last executing test programs:

4m13.977212566s ago: executing program 0 (id=933):
r0 = userfaultfd(0x80001)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
r2 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe)
keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="9200"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000085000000d000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc)
fchdir(r3)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r6, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x24, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x261f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x7b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r4}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
execveat(r3, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
close(r7)

4m9.741754557s ago: executing program 0 (id=943):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12)
syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1f}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2}]}}, 0x0, 0x3e}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x4000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, r2})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2000, 0x0, 0x0, r2}) (async)
close(r2) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
write(r5, &(0x7f0000000240)='1', 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) (async)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x4000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x4000, 0x0, 0x0, r6})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x2000, 0x0, 0x0, r6}) (async)
close(r6) (async)
symlinkat(&(0x7f00000001c0)='./tracing\x00', r5, &(0x7f00000002c0)='./tracing\x00')
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x10003, 0x0, 0x8080000, 0x0, 0x0, 0x0, r2}) (async)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0)

4m5.243813585s ago: executing program 0 (id=950):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48)
syz_emit_vhci(0x0, 0x14)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

4m2.809874539s ago: executing program 0 (id=951):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='raid1\n', 0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='2\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f00000002c0)='1:0\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r5, &(0x7f0000000340)='1:1\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='0\n', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r7, &(0x7f0000000440)='1\n', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r8, &(0x7f00000004c0)='writemostly\n', 0xc)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0)
write(r9, &(0x7f0000000540)='none\n', 0x5)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r10, &(0x7f00000005c0), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0)

4m1.686066275s ago: executing program 0 (id=954):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fremovexattr(r0, &(0x7f0000000400)=@known='security.apparmor\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15)
pwrite64(r6, &(0x7f0000000000)="ff", 0x1, 0x1000000)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500))
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000d04010000000000000b00000000", @ANYRES32=0x0, @ANYBLOB="04240000090000000a0001004af29c3ff0490000140035006d6163766c616e300000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socket$kcm(0xa, 0x5, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)

3m58.866596875s ago: executing program 0 (id=957):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0x20007})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg1\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettaction={0x14c, 0x32, 0x300, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9f}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x95}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x14c}}, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlockall(0x2)
r8 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r8, 0xb)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r9 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil)
shmat(r9, &(0x7f0000001000/0x3000)=nil, 0x0)
shmctl$SHM_STAT(r9, 0xd, 0x0)

3m43.529584077s ago: executing program 32 (id=957):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0x20007})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg1\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettaction={0x14c, 0x32, 0x300, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9f}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x95}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x14c}}, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlockall(0x2)
r8 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r8, 0xb)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r9 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil)
shmat(r9, &(0x7f0000001000/0x3000)=nil, 0x0)
shmctl$SHM_STAT(r9, 0xd, 0x0)

