 comm="syz.2.834" path="/50/tracing/events/sched/filter" dev="tracefs" ino=19680823 ioctlcmd=0x55d1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 834.215422][T11466] [ 834.218020][T11466] ====================================================== [ 834.225721][T11466] WARNING: possible circular locking dependency detected [ 834.233435][T11466] syzkaller #0 Tainted: G L [ 834.239996][T11466] ------------------------------------------------------ [ 834.247795][T11466] syz.2.837/11466 is trying to acquire lock: [ 834.254367][T11466] ffff888035037480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 834.264611][T11466] [ 834.264611][T11466] but task is already holding lock: [ 834.272709][T11466] ffff888056c14460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 834.281810][T11466] [ 834.281810][T11466] which lock already depends on the new lock. [ 834.281810][T11466] [ 834.293250][T11466] [ 834.293250][T11466] the existing dependency chain (in reverse order) is: [ 834.303151][T11466] [ 834.303151][T11466] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 834.311283][T11466] lock_acquire+0x1d1/0x380 [ 834.316802][T11466] __mutex_lock+0x1a4/0x1bd0 [ 834.322421][T11466] anon_pipe_prefill_and_lock+0x16c/0x580 [ 834.329282][T11466] anon_pipe_write+0x164/0x1b50 [ 834.336363][T11466] __kernel_write_iter+0x6bb/0x930 [ 834.343892][T11466] __kernel_write+0xf6/0x140 [ 834.349807][T11466] autofs_notify_daemon+0x50d/0xd90 [ 834.356101][T11466] autofs_wait+0x10fd/0x1b50 [ 834.361737][T11466] autofs_mount_wait+0x132/0x3b0 [ 834.367745][T11466] autofs_d_automount+0x490/0x950 [ 834.374145][T11466] __traverse_mounts+0x1b9/0x8a0 [ 834.380723][T11466] step_into_slowpath+0xb7e/0xf90 [ 834.386807][T11466] path_lookupat+0x58b/0xc40 [ 834.392414][T11466] filename_lookup+0x202/0x590 [ 834.398229][T11466] vfs_statx+0xff/0x3f0 [ 834.403363][T11466] __do_sys_newlstat+0xaa/0x130 [ 834.409280][T11466] do_syscall_64+0x123/0x790 [ 834.414908][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.421966][T11466] [ 834.421966][T11466] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 834.430460][T11466] lock_acquire+0x1d1/0x380 [ 834.436072][T11466] __mutex_lock+0x1a4/0x1bd0 [ 834.441697][T11466] autofs_notify_daemon+0x4f8/0xd90 [ 834.447999][T11466] autofs_wait+0x10fd/0x1b50 [ 834.453620][T11466] autofs_mount_wait+0x132/0x3b0 [ 834.459714][T11466] autofs_d_automount+0x490/0x950 [ 834.465802][T11466] __traverse_mounts+0x1b9/0x8a0 [ 834.471796][T11466] step_into_slowpath+0xb7e/0xf90 [ 834.478369][T11466] path_lookupat+0x58b/0xc40 [ 834.484247][T11466] filename_lookup+0x202/0x590 [ 834.490206][T11466] kern_path+0x37/0x50 [ 834.495345][T11466] lookup_bdev+0xd8/0x2a0 [ 834.500677][T11466] resume_store+0x1d6/0x460 [ 834.506189][T11466] kobj_attr_store+0x58/0x80 [ 834.511790][T11466] sysfs_kf_write+0xf2/0x150 [ 834.517411][T11466] kernfs_fop_write_iter+0x3e0/0x5f0 [ 834.523884][T11466] vfs_write+0x6af/0x1050 [ 834.529222][T11466] ksys_write+0x12a/0x250 [ 834.534548][T11466] do_syscall_64+0x123/0x790 [ 834.540940][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.547995][T11466] [ 834.547995][T11466] -> #0 (&of->mutex){+.+.}-{4:4}: [ 834.555923][T11466] check_prev_add+0xeb/0xe60 [ 834.561572][T11466] __lock_acquire+0x1528/0x1f40 [ 834.567476][T11466] lock_acquire+0x1d1/0x380 [ 834.572992][T11466] __mutex_lock+0x1a4/0x1bd0 [ 834.578615][T11466] kernfs_fop_write_iter+0x2c2/0x5f0 [ 834.584996][T11466] iter_file_splice_write+0x830/0x10b0 [ 834.591565][T11466] do_splice+0x109c/0x1fa0 [ 834.597080][T11466] __do_splice+0x33b/0x370 [ 834.602500][T11466] __x64_sys_splice+0x187/0x250 [ 834.608399][T11466] do_syscall_64+0x123/0x790 [ 834.614008][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.621067][T11466] [ 834.621067][T11466] other info that might help us debug this: [ 834.621067][T11466] [ 834.632295][T11466] Chain exists of: [ 834.632295][T11466] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 834.632295][T11466] [ 834.645946][T11466] Possible unsafe locking scenario: [ 834.645946][T11466] [ 834.654118][T11466] CPU0 CPU1 [ 834.660118][T11466] ---- ---- [ 834.665998][T11466] lock(&pipe->mutex); [ 834.670550][T11466] lock(&sbi->pipe_mutex); [ 834.678265][T11466] lock(&pipe->mutex); [ 834.685594][T11466] lock(&of->mutex); [ 834.689954][T11466] [ 834.689954][T11466] *** DEADLOCK *** [ 834.689954][T11466] [ 834.698894][T11466] locks held by syz.2.837/11466: 2, last CPU#1: [ 834.705742][T11466] #0: ffff88802e2ce460 (sb_writers#11){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 834.715805][T11466] #1: ffff888056c14460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 834.725373][T11466] [ 834.725373][T11466] stack backtrace: [ 834.731832][T11466] CPU: 1 UID: 0 PID: 11466 Comm: syz.2.837 