2m27.641518625s ago: executing program 3 (id=1086):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000c00)="f0d07920d1216c719ca21257d038517dbbfea5e075359248840f036d0636b1abea791fb7f5f11d2f003992f62d83497a11c690adb49036f1aa59ade2e21eda2d6cb92d537574a2a282ca8292b7c4633e65db96f91852bd0c0810cfeb65db2338e1f710ffa244e155425590b409bc31a8c3e0978a8a10ad5c3f938cceeef4b7be8a1f4f725563e43af93131113c97f7da20e316c12de5f5bf31bd1d80f43275a272e13d8720272790ed5b489f64245a63723e82edf9dfda635d2331940149349fa82faae4ca17b792444bd5515a3d05acb62ff66a06ed78c363fcad7f3c699c13eb8fc824b0eebdfbabbb44aa876fe3c84c66b156b4f680f454ad1f498595708c6bb678f585e040a22aac43d5a7272848ab73d303aa19c0bc2f9169818cc2b474a1e9551b10429b26e584723300d1c8c1d12d84d2643611a5a326c655f1eda754dedaf6cedb36f0f8bc7317a499ca3b458a7c345cb00f8b04b078d35ca1c8f877fcb481e6cba397ebd03a719e8502bf7514e383c39d17cd56680393ca65d5ef75bcdda1cb24434da5e50df4d30574c59abdf0a96ac97b48548dcae748e2d331d96234a05a044f0839c1c5987b5c847b58a0b85a2ed6f1718372cf9af814835011146aba26f7682de4f7027904bd843f2b2fbda509da9ddd0c9f3696529b9715ec7aab05afeace95043c9da24db2e133293ce16352ebff025b108f69d6fe8885e52e2e57847f2eb9e5e4283ea7c107920fa87f208e740225b83bbf9a5cd86086b908b05cc420abe1f22af35d6566205a1dac70c159e272a918f17e507fd72402b173b4c12e7cb359297b46c75f92b07abc66d23f73e1f1b89cfce69e9121ecaf2c15039d067d1d8127a7c3cfa395f245b475a195f61b5eec1bfad4a877d536adaaef349a78b5bb46ce8ffafac04dae50013b4c8a555c5b34f7ff93efd6f2e0a13254ea441ede6c1ecb1e105d9f0d451197b5f92eb9adc25c114991b0fd567fbd5d50b1b7fd73b847b4d80283a3b5462b13f1acf54537a4c46c7883d168f97543c94a7f2ffb6dbfd8d63ed047d2e9927135cf916d3294e08ec7c1591e97802784a50b7969837a138fefb7592ecefb58ecf724b11c50645992160915bc40f0f6a73a3f5263eba52c9469031110f599dd0d3de9fe1a62b1986e45eed77299cf033346ac74957147a06e55d43528d7efbaed4f17250b7525fda8aed69b8f4df5033ce672dfc7c4542294e24940bc45b849345ba0e90648203ed9b0b910455b664967e69dcbbda538b784d19f6c07a8499ef77fd87306ffaec660eaf4564febaef5032edb321b668b4d53f16a173888a12d252caf8847f52e6a70cf43f16cfe6706bc0e4b37dffa5c44ae2c4bbb2f36ff16f5d141d3745514400eafb76ccce978a4bbe8f093781a88844aaa796c56d7dcbf1000baf3e9f877b51365a026182aa51b6cd46a70eb71829d1a508d59d57a1bfc80245e65a84074eb9701bf515142514b6a0061dfd713b8913e8918831a79c42f21d7f7e55c3d898339339f9963ac8cafc987e9eead0530479daae39124247b032d6f270fc780714afb7fe43d0b276074a01b7e6fa98aa4dee38cd6154250558713e465936d3cc779dad0a2e39c94a63f033c0cfcae26f3023003a31676ac7bc16713575f24a018e2d0754ff0ecdecc4c4f6b3399a283b207f0dc30bcb6e29b29b169011ba6fc5744e950d809a85975505a3b2f4d8fc512af921892129501f1acba32b0e12dfb584960a800f433056dadc0e406db4c29105a0e9ea9b12d1a97c8a5f7347be8d475bd7c4a3d694349b77ef164ebff12c86495803175fdc5266fb7b222cd982a9934deae64e13e572bf9d859d1d516621bf9bba0700443f406897d5f5cac57240fb87cfeb60ceaeb14ef07f96c5626e0cafd61597703e76b4d3efde49918562142e6bf0f5f040128a54cffa838e891934194003ab2d8120b067f4c6bc5cc9abf0de436f4eca292563347fcc25237c87e13695be2dde1b3d93571b47dec3b265e60bf61481fda16b045b0ae071487ecd06c418737a4aa78c7db99b99b67903e0ec7815ab5c778bf09abe6d80f2448c9e0fa1eec273290944e61a3a9acfa243695b003ec604b29d86dfb4b589258fd6e8766b2dc1aff15089c7da3642c98570ddafbf0714502f4f99ddc0f9af780294fe17422c9aee66275f2e477dcaaa1ed32f44132d564c323e2fc2c2c2bc6fe59ad9287dde20bfa2011745641eeaa9aa54a6c775c076b57dcd12c6dab44654fef2471ad940226772263c1c8d3ff08b3603f1f587f10c7fa9e1c111169abd24f0a04c8a3df010f9db9d97b44a1cc23079e91d1082d2b02f9042a555d52ea4ccda4a4ad789f22bf0d6fbd0c1a6269d4b93894060896a28f8276455f65e53b3c66dbe92c8fa85d0c2bb0ff3b2b48dd1d2f244e6d41b63c061be1b69f285039d519d639c9b2a664e78bddba105f33f9bc74b8b505a773f8bcc9162d29f5a1a7e6b8f6d35d88b233f003629f84e8bcb26beab7220ea04883516aef01e769c9f3cf6031fa918c02e14e75bfaadc3905c104f89bd04b38b80c1a87ef0acf6735d118daee7cf707f0c5eef7d5b8e3eed9e65e76df87a8ebd03d8b0bee5417e10302d2b176f1737dd26aa514090aebc436503c99cad8f9e76b104d64e166ac7846c563f3b3730884ee00423df8634281c91bcd9fe8349dfc828d65f1db1005751cfb9df91d01adcac3cd9c063df931dedab146f924c9b365f49dd8ccf85bd1fb225cd52ae0195e0369ef1a926ae2939e63c9d455bdfd2b134fb8bc112cd8a5872af11506c0b7900142f1efdf2eedbd1f74bbfea1b39547ade99a51891e33ed585cf54cf33d37c86f0355d59e7cef639baa1f9322df55331deafa53cb1a12e53497c3c6f3d6878e4f278027fbe3b7dd8022645a5f9f40c212e7b8a8c635c856c21114e64cc17bca6a25df3fab1c3e6c7211e1cb3d11832dfbf3511017cf43b42f466c3e5be467ed5bc7ea3da0148bd1bb46309b2abe51ec64ee176d9a0ea7e6fb5f2dd066e9ab4d1cb119f7afdad34a2355f1675026a7b43b5a53c3651ff4906ead8f1a274d7abb7bde8d87860250674763c7964243897809d22e2578d86966dc233f01361e967748681b15fb2fb923a5fa2b103669ff71de1431e9b8af7bf4fc493519df5985a10a145e5576eaa81c46544ef8b39892bfbe2d44ebf309844a0f0ac189a345610ee6d0a8a8c1472a4e50c130af8487433f5e1192d84ce3db5548d7e6856f0b0be5db7af72603cb563d2e11b5f2ea4243c9458c2e9c09b283df2db9f77e309969f26877ce448681462889bccd899e02c7233d62e1a856d845340e19f899c2106e0cdf2fe45572b6542c70e1b256f57df30736df18552da1fbf49aae1691cc254fdeef463d8c2d45ebe0ebbd63266c3635e40528cba1e6baa93a80f56ecc55cd1eaea500484a991e03e369550b05faaef6668cb9699976da1a326a4936780c34b7074a7478432f82c32d9c2c5fd8cc0f177ee258b580f662dc326a6b5e1fc3a971845fde566ee11cf2fdbd1817d50113f78123977a503186ef1d3941f24816b5455d838cc94b28ec3a6224c051baae6cf9c70283a875a01c192570ac975a909de647a94e2c25422e7679b812ac3b426d361e3494370853dc70de681f27bcb3a2d3450c367c0dcbf76fa354e9b89931c6e116db03c95863b96f9e847f08c1c6d5cb362693387f24463be1de2dad1a7818448bf6da82af6f849c88c333a8a62c7d0c422eb6061438e47f7b17ff0876310de762c5a8ef03c2f59badf100a4b0e8e8019f09e56877bd25271b4b61c0abddd9fa19a2f6105f1adcd2322ad59366ea619b522d76f60aad01abd5799be461375e201cf561e21352d769bf8ccafdc6c2785c342ffc4f655ac9ac00885bd2ae456a5eaddeb2a2bb8dd6ad60aa4c323f227ccf7260b01f005382ed378101d8358ba02d4f2fb2b242239153168664c287d845e3422f1e98a4a45a40be1f9bbdcdc48f0fc45bda38e5d5be2273c3ed2b8b94c80e413393e9adf2fbf9b632b718db5445619273512170174f417ead15735cdf93d4c7e784ab8a9f8d07c05fb42f8d490a142948b96b8463009b83b8c4b31d2584fd2006ee00857ac6c2ca9a792693e9704751cf5d5310c6bcc4ac350f7d380f9aff4fda94ed7585081e256abf8a42b3b00b3e01eb8dbe4f0259353543fb83bb4ce5da48864b83156e084214dd2c89e4dd68d23146cc23aca8f546838f2db186873c106233ee0f583db7557df0f169fcf75c625cfb9d361f03032df5f628277c641904ad26fd3bda90ba17b6b5522ded18e25b2bca4995da6db55880b879e56943a777c3a7f5e2c5e7bff043e53c8e97f0c3c69ae59e8e06818caa2a7dba807736136ea2b1481a02c7bbe08bdbc22c9f8c4931d8ade31b34e21932f825ff2f909aa2e41e3d9c495d52b1663ffed021c9d85ad74b8ff94ca7b8b2786df60ebf2b2f52bd7874dfadb3da7a549564fff68a5ca332b43df65362eaa42ae9c235da35bcb653874b6b1e07355f1896eda8affff0b1db52a3ec502ef4a6a2a4728051187ee632d23a6bb2058be33763e25e749bffd8dcb4cb36bb08b1f6cc76bc835906f0209789385a05082b240c468c055ebe6de902b85137b005f3eba95521a1da52fd966647c5725a5b461f4f8eb6a10501777ebcfabe851718acc2e4ed491c3c8e896b0fd222d4f69786432ef4651ab0438a5f9dd9a6ba47b92ea74cbb40acff06f324f3c2ea4af858b3811406fc2c00ebd6e3f221446dd5f0af28652dbe1ae5a96effaae1f8ad379e21199b33d05a8bcfbee9d296d17fc0dbb06937ca0186a966ac1a89f5e3349ea6e877d2142ac4d34f3af3ae98b059b46bd64d3d42c1ef94be989dd6c59eeae94e5ba1d7e1029d8a1f974e29a4a9bc826d49b40c2d094a8743d3b89860fe2d8bdd36b50656d300c95c2da82feb3dbeceb3a10f9cfb170084f8991fdecab451b081ca7c91459d506cca4d41eff4dc4821c1ccd8591bc4c515f9bebdc396a6c6bcb823185568e064548a5d3c9852d584c25db47c55938a395c52e651c74346419b8521efd7c119d2001af75b9c559f46819f8dccc6be2117a1387f9ac2d0c7b513857083243dacaaa8f6635681ee5f216afc5ce0760a2f24a96505da90181e804766abc6de1a80eb07fe8bca2a752b8e87a4537a9a54adb5c4ce7636ad798cb345a79aa1ac1d078f1d992972b56e94723b1f3293a150ceab3c0963a9965fe0ca5b7b26b6d91804ee8e2008ca7683a9b91ecc688e99fce0312e24c27c6d6741f219d41faff40bfe2a13609daa03285a4ad5448fae22fc65932bf9aeeb20a3caeb72a82df5a500fb0d8ae09ccbd31bc107b39a25f466537a77852980a1c93b60fb505621e56e47c473c406aa9a0f6682f6f5b15ec5bdc7e9317dd2718f0ed2bd88894e41ebdf37f1fed55c2ac306927901494d7ced65934572d9f03a8fe5d4b0a44eacc39a1253c480d60f218153130877ba06701ad946de86fca68cc99d4661b97cb01cab6f2cab342520e3c1d44e9d3598f4298fb42836bc7a91699b9c4d4a22260de7816f006f5ef94e2e140f5334d46c734fe75cecc9069611be1c35a0b98dcaeea147999e7ccf9612ec55cadbcdb6bb0ba38ce49732ea97fd1fb3ac6f30e05740e604c16a576b01ec0e94123ee702ceca3d577af691a791c07b27a0e75df8f1bdbc62c24cc138e265ed5c83d1fd7e5648f56a3766ef8fcc227e72917106aa560e3bfcd568f105961d78aa4672f7e268990b2d1377914bb697", 0x1000}], 0x1}}], 0x1, 0x8080)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4})
syslog(0x3, &(0x7f0000000180)=""/37, 0x25)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ffff0300002a000000b96b8efdb8828a2ffa3da00246e3dd6ee78f5bc93cf9eed17565e67744758c0cb6b0b406faa6a79bd25dd47f34a5a65625dca25023"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x7, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000100)={0x401, 0x3, 0x65e, 0x40, 0x81, 0x7fff, 0xc})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06000000e964eadab347df3a46d28c84084dfab907000000d526ba677dad6cafc7755baeafe93bff2c527ce848b3f04f1a9fb29307b23a3adcf481bac81a0b7ebcbacc69c8cf776a387d8d05fe4c21b574777e3b8df55006358ba9d4ddbd7cf60cd3", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4})
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000240)={0x4, 0xb, 0x60000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='{\x02\x19\xa5U\xb1', &(0x7f0000000080)='c\xad\x8f\xd0\x91\"\xd7\x18\xcf\xc9\xe9\x86\xfe\xc9\xf7#\x8a\xd3\x01\xb7B\xb9\xa3\x8d\xf8\xf0Q\x01I|\xf6\xe4\xa9\xb7\xd0\xea\x12\x19-\xa8@#\x86\x8b\xed\xfeORk\x9f\x06ZK\x9ev\x06[\xcfP\x9f\x16w\xa5\xee\xaa\xad\xed)5\x12x\xa0\x00\x00#4\xf8\xcc\xbf\x8b\x00v}k\x91\xaf\xf8S\xa8\x94\xee#\xee\xde\x82\xbc(qFs\xf33\xdc\xa5\x03!`\xde\xf0\xdc_\x01\xd1', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)

2m20.801894702s ago: executing program 3 (id=1095):
syz_open_dev$dri(0x0, 0x1f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpriority(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet(0x2, 0x1, 0x100)
shutdown(r1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r3=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8)
timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
close(r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r4)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091)
write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3006c016)
mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x5, 0x1, 0x9, 0x1}, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)

2m16.266864399s ago: executing program 3 (id=1099):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0xb}, {0xfff, 0x1000006, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3ff, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x10000008, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0xffffffff, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xa, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0x5, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x100}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x52, 0x1}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r7, &(0x7f0000000380)='10000', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r8, &(0x7f0000000200)='1', 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r9, &(0x7f0000000280)='0', 0x1)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
pipe(&(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)

2m12.874151166s ago: executing program 3 (id=1102):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

2m11.150266243s ago: executing program 3 (id=1106):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000140)=ANY=[@ANYRES64=r1])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2c3}, 0x1c)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)

2m5.800824496s ago: executing program 3 (id=1115):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x1bf, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x667ef000)

1m50.515763151s ago: executing program 33 (id=1115):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x1bf, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x667ef000)

23.140973694s ago: executing program 1 (id=1251):
r0 = fsopen(&(0x7f0000000240)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000280)=@ethtool_gfeatures})
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x40)
unshare(0x60000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120101026fa2d840ac05180279ce01020301090212000150402009090444a6000350020664020bc614d4f90bbb9f53a6a2a7cd2c20508c87ff8611db473b936d1ef6638badf9cd8657af2c865dcaefcc6f14a69402c0a78e9f78a71dde13a9282ec043ead5"], 0x0)
connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000040)="2e000000010000", 0x7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0)

20.504719664s ago: executing program 6 (id=1257):
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r2=>0xffffffffffffffff})
dup3(r2, r0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x2000000000000000, &(0x7f00000001c0)=0x7)
r3 = gettid()
syz_open_procfs(r3, &(0x7f0000000040)='gid_map\x00')
exit(0xffff)
exit(0x9)
landlock_create_ruleset(&(0x7f0000000040)={0xc4dd, 0x6, 0x0, 0x0, 0x8}, 0x30, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
gettid()
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x80000000000003)
iopl(0xe)
add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000300)={0x1ff, 0x6, 0x1, {0x2, @pix={0xfffffffc, 0x200, 0x30385056, 0x7, 0xa, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}}, 0x3ff})

19.548685004s ago: executing program 1 (id=1260):
syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r1 = socket$inet6(0xa, 0x800, 0xfff7fffe)
sendmsg$inet6(r1, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0x5)
setreuid(r8, 0x0)
sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="f5", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x800}, 0xc084)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x1}]})
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x600000000000000)
r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0)
ioctl$FITHAW(r10, 0xc0045878)
ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, 0x0)

17.685131315s ago: executing program 6 (id=1263):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

16.895646271s ago: executing program 1 (id=1266):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

16.491094159s ago: executing program 4 (id=1268):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

15.655212738s ago: executing program 4 (id=1269):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000440)={0x0, 0x7a26, 0xc000, 0x7, 0x1f4})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xa}, {0x2, 0xffff}}}, 0x24}}, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r2}, 0x38)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0xb, 0x5, 0x1000)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@mcast2, @dev={0xac, 0x14, 0x14, 0x19}, 0x8, 0x19}})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)="703a6d7967726f75702f6d796576df82f5f3f8656e74202e2f64756d6d79ba30", 0x20)
write(r6, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write$P9_RVERSION(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1300000065ffff060000060000000000000030"], 0x13)

14.142707779s ago: executing program 2 (id=1272):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000005d40), 0x1, 0x0)
r1 = epoll_create1(0x80000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x3})
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb8864450000b000000000041190780000000000000000fffc4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c5185934d51b57d036ad3c045942824251d7d17b5191584bcd4fbe40a5a3deb25f00523424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d07"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffef}]})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r4 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100))
syncfs(r1)
pwritev2(r0, &(0x7f0000005ec0)=[{&(0x7f0000005d80)="91", 0x1}], 0x1, 0x5, 0xc7, 0x9)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x814)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x600)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r6, 0x0, 0x0, 0x120, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000600))

14.074355734s ago: executing program 5 (id=1273):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800004, 0x11, r0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r5 = inotify_init()
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x700018c)
r6 = fanotify_init(0x20, 0x2)
fanotify_mark(r6, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000000)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
r7 = timerfd_create(0x7, 0x80800)
timerfd_settime(r7, 0x2, &(0x7f0000000100), 0x0)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
write(r2, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b)

11.943724126s ago: executing program 6 (id=1274):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

11.266227629s ago: executing program 2 (id=1275):
r0 = userfaultfd(0x80001)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
r2 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe)
keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="9200"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000085000000d000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc)
fchdir(r3)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r6, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x24, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x261f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x7b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r4}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
execveat(r3, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
close(r7)

10.459006012s ago: executing program 1 (id=1276):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

10.290509563s ago: executing program 5 (id=1277):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4e, 0x0, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0xca, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r0}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000}, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={<r5=>0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x8, 0xd1}, 0x8)
shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000400)=""/249)
shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'virt_wifi0\x00', {}, 0xdd3c})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2)
sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, 0x0)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x46, '\x00', @data=0x5, 0x4ea8}, {0x1c, '\x00', @data=0xfffffffc, 0xffffff85}]})

9.426581529s ago: executing program 4 (id=1278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2)
socket(0x2, 0x80805, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.732546496s ago: executing program 4 (id=1279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc)

6.751433116s ago: executing program 5 (id=1280):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

6.726261048s ago: executing program 6 (id=1281):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket(0x10, 0x803, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x5, 0x5, 0x0, 0x3, 0xa33f, 0x96f0, 0x200}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000680)={0x2c, r9, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}}, 0x810)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d685ea380f4a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091)
sendmsg$xdp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="548a", 0x2}], 0x1, 0x0, 0x0, 0x404}, 0x84)
sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3006c016)

5.642544888s ago: executing program 5 (id=1282):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=<r0=>0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f00000001c0)=<r1=>0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x3})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4})
close(r2)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c)
vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000000)='3', 0x4e)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x20080, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)

5.642069584s ago: executing program 2 (id=1283):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2], 0x48)
syz_emit_vhci(0x0, 0x14)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

5.359377953s ago: executing program 2 (id=1284):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

4.481482732s ago: executing program 2 (id=1285):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8900, 0x0)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000680)="9f", 0x2a000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5d}, 0x1c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x9, @loopback, 0x9}}, 0x9, 0x1000}, &(0x7f0000000200)=0x90)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00')
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000500)=""/202, 0xca}], 0x2, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
syz_open_dev$loop(0x0, 0x0, 0x187540)
mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)
syz_open_dev$mtd(&(0x7f0000000000), 0x8d4, 0x20000)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

3.166763343s ago: executing program 4 (id=1286):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

2.323186649s ago: executing program 1 (id=1287):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000360, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pim6reg\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000140c00050000000000000000021800002823a82752fd962251d6b89efa95ba66ad714fdd2ccc4ceb58d8fef140d65898a70423df6182a705b7bbcbd47919afe11656ec52bbe249da", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}}, 0x4048010)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r10=>r9})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0xd, 0x6}, &(0x7f0000000580)=0x8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
r12 = socket(0x10, 0x803, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x3}}]}}]}, 0x4c}}, 0x800)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x202, 0x10001, 0xef8})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c0002800500230000000000080005"], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1.606035679s ago: executing program 4 (id=1288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r3, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0403d11, &(0x7f00000001c0)={0xfffffffd, 0x9})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040100"/20, @ANYRES32=r4, @ANYBLOB="c30801004b26be261800128008000100677470000c00028005000500000000000ad2f6190aefb28611217c257a6cd3273a8d61e37b15f6a2e0a2132ec22edb8ab7fbd7fedb5adadd32a260d1a256b1a5b0e562468ae5cf26492ebed185c9472fdd0aeef9219bbab3822851b348872ca495ef564879e295ebedc203b1c02575aea1644d70c0877afd5119bd0c49aa8296ec9ae5ac932c43fd4db44eac6e1bf8ad155521272f798c6d48e587"], 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x4)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r9 = getpgrp(0x0)
sched_setaffinity(r9, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1.402544311s ago: executing program 6 (id=1289):
unshare(0x20000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0)
mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file1/file2/file3/file5/file0\x00', 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0)
mount$bind(0x0, &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00')
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x40488c1)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
syz_open_dev$usbfs(0x0, 0x7, 0x840)
ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522)