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.743749][T11466] Tainted: [L]=SOFTLOCKUP [ 834.748480][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 834.759525][T11466] Call Trace: [ 834.763118][T11466] [ 834.766356][T11466] dump_stack_lvl+0x100/0x190 [ 834.771502][T11466] print_circular_bug.cold+0x178/0x1be [ 834.777501][T11466] check_noncircular+0x146/0x160 [ 834.782927][T11466] ? find_held_lock+0x2b/0x80 [ 834.788071][T11466] check_prev_add+0xeb/0xe60 [ 834.793109][T11466] ? stack_depot_save_flags+0x49a/0x9f0 [ 834.799199][T11466] __lock_acquire+0x1528/0x1f40 [ 834.804520][T11466] ? __x64_sys_splice+0x187/0x250 [ 834.810036][T11466] ? do_syscall_64+0x123/0x790 [ 834.815264][T11466] lock_acquire+0x1d1/0x380 [ 834.820202][T11466] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 834.826210][T11466] ? __pfx___might_resched+0x10/0x10 [ 834.832029][T11466] __mutex_lock+0x1a4/0x1bd0 [ 834.837079][T11466] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 834.843065][T11466] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 834.849054][T11466] ? __asan_memcpy+0x3c/0x60 [ 834.854086][T11466] ? __pfx___mutex_lock+0x10/0x10 [ 834.859602][T11466] ? __pfx__copy_from_iter+0x10/0x10 [ 834.865400][T11466] ? __kmalloc_noprof+0x350/0x840 [ 834.870912][T11466] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 834.876905][T11466] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 834.882908][T11466] kernfs_fop_write_iter+0x2c2/0x5f0 [ 834.888712][T11466] iter_file_splice_write+0x830/0x10b0 [ 834.894714][T11466] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.901194][T11466] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.907666][T11466] do_splice+0x109c/0x1fa0 [ 834.912519][T11466] ? __lock_acquire+0x5c0/0x1f40 [ 834.917937][T11466] ? __pfx_do_splice+0x10/0x10 [ 834.923162][T11466] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 834.929147][T11466] ? __fget_files+0x34/0x3d0 [ 834.934182][T11466] ? find_held_lock+0x2b/0x80 [ 834.939321][T11466] __do_splice+0x33b/0x370 [ 834.944598][T11466] ? __pfx___do_splice+0x10/0x10 [ 834.950035][T11466] __x64_sys_splice+0x187/0x250 [ 834.955365][T11466] do_syscall_64+0x123/0x790 [ 834.960407][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.966878][T11466] RIP: 0033:0x7f08edf9e159 [ 834.971718][T11466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.993273][T11466] RSP: 002b:00007f08ec1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 835.002518][T11466] RAX: ffffffffffffffda RBX: 00007f08ee225fa0 RCX: 00007f08edf9e159 [ 835.011281][T11466] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 835.020043][T11466] RBP: 00007f08ee03506b R08: 000000000001000a R09: 0000000000000000 [ 835.028801][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.037548][T11466] R13: 00007f08ee226038 R14: 00007f08ee225fa0 R15: 00007fffd77613a8 [ 835.046309][T11466] [ 835.050045][ T30] audit: type=1400 audit(1790196895.750:2082): avc: denied { write } for pid=5583 comm="syz-executor" path="pipe:[4579]" dev="pipefs" ino=4579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 835.202461][ T5704] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 835.352813][ T5781] usb 4-1: USB disconnect, device number 20 [ 835.405718][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 836.319133][ T5704] usb 3-1: device descriptor read/all, error -71 [ 836.323178][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.399921][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.445941][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.573316][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.756050][ T41] bridge_slave_1: left allmulticast mode [ 836.756083][ T41] bridge_slave_1: left promiscuous mode [ 836.756214][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.764408][ T41] bridge_slave_0: left allmulticast mode [ 836.764430][ T41] bridge_slave_0: left promiscuous mode [ 836.764553][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.916859][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.919070][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.920317][ T41] bond0 (unregistering): Released all slaves [ 837.074473][ T41] hsr_slave_0: left promiscuous mode [ 837.074810][ T41] hsr_slave_1: left promiscuous mode [ 837.077475][ T41] veth1_macvtap: left promiscuous mode [ 837.077503][ T41] veth0_macvtap: left promiscuous mode [ 837.077559][ T41] veth1_vlan: left promiscuous mode [ 837.077612][ T41] veth0_vlan: left promiscuous mode [ 837.241365][ T41] team0 (unregistering): Port device team_slave_1 removed [ 837.256464][ T41] team0 (unregistering): Port device team_slave_0 removed [ 837.345460][ T30] audit: type=1400 audit(1790196898.820:2083): avc: denied { write } for pid=11471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.407566][ T30] audit: type=1400 audit(1790196898.880:2084): avc: denied { write } for pid=11482 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.662256][ T41] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.693548][ T30] audit: type=1400 audit(1790196899.170:2085): avc: denied { write } for pid=11484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.731696][ T41] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.763355][ T41] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.765415][ T30] audit: type=1400 audit(1790196899.240:2086): avc: denied { write } for pid=11495 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.830723][ T41] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.019961][ T30] audit: type=1400 audit(1790196899.490:2087): avc: denied { write } for pid=11497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.090552][ T30] audit: type=1400 audit(1790196899.560:2088): avc: denied { write } for pid=11508 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.221009][ T41] bridge_slave_1: left allmulticast mode [ 838.221200][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.224834][ T41] bridge_slave_0: left allmulticast mode [ 838.225002][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.345508][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.347342][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.348523][ T41] bond0 (unregistering): Released all slaves [ 838.404515][ T30] audit: type=1400 audit(1790196899.860:2089): avc: denied { write } for pid=11510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.474551][ T30] audit: type=1400 audit(1790196899.940:2090): avc: denied { write } for pid=11521 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.561113][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.574642][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.576003][ T41] bond0 (unregistering): Released all slaves [ 838.579734][ T41] bond1 (unregistering): Released all slaves [ 838.735231][ T30] audit: type=1400 audit(1790196900.210:2091): avc: denied { write } for pid=11523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.983272][ T41] hsr_slave_0: left promiscuous mode [ 838.983776][ T41] hsr_slave_1: left promiscuous mode [ 838.984358][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.984373][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.989695][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.990260][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.990709][ T41] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 838.990723][ T41] batman_adv: batadv0: Removing interface: ipvlan2 [ 839.004740][ T41] veth1_macvtap: left promiscuous mode [ 839.004777][ T41] veth0_macvtap: left promiscuous mode [ 839.004850][ T41] veth1_vlan: left promiscuous mode [ 839.004908][ T41] veth0_vlan: left promiscuous mode [ 839.183657][ T41] team0 (unregistering): Port device team_slave_1 removed [ 839.186685][ T41] team0 (unregistering): Port device team_slave_0 removed [ 839.310510][ T41] team0 (unregistering): Port device team_slave_1 removed [ 839.321576][ T41] team0 (unregistering): Port device team_slave_0 removed [ 839.736357][ T41] IPVS: stop unused estimator thread 0... [ 840.078859][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 840.078875][ T30] audit: type=1400 audit(1790196901.550:2101): avc: denied { write } for pid=11588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.126987][ T30] audit: type=1400 audit(1790196901.600:2102): avc: denied { write } for pid=11599 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.259110][ T30] audit: type=1400 audit(1790196901.730:2103): avc: denied { write } for pid=11601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.301224][ T30] audit: type=1400 audit(1790196901.770:2104): avc: denied { write } for pid=11612 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.432389][ T30] audit: type=1400 audit(1790196901.900:2105): avc: denied { write } for pid=11614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.480210][ T30] audit: type=1400 audit(1790196901.950:2106): avc: denied { write } for pid=11625 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.621118][ T30] audit: type=1400 audit(1790196902.090:2107): avc: denied { write } for pid=11627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.666192][ T30] audit: type=1400 audit(1790196902.140:2108): avc: denied { write } for pid=11638 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.985740][ T30] audit: type=1400 audit(1790196902.460:2109): avc: denied { write } for pid=11644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.038398][ T30] audit: type=1400 audit(1790196902.510:2110): avc: denied { write } for pid=11655 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1