1.226541753s ago: executing program 5 (id=1290):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, r4})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0, 0xfffffffffffffff8}, {&(0x7f0000001480)}], 0x3)

518.145437ms ago: executing program 2 (id=1291):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4e, 0x0, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0xca, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r0}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000}, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={<r5=>0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x8, 0xd1}, 0x8)
shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000400)=""/249)
shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'virt_wifi0\x00', {}, 0xdd3c})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2)
sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, 0x0)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x46, '\x00', @data=0x5, 0x4ea8}, {0x1c, '\x00', @data=0xfffffffc, 0xffffff85}]})

513.822476ms ago: executing program 1 (id=1301):
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x57da, &(0x7f0000000400)={0x0, 0x3e49, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f00000001c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840)

414.23395ms ago: executing program 6 (id=1292):
syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000360, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'pim6reg\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000140c00050000000000000000021800002823a82752fd962251d6b89efa95ba66ad714fdd2ccc4ceb58d8fef140d65898a70423df6182a705b7bbcbd47919afe11656ec52bbe249da", @ANYRES32=r2, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}}, 0x4048010)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r8=>r7})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0xd, 0x6}, &(0x7f0000000580)=0x8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x3}}]}}]}, 0x4c}}, 0x800)

0s ago: executing program 5 (id=1293):
unshare(0x22020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c00078018000180140002"], 0x44}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})

kernel console output (not intermixed with test programs):

  606.007727][   T31] audit: type=1400 audit(1788872829.247:2179): avc:  denied  { read write } for  pid=10528 comm="syz.4.981" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  606.007790][   T31] audit: type=1400 audit(1788872829.247:2180): avc:  denied  { open } for  pid=10528 comm="syz.4.981" path="/203/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  606.076028][   T31] audit: type=1400 audit(1788872829.317:2181): avc:  denied  { ioctl } for  pid=10528 comm="syz.4.981" path="/203/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  606.161128][T10531] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  606.161192][T10531] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  606.161420][T10531] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  606.162172][   T31] audit: type=1400 audit(1788872829.397:2182): avc:  denied  { firmware_load } for  pid=10528 comm="syz.4.981" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  606.694198][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  606.857366][ T4920] Bluetooth: hci6: command tx timeout
[  606.898165][T10541] 9p: p9: multiple sources not supported
[  606.984421][    T9] usb 2-1: Using ep0 maxpacket: 8
[  606.990730][    T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  607.007477][    T9] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[  607.007508][    T9] usb 2-1: config 0 has no interface number 0
[  607.007580][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.010436][    T9] usb 2-1: config 0 descriptor??
[  607.146065][    T9] viperboard 2-1:0.143: version 0.00 found at bus 002 address 017
[  607.240865][    T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  607.281087][    T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  607.317304][T10498] wg0 speed is unknown, defaulting to 1000
[  607.321397][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.321772][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.985899][ T5784] usb 2-1: USB disconnect, device number 17
[  608.884946][ T4920] Bluetooth: hci6: command tx timeout
[  608.945902][   T31] audit: type=1400 audit(1788872832.187:2183): avc:  denied  { append } for  pid=10562 comm="syz.1.988" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  608.980506][   T31] audit: type=1400 audit(1788872832.217:2184): avc:  denied  { write } for  pid=10558 comm="syz.4.987" name="functions" dev="configfs" ino=9653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  609.097454][   T31] audit: type=1400 audit(1788872832.337:2185): avc:  denied  { write } for  pid=10558 comm="syz.4.987" name="c.1" dev="configfs" ino=13884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  609.329486][T10568] netlink: 'syz.1.988': attribute type 1 has an invalid length.
[  609.342011][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'.
[  610.306661][    T9] libceph: connect (1)[c::]:6789 error -22
[  610.306863][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  610.342077][T10578] ceph: No mds server is up or the cluster is laggy
[  612.668658][T10596] futex_wake_op: syz.3.993 tries to shift op by 144; fix this program
[  615.459393][T10498] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.469769][T10498] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.478448][T10498] bridge_slave_0: entered allmulticast mode
[  615.492381][T10498] bridge_slave_0: entered promiscuous mode
[  615.518988][T10498] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.519101][T10498] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.519281][T10498] bridge_slave_1: entered allmulticast mode
[  615.582260][T10498] bridge_slave_1: entered promiscuous mode
[  615.636841][T10619] futex_wake_op: syz.4.999 tries to shift op by 144; fix this program
[  615.863035][T10498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  615.891094][T10498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  616.296896][T10498] team0: Port device team_slave_0 added
[  616.316831][T10498] team0: Port device team_slave_1 added
[  616.344870][ T5784] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  616.438456][T10498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  616.446647][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  616.446675][T10498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.499971][T10629] netlink: 'syz.4.1001': attribute type 1 has an invalid length.
[  616.500006][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'.
[  616.528007][ T5784] usb 2-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40
[  616.539480][ T5784] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  616.539526][ T5784] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  616.539579][ T5784] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023
[  616.590584][T10498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.600091][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  616.600209][T10498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.652217][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.652253][ T5784] usb 2-1: Product: syz
[  616.652280][ T5784] usb 2-1: Manufacturer: syz
[  616.652290][ T5784] usb 2-1: SerialNumber: syz
[  616.875929][T10498] hsr_slave_0: entered promiscuous mode
[  616.890310][T10498] hsr_slave_1: entered promiscuous mode
[  616.898640][T10498] debugfs: 'hsr0' already exists in 'hsr'
[  616.898667][T10498] Cannot create hsr debugfs directory
[  616.949162][T10631] unsupported nlmsg_type 40
[  617.054122][T10631] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1002'.
[  617.159054][T10626] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  617.221813][T10626] qnx6: wrong signature (magic) in superblock #1.
[  617.221859][T10626] qnx6: unable to read the first superblock
[  617.296135][T10626] 9p: p9: multiple sources not supported
[  617.524131][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'.
[  618.539313][   T31] audit: type=1400 audit(1788872841.777:2186): avc:  denied  { write } for  pid=10645 comm="syz.4.1005" name="functions" dev="configfs" ino=9653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  618.990311][   T31] audit: type=1400 audit(1788872842.227:2187): avc:  denied  { write } for  pid=10645 comm="syz.4.1005" name="header" dev="configfs" ino=24520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  619.026915][   T31] audit: type=1400 audit(1788872842.267:2188): avc:  denied  { write } for  pid=10645 comm="syz.4.1005" name="fs" dev="configfs" ino=24516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  619.269397][   T31] audit: type=1400 audit(1788872842.497:2189): avc:  denied  { write } for  pid=10645 comm="syz.4.1005" name="fs" dev="configfs" ino=24528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  619.269483][   T31] audit: type=1400 audit(1788872842.497:2190): avc:  denied  { write } for  pid=10645 comm="syz.4.1005" name="fs" dev="configfs" ino=24528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  619.448463][ T5714] libceph: connect (1)[c::]:6789 error -101
[  619.448689][ T5714] libceph: mon0 (1)[c::]:6789 connect error
[  619.481433][T10659] ceph: No mds server is up or the cluster is laggy
[  619.517560][   T31] audit: type=1400 audit(1788872842.747:2191): avc:  denied  { mount } for  pid=10658 comm="syz.3.1006" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  619.671450][T10498] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  619.775795][ T5784] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  619.784333][ T5784] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  619.865748][ T5784] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  619.884092][ T5784] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  619.887195][ T5784] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  619.931112][T10498] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  619.931955][T10498] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  620.018152][T10498] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  620.075516][T10498] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  620.321395][T10498] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  620.330818][T10498] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  620.524092][T10498] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  620.792962][T10687] fuse: Bad value for 'fd'
[  620.892074][ T5784] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  620.979665][ T5784] usb 2-1: USB disconnect, device number 18
[  621.147994][T10627] udevd[10627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory
[  621.283026][   T31] audit: type=1400 audit(1788872844.517:2192): avc:  denied  { setopt } for  pid=10686 comm="syz.3.1008" lport=50936 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  624.386290][   T31] audit: type=1400 audit(1788872847.627:2193): avc:  denied  { execute } for  pid=10697 comm="syz.2.1009" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  626.849270][T10498] 8021q: adding VLAN 0 to HW filter on device bond0
[  626.902845][T10498] 8021q: adding VLAN 0 to HW filter on device team0
[  626.981812][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.983593][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.016685][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.016778][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.377053][   T31] audit: type=1400 audit(1788872851.607:2194): avc:  denied  { create } for  pid=10706 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  628.377128][   T31] audit: type=1400 audit(1788872851.607:2195): avc:  denied  { write } for  pid=10706 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  630.960471][T10716] ip6t_srh: unknown srh match flags  4000
[  631.465011][ T5784] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  631.604142][ T5784] usb 2-1: device descriptor read/64, error -71
[  631.844420][ T5784] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  631.984572][ T5784] usb 2-1: device descriptor read/64, error -71
[  632.095853][ T5784] usb usb2-port1: attempt power cycle
[  632.435263][ T5784] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  632.653972][ T5784] usb 2-1: device not accepting address 21, error -71
[  634.768921][T10498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.927212][ T5784] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  634.956089][ T5784] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  634.969625][ T5784] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  634.969667][ T5784] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  634.982906][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.982932][ T5784] usb 2-1: Product: syz
[  634.982967][ T5784] usb 2-1: Manufacturer: syz
[  634.982985][ T5784] usb 2-1: SerialNumber: syz
[  635.038563][ T5784] usb 2-1: config 0 descriptor??
[  635.045637][T10751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  635.045741][T10751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  636.550736][ T5784] dm9601 2-1:0.0: probe with driver dm9601 failed with error -71
[  636.599328][ T5784] usb 2-1: USB disconnect, device number 22
[  637.300610][T10771] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  637.300652][T10771] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  637.300682][T10771] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  637.986612][T10498] veth0_vlan: entered promiscuous mode
[  638.457856][T10498] veth1_vlan: entered promiscuous mode
[  638.487071][   T31] audit: type=1400 audit(1788872861.727:2196): avc:  denied  { write } for  pid=10780 comm="syz.3.1025" name="header" dev="configfs" ino=24507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  638.554692][   T31] audit: type=1400 audit(1788872861.797:2197): avc:  denied  { write } for  pid=10780 comm="syz.3.1025" name="fs" dev="configfs" ino=24516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  638.554751][   T31] audit: type=1400 audit(1788872861.797:2198): avc:  denied  { write } for  pid=10780 comm="syz.3.1025" name="fs" dev="configfs" ino=24516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  638.916484][T10498] veth0_macvtap: entered promiscuous mode
[  638.989326][T10498] veth1_macvtap: entered promiscuous mode
[  639.266799][T10498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.828029][T10813] NILFS (nullb0): couldn't find nilfs on the device
[  639.982098][T10498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.081688][   T31] audit: type=1400 audit(1788872863.317:2199): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  640.170943][   T31] audit: type=1400 audit(1788872863.407:2200): avc:  denied  { read write } for  pid=5602 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  640.201749][   T31] audit: type=1400 audit(1788872863.437:2201): avc:  denied  { open } for  pid=5602 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  640.236215][   T31] audit: type=1400 audit(1788872863.477:2202): avc:  denied  { ioctl } for  pid=5602 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  640.595271][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.636280][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.661558][   T31] audit: type=1400 audit(1788872863.897:2203): avc:  denied  { search } for  pid=10812 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  640.690016][   T31] audit: type=1400 audit(1788872863.927:2204): avc:  denied  { read } for  pid=10812 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  640.690048][   T31] audit: type=1400 audit(1788872863.927:2205): avc:  denied  { open } for  pid=10812 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  640.858323][ T6729] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.858664][ T6729] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.250821][T10832] /dev/nullb0: Can't lookup blockdev
[  641.445216][T10823] 9p: p9: multiple sources not supported
[  641.656343][ T8483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.656375][ T8483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.291428][T10847] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  643.941768][ T6729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.941867][ T6729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.955372][   T31] kauditd_printk_skb: 38 callbacks suppressed
[  643.955385][   T31] audit: type=1400 audit(1788872867.197:2244): avc:  denied  { create } for  pid=10850 comm="syz.4.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  644.088511][   T31] audit: type=1400 audit(1788872867.327:2245): avc:  denied  { mount } for  pid=10850 comm="syz.4.1030" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  644.147762][   T31] audit: type=1400 audit(1788872867.387:2246): avc:  denied  { mounton } for  pid=10498 comm="syz-executor" path="/root/syzkaller.b7OJSB/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  644.323806][   T31] audit: type=1400 audit(1788872867.517:2247): avc:  denied  { mount } for  pid=10498 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  644.323854][   T31] audit: type=1400 audit(1788872867.517:2248): avc:  denied  { mount } for  pid=10498 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  644.323885][   T31] audit: type=1400 audit(1788872867.517:2249): avc:  denied  { mounton } for  pid=10498 comm="syz-executor" path="/root/syzkaller.b7OJSB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  644.323911][   T31] audit: type=1400 audit(1788872867.517:2250): avc:  denied  { mounton } for  pid=10498 comm="syz-executor" path="/root/syzkaller.b7OJSB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  644.323937][   T31] audit: type=1400 audit(1788872867.517:2251): avc:  denied  { unmount } for  pid=10498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  644.323963][   T31] audit: type=1400 audit(1788872867.517:2252): avc:  denied  { mounton } for  pid=10498 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  644.323987][   T31] audit: type=1400 audit(1788872867.517:2253): avc:  denied  { mount } for  pid=10498 comm="syz-executor" name="/" dev="gadgetfs" ino=6014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  646.975964][T10867] bond0: (slave bond_slave_0): Releasing backup interface
[  647.029742][T10867] bond0: (slave bond_slave_1): Releasing backup interface
[  647.074463][T10876] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  647.191286][T10867] team0: Port device team_slave_0 removed
[  647.246427][T10867] team0: Port device team_slave_1 removed
[  647.279757][T10867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  647.638055][T10868] team0: Port device xfrm0 added
[  647.670132][T10879] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  650.327208][   T31] kauditd_printk_skb: 44 callbacks suppressed
[  650.327245][   T31] audit: type=1400 audit(1788872873.567:2298): avc:  denied  { write } for  pid=10899 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  650.434703][   T31] audit: type=1400 audit(1788872873.667:2299): avc:  denied  { setopt } for  pid=10893 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  650.434764][   T31] audit: type=1400 audit(1788872873.667:2300): avc:  denied  { bind } for  pid=10893 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  650.434847][   T31] audit: type=1400 audit(1788872873.667:2301): avc:  denied  { name_bind } for  pid=10893 comm="syz.1.1040" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  650.434881][   T31] audit: type=1400 audit(1788872873.667:2302): avc:  denied  { node_bind } for  pid=10893 comm="syz.1.1040" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  650.544148][   T31] audit: type=1400 audit(1788872873.777:2303): avc:  denied  { getopt } for  pid=10893 comm="syz.1.1040" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  650.980723][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'.
[  650.980759][T10908] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  651.243008][   T31] audit: type=1400 audit(1788872874.477:2304): avc:  denied  { watch } for  pid=10910 comm="syz.3.1044" path="/225" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  651.440445][   T31] audit: type=1400 audit(1788872874.677:2305): avc:  denied  { create } for  pid=10910 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  651.575305][   T31] audit: type=1400 audit(1788872874.817:2306): avc:  denied  { create } for  pid=10910 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  651.649607][   T31] audit: type=1400 audit(1788872874.887:2307): avc:  denied  { write } for  pid=10910 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  655.834300][T10938] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1050'.
[  656.742561][   T31] kauditd_printk_skb: 19 callbacks suppressed
[  656.742617][   T31] audit: type=1400 audit(1788872879.977:2327): avc:  denied  { ioctl } for  pid=10936 comm="syz.3.1050" path="socket:[25663]" dev="sockfs" ino=25663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  656.931779][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'.
[  657.907857][T10947] loop9: detected capacity change from 0 to 2640
[  657.908341][T10947] buffer_io_error: 11 callbacks suppressed
[  657.908382][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908416][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908444][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908472][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908491][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908552][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908586][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908614][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908626][T10947] ldm_validate_partition_table(): Disk read failed.
[  657.908678][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908706][T10947] Buffer I/O error on dev loop9, logical block 0, async page read
[  657.908743][T10947] Dev loop9: unable to read RDB block 0
[  657.908906][T10947]  loop9: unable to read partition table
[  657.909067][T10947] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  657.921252][   T31] audit: type=1400 audit(1788872881.147:2328): avc:  denied  { write } for  pid=10944 comm="syz.1.1053" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  658.264578][   T31] audit: type=1400 audit(1788872881.507:2329): avc:  denied  { ioctl } for  pid=10944 comm="syz.1.1053" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  658.694419][   T31] audit: type=1400 audit(1788872881.927:2330): avc:  denied  { connect } for  pid=10949 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  658.694487][   T31] audit: type=1400 audit(1788872881.927:2331): avc:  denied  { name_connect } for  pid=10949 comm="syz.2.1055" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  659.302237][   T31] audit: type=1400 audit(1788872882.537:2332): avc:  denied  { unmount } for  pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  660.278992][   T31] audit: type=1400 audit(1788872883.517:2333): avc:  denied  { mount } for  pid=10956 comm="syz.3.1057" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  660.307413][   T31] audit: type=1400 audit(1788872883.547:2334): avc:  denied  { search } for  pid=10956 comm="syz.3.1057" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  660.336217][   T31] audit: type=1400 audit(1788872883.577:2335): avc:  denied  { read } for  pid=10956 comm="syz.3.1057" name="export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[  660.381717][   T31] audit: type=1400 audit(1788872883.617:2336): avc:  denied  { open } for  pid=10956 comm="syz.3.1057" path="/228/nfsd/export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[  660.526002][T10961] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  661.037460][T10967] netlink: 'syz.4.1059': attribute type 3 has an invalid length.
[  663.900118][T10982] IPVS: sh: FWM 3 0x00000003 - no destination available
[  663.992279][T10982] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00
[  663.992341][T10982] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  663.992369][T10982] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  663.992384][T10982] page_type: f5(slab)
[  663.992408][T10982] raw: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122
[  663.992480][T10982] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  663.992503][T10982] head: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122
[  663.992516][T10982] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  663.992539][T10982] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  663.992560][T10982] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  663.992569][T10982] page dumped because: unmovable page
[  663.992580][T10982] page_owner tracks the page as allocated
[  663.992608][T10982] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7001, tgid 7001 (dhcpcd-run-hook), ts 231325525057
[  663.992639][T10982]  post_alloc_hook+0xfd/0x120
[  663.992671][T10982]  get_page_from_freelist+0x110d/0x35d0
[  663.992700][T10982]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  663.992746][T10982]  new_slab+0xa9/0x6e0
[  663.992772][T10982]  refill_objects+0xe3/0x410
[  663.992799][T10982]  __pcs_replace_empty_main+0x35e/0x650
[  663.992825][T10982]  __kmalloc_noprof+0x67c/0x840
[  663.992838][T10982]  tomoyo_realpath_from_path+0xb6/0x690
[  663.992862][T10982]  tomoyo_check_open_permission+0x2af/0x3c0
[  663.992900][T10982]  tomoyo_file_open+0x6b/0x90
[  663.992925][T10982]  security_file_open+0xb5/0x1e0
[  663.992939][T10982]  do_dentry_open+0x588/0x14d0
[  663.992961][T10982]  vfs_open+0x82/0x3f0
[  663.992975][T10982]  path_openat+0x19fa/0x2440
[  663.992999][T10982]  do_file_open+0x20e/0x430
[  663.993041][T10982]  do_sys_openat2+0x10f/0x1e0
[  663.993066][T10982] page last free pid 4969 tgid 4969 ts 213393318477 stack trace:
[  663.993191][T10982]  __free_frozen_pages+0x79f/0x10f0
[  663.993217][T10982]  qlist_free_all+0x47/0xf0
[  663.993231][T10982]  kasan_quarantine_reduce+0x1a0/0x1f0
[  663.993255][T10982]  __kasan_slab_alloc+0x69/0x90
[  663.993270][T10982]  __kmalloc_cache_noprof+0x278/0x6d0
[  663.993296][T10982]  kernfs_fop_open+0x23d/0xd50
[  663.993330][T10982]  do_dentry_open+0x6ab/0x14d0
[  663.993351][T10982]  vfs_open+0x82/0x3f0
[  663.993366][T10982]  path_openat+0x19fa/0x2440
[  663.993389][T10982]  do_file_open+0x20e/0x430
[  663.993413][T10982]  do_sys_openat2+0x10f/0x1e0
[  663.993435][T10982]  __x64_sys_openat+0x12d/0x210
[  663.993480][T10982]  do_syscall_64+0x123/0x790
[  663.993496][T10982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.026551][   T31] kauditd_printk_skb: 19 callbacks suppressed
[  664.026563][   T31] audit: type=1400 audit(1788872887.267:2356): avc:  denied  { read } for  pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  664.026610][   T31] audit: type=1400 audit(1788872887.267:2357): avc:  denied  { search } for  pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  664.026654][   T31] audit: type=1400 audit(1788872887.267:2358): avc:  denied  { append } for  pid=4951 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  664.026685][   T31] audit: type=1400 audit(1788872887.267:2359): avc:  denied  { open } for  pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  664.026717][   T31] audit: type=1400 audit(1788872887.267:2360): avc:  denied  { getattr } for  pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  664.454186][   T31] audit: type=1400 audit(1788872887.687:2361): avc:  denied  { name_bind } for  pid=10980 comm="syz.1.1056" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  664.454252][   T31] audit: type=1400 audit(1788872887.697:2362): avc:  denied  { node_bind } for  pid=10980 comm="syz.1.1056" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  664.542719][   T31] audit: type=1400 audit(1788872887.777:2363): avc:  denied  { sqpoll } for  pid=10987 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  664.621023][T10988] ip6tnl0: Caught tx_queue_len zero misconfig
[  666.248063][   T31] audit: type=1400 audit(1788872889.487:2364): avc:  denied  { create } for  pid=10986 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  666.525299][   T31] audit: type=1400 audit(1788872889.767:2365): avc:  denied  { write } for  pid=10986 comm="syz.3.1065" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  668.847453][T11003] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  668.847491][T11003] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  669.040422][   T31] kauditd_printk_skb: 163 callbacks suppressed
[  669.040473][   T31] audit: type=1326 audit(1788872892.277:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.040513][   T31] audit: type=1326 audit(1788872892.277:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.115781][   T31] audit: type=1326 audit(1788872892.357:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.115862][   T31] audit: type=1326 audit(1788872892.357:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.115906][   T31] audit: type=1326 audit(1788872892.357:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.274384][   T31] audit: type=1326 audit(1788872892.497:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.274451][   T31] audit: type=1326 audit(1788872892.497:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.277695][   T31] audit: type=1326 audit(1788872892.517:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.277750][   T31] audit: type=1326 audit(1788872892.517:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  669.284992][   T31] audit: type=1326 audit(1788872892.527:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1069" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x7ffc0000
[  670.338309][T11019] overlayfs: failed to clone upperpath
[  670.384658][ T5600] libceph: connect (1)[c::]:6789 error -22
[  670.384878][ T5600] libceph: mon0 (1)[c::]:6789 connect error
[  670.424378][T11019] ceph: No mds server is up or the cluster is laggy
[  671.007197][T11029] Invalid option length (1004290) for dns_resolver key
[  671.500404][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  672.054231][T11049] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1072'.
[  672.268197][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'.
[  672.301185][T11029] netlink: 'syz.4.1077': attribute type 11 has an invalid length.
[  672.301226][T11029] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1077'.
[  672.325739][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'.
[  672.369486][T11049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.517402][T11049] loop8: detected capacity change from 0 to 7
[  672.869005][T11049] Dev loop8: unable to read RDB block 7
[  672.869080][T11049]  loop8: unable to read partition table
[  672.869259][T11049] loop8: partition table beyond EOD, truncated
[  672.879035][T11049] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  674.291877][ T5714] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  674.590423][ T5714] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  674.603850][ T5714] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  674.603866][ T5714] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  674.632729][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.632771][ T5714] usb 2-1: Product: syz
[  674.632797][ T5714] usb 2-1: Manufacturer: syz
[  674.632808][ T5714] usb 2-1: SerialNumber: syz
[  674.928577][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'.
[  675.094182][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  675.094242][   T31] audit: type=1400 audit(1788872898.337:2552): avc:  denied  { write } for  pid=11062 comm="syz.1.1084" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  675.491376][   T31] audit: type=1400 audit(1788872898.727:2553): avc:  denied  { mount } for  pid=11062 comm="syz.1.1084" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  678.292428][T11093] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  678.333037][T11086] netlink: 'syz.2.1088': attribute type 3 has an invalid length.
[  678.333816][T11086] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1088'.
[  679.332798][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'.
[  679.601176][T11093] netlink: 'syz.4.1090': attribute type 3 has an invalid length.
[  679.726912][   T31] audit: type=1400 audit(1788872902.967:2554): avc:  denied  { watch_reads } for  pid=11100 comm="syz.5.1091" path="/9/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  679.791424][   T10] usb 2-1: USB disconnect, device number 23
[  679.961012][   T31] audit: type=1400 audit(1788872903.197:2555): avc:  denied  { write } for  pid=11100 comm="syz.5.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  680.087241][   T31] audit: type=1400 audit(1788872903.327:2556): avc:  denied  { ioctl } for  pid=11100 comm="syz.5.1091" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  681.636114][   T31] audit: type=1400 audit(1788872904.877:2557): avc:  denied  { write } for  pid=11105 comm="syz.1.1093" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  682.762842][   T31] audit: type=1400 audit(1788872905.997:2558): avc:  denied  { write } for  pid=11105 comm="syz.1.1093" name="buffer_subbuf_size_kb" dev="tracefs" ino=4188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  683.597377][   T31] audit: type=1400 audit(1788872906.837:2559): avc:  denied  { create } for  pid=11113 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  683.597447][   T31] audit: type=1400 audit(1788872906.837:2560): avc:  denied  { setopt } for  pid=11113 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  683.597514][   T31] audit: type=1400 audit(1788872906.837:2561): avc:  denied  { bind } for  pid=11113 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  683.842306][   T31] audit: type=1400 audit(1788872907.077:2562): avc:  denied  { shutdown } for  pid=11117 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  684.136792][   T31] audit: type=1400 audit(1788872907.377:2563): avc:  denied  { ioctl } for  pid=11105 comm="syz.1.1093" path="/204/tracing/events/enable" dev="tracefs" ino=19680823 ioctlcmd=0x5333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  685.857912][T11126] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  685.857971][T11126] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  685.860673][T11126] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  685.868117][   T31] audit: type=1400 audit(1788872909.097:2564): avc:  denied  { firmware_load } for  pid=11125 comm="syz.5.1097" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  686.168752][ T6727] IPVS: starting estimator thread 0...
[  686.253671][T11128] IPVS: using max 65 ests per chain, 156000 per kthread
[  689.669090][   T31] audit: type=1400 audit(1788872912.907:2565): avc:  denied  { read } for  pid=11145 comm="syz.1.1101" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  689.669153][   T31] audit: type=1400 audit(1788872912.907:2566): avc:  denied  { open } for  pid=11145 comm="syz.1.1101" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  689.735706][   T31] audit: type=1400 audit(1788872912.977:2567): avc:  denied  { ioctl } for  pid=11145 comm="syz.1.1101" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  691.292328][T11156] bond1: (slave .`): Releasing active interface
[  692.266551][T11164] loop9: detected capacity change from 0 to 2640
[  692.267082][T11164] buffer_io_error: 11 callbacks suppressed
[  692.267112][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267145][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267175][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267229][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267248][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267294][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267329][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267374][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267395][T11164] ldm_validate_partition_table(): Disk read failed.
[  692.267413][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267441][T11164] Buffer I/O error on dev loop9, logical block 0, async page read
[  692.267477][T11164] Dev loop9: unable to read RDB block 0
[  692.267702][T11164]  loop9: unable to read partition table
[  692.267864][T11164] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  693.078499][T11156] .`: (slave bond_slave_0): Releasing backup interface
[  693.130603][T11156] .`: (slave bond_slave_1): Releasing backup interface
[  693.165463][T11156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  694.159935][T11174] loop9: detected capacity change from 0 to 2640
[  694.160507][T11174] ldm_validate_partition_table(): Disk read failed.
[  694.160588][T11174] Dev loop9: unable to read RDB block 0
[  694.160796][T11174]  loop9: unable to read partition table
[  694.160962][T11174] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  694.936005][T11179] IPVS: sh: FWM 3 0x00000003 - no destination available
[  695.288961][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1112'.
[  695.407922][T11182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11182 comm=syz.2.1112
[  696.008444][   T31] audit: type=1400 audit(1788872919.247:2568): avc:  denied  { mount } for  pid=11183 comm="syz.2.1113" name="/" dev="autofs" ino=26387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  696.385535][T11189] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  696.391424][   T31] audit: type=1400 audit(1788872919.627:2569): avc:  denied  { remount } for  pid=11188 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  696.599983][   T31] audit: type=1400 audit(1788872919.837:2570): avc:  denied  { unmount } for  pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  698.018503][   T31] audit: type=1400 audit(1788872921.257:2571): avc:  denied  { ioctl } for  pid=11190 comm="syz.5.1107" path="socket:[26427]" dev="sockfs" ino=26427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  698.722632][T11204] openvswitch: ovs-system: Dropping previously announced user features
[  698.765595][T11200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11200 comm=syz.5.1107
[  699.047110][T11210] openvswitch: netlink: Invalid VLAN frame
[  700.275458][T11212] loop9: detected capacity change from 0 to 2640
[  700.275906][T11212] buffer_io_error: 32 callbacks suppressed
[  700.275927][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.275960][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.275988][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276042][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276075][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276113][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276173][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276202][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276213][T11212] ldm_validate_partition_table(): Disk read failed.
[  700.276240][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276268][T11212] Buffer I/O error on dev loop9, logical block 0, async page read
[  700.276317][T11212] Dev loop9: unable to read RDB block 0
[  700.276466][T11212]  loop9: unable to read partition table
[  700.276625][T11212] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  700.895685][   T31] audit: type=1400 audit(1788872924.087:2572): avc:  denied  { create } for  pid=11215 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  700.895769][   T31] audit: type=1400 audit(1788872924.117:2573): avc:  denied  { create } for  pid=11215 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  700.900925][   T31] audit: type=1400 audit(1788872924.137:2574): avc:  denied  { bind } for  pid=11215 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  701.471897][   T31] audit: type=1400 audit(1788872924.707:2575): avc:  denied  { ioctl } for  pid=11215 comm="syz.5.1117" path="socket:[26464]" dev="sockfs" ino=26464 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  706.382825][T11232] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  709.307314][T11241] virtio_blk virtio3: 1/0/0 default/read/poll queues
[  709.313683][T11241] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  710.299043][   T31] audit: type=1400 audit(1788872933.537:2576): avc:  denied  { create } for  pid=11247 comm="syz.1.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  710.358046][   T31] audit: type=1400 audit(1788872933.597:2577): avc:  denied  { ioctl } for  pid=11247 comm="syz.1.1126" path="socket:[26663]" dev="sockfs" ino=26663 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  710.412841][   T31] audit: type=1400 audit(1788872933.647:2578): avc:  denied  { map } for  pid=11247 comm="syz.1.1126" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  711.258390][   T31] audit: type=1400 audit(1788872934.497:2579): avc:  denied  { write } for  pid=11247 comm="syz.1.1126" name="udp6" dev="proc" ino=4026533154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  711.377663][T11262] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1127'.
[  711.638540][   T31] audit: type=1400 audit(1788872934.877:2580): avc:  denied  { bind } for  pid=11261 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  711.638600][   T31] audit: type=1400 audit(1788872934.877:2581): avc:  denied  { name_bind } for  pid=11261 comm="syz.4.1127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  711.638640][   T31] audit: type=1400 audit(1788872934.877:2582): avc:  denied  { node_bind } for  pid=11261 comm="syz.4.1127" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  711.847657][   T31] audit: type=1400 audit(1788872935.087:2583): avc:  denied  { bind } for  pid=11261 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  711.936032][   T31] audit: type=1326 audit(1788872935.177:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.4.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788c99e159 code=0x7ffc0000
[  711.936111][   T31] audit: type=1326 audit(1788872935.177:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.4.1127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788c99e159 code=0x7ffc0000
[  712.675585][T10500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  712.691576][T10500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  712.706086][T10500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  712.729156][T10500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  712.742723][T10500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  712.869116][ T4920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  712.882021][ T4920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  712.909703][ T4920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  712.935934][ T4920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  712.948280][ T4920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  714.121909][T11285] loop9: detected capacity change from 0 to 2640
[  714.122367][T11285] buffer_io_error: 11 callbacks suppressed
[  714.122395][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122448][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122467][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122495][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122523][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122585][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122620][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122647][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122658][T11285] ldm_validate_partition_table(): Disk read failed.
[  714.122684][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122729][T11285] Buffer I/O error on dev loop9, logical block 0, async page read
[  714.122774][T11285] Dev loop9: unable to read RDB block 0
[  714.122952][T11285]  loop9: unable to read partition table
[  714.123802][T11285] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  715.045240][T10500] Bluetooth: hci0: command tx timeout
[  715.626878][   T31] kauditd_printk_skb: 31 callbacks suppressed
[  715.626920][   T31] audit: type=1400 audit(1788872938.867:2617): avc:  denied  { block_suspend } for  pid=11291 comm="syz.5.1134" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  715.975774][   T31] audit: type=1400 audit(1788872939.207:2618): avc:  denied  { setopt } for  pid=11291 comm="syz.5.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  716.298092][T11277] wg0 speed is unknown, defaulting to 1000
[  716.461760][   T43] nvmet: connect request for invalid subsystem tes!
[  716.538251][T11310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=11310 comm=syz.4.1136
[  716.577770][T11297] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes"
[  716.985324][T11308] netlink: 'syz.4.1136': attribute type 2 has an invalid length.
[  716.985359][T11308] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1136'.
[  717.057935][T11317] snd_dummy snd_dummy.0: control 0:0:4:syz0:7 is already present
[  717.135829][T10500] Bluetooth: hci0: command tx timeout
[  717.182586][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'.
[  717.182649][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'.
[  717.182683][T11317] netlink: 'syz.1.1133': attribute type 20 has an invalid length.
[  717.583966][T11308] : entered promiscuous mode
[  717.700821][   T31] audit: type=1400 audit(1788872940.937:2619): avc:  denied  { ioctl } for  pid=11315 comm="syz.1.1133" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  717.751370][T11317] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14)
[  717.751392][T11317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  717.751496][T11317] vhci_hcd vhci_hcd.0: Device attached
[  717.789671][T11323] vhci_hcd: connection closed
[  717.794703][ T8481] vhci_hcd vhci_hcd.1: stop threads
[  717.794740][ T8481] vhci_hcd vhci_hcd.1: release socket
[  717.794769][ T8481] vhci_hcd vhci_hcd.1: disconnect device
[  717.956453][   T31] audit: type=1400 audit(1788872941.197:2620): avc:  denied  { create } for  pid=11327 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  718.005881][   T31] audit: type=1400 audit(1788872941.237:2621): avc:  denied  { read write } for  pid=11327 comm="syz.4.1137" dev="sockfs" ino=26927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  718.049859][   T31] audit: type=1400 audit(1788872941.287:2622): avc:  denied  { create } for  pid=11326 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  718.090136][   T31] audit: type=1400 audit(1788872941.327:2623): avc:  denied  { bind } for  pid=11326 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  718.121101][   T31] audit: type=1400 audit(1788872941.357:2624): avc:  denied  { connect } for  pid=11327 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  718.641961][   T31] audit: type=1400 audit(1788872941.837:2625): avc:  denied  { create } for  pid=11326 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  718.663739][   T31] audit: type=1400 audit(1788872941.877:2626): avc:  denied  { setopt } for  pid=11326 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  719.173044][T11337] tmpfs: Bad value for 'mpol'
[  719.204460][T10500] Bluetooth: hci0: command tx timeout
[  719.280923][T11340] fuse: Bad value for 'fd'
[  721.225116][   T31] kauditd_printk_skb: 2 callbacks suppressed
[  721.225159][   T31] audit: type=1400 audit(1788872944.467:2629): avc:  denied  { mounton } for  pid=11335 comm="syz.5.1139" path="/proc/79/task" dev="proc" ino=27022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  721.286094][T10500] Bluetooth: hci0: command tx timeout
[  721.465017][   T31] audit: type=1400 audit(1788872944.707:2630): avc:  denied  { bind } for  pid=11335 comm="syz.5.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  721.465093][   T31] audit: type=1400 audit(1788872944.707:2631): avc:  denied  { node_bind } for  pid=11335 comm="syz.5.1139" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  721.949017][T11364] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  721.949036][T11364] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  721.949137][T11364] vhci_hcd vhci_hcd.0: Device attached
[  722.053068][T11277] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.053822][T11277] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.054819][T11277] bridge_slave_0: entered allmulticast mode
[  722.057185][T11277] bridge_slave_0: entered promiscuous mode
[  722.114687][T11277] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.114789][T11277] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.114970][T11277] bridge_slave_1: entered allmulticast mode
[  722.120330][T11277] bridge_slave_1: entered promiscuous mode
[  722.184085][   T10] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  722.269123][   T31] audit: type=1400 audit(1788872945.487:2632): avc:  denied  { write } for  pid=11363 comm="syz.4.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  722.383950][T11277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  722.425756][T11277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  722.561559][   T31] audit: type=1400 audit(1788872945.797:2633): avc:  denied  { shutdown } for  pid=11363 comm="syz.4.1145" lport=40705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  722.660135][T11277] team0: Port device team_slave_0 added
[  722.682601][T11277] team0: Port device team_slave_1 added
[  723.084521][T11277] batman_adv: batadv0: Adding interface: batadv_slave_0
[  723.091995][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  723.376753][T11277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  723.429186][T11277] batman_adv: batadv0: Adding interface: batadv_slave_1
[  723.429335][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  723.429368][T11277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  723.439404][T11376] ip6gretap1: entered allmulticast mode
[  724.054718][T11277] hsr_slave_0: entered promiscuous mode
[  724.078476][T11277] hsr_slave_1: entered promiscuous mode
[  724.087647][T11277] debugfs: 'hsr0' already exists in 'hsr'
[  724.094643][T11277] Cannot create hsr debugfs directory
[  724.689660][T11366] vhci_hcd: connection reset by peer
[  724.697248][ T8483] vhci_hcd vhci_hcd.4: stop threads
[  724.697282][ T8483] vhci_hcd vhci_hcd.4: release socket
[  724.697374][ T8483] vhci_hcd vhci_hcd.4: disconnect device
[  725.548900][   T31] audit: type=1400 audit(1788872948.787:2634): avc:  denied  { ioctl } for  pid=11380 comm="syz.1.1148" path="socket:[27188]" dev="sockfs" ino=27188 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  725.831939][   T31] audit: type=1400 audit(1788872949.067:2635): avc:  denied  { setattr } for  pid=11380 comm="syz.1.1148" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  727.363948][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  727.434110][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  727.636254][    T9] usb 2-1: Using ep0 maxpacket: 16
[  727.648023][    T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40
[  727.659499][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  727.659556][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  727.659583][    T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  727.707536][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.707571][    T9] usb 2-1: Product: syz
[  727.707598][    T9] usb 2-1: Manufacturer: syz
[  727.707608][    T9] usb 2-1: SerialNumber: syz
[  729.024477][   T31] audit: type=1400 audit(1788872952.247:2636): avc:  denied  { execute } for  pid=11404 comm="syz.5.1151" name="file2" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  729.060917][    T9] usb 2-1: USB disconnect, device number 24
[  730.621882][T11411] loop9: detected capacity change from 0 to 2640
[  730.622365][T11411] buffer_io_error: 11 callbacks suppressed
[  730.622404][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622437][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622466][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622494][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622521][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622575][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622610][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622637][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622658][T11411] ldm_validate_partition_table(): Disk read failed.
[  730.622700][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622728][T11411] Buffer I/O error on dev loop9, logical block 0, async page read
[  730.622765][T11411] Dev loop9: unable to read RDB block 0
[  730.622915][T11411]  loop9: unable to read partition table
[  730.623773][T11411] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  731.163022][T11277] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  731.286964][T11277] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  731.298460][T11277] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  731.382308][T11277] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  731.395886][T11277] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  731.441069][T11277] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  731.470732][T11277] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  731.511171][T11277] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  732.064261][T11277] 8021q: adding VLAN 0 to HW filter on device bond0
[  732.191258][T11277] 8021q: adding VLAN 0 to HW filter on device team0
[  732.278977][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.279067][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  732.325524][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.325633][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  734.582170][T11201] syz_tun (unregistering): left allmulticast mode
[  734.678687][T11450] overlay: Unknown parameter ':dev/cpu/#/msr'
[  734.969887][   T31] audit: type=1400 audit(1788872958.207:2637): avc:  denied  { read } for  pid=11446 comm="syz.5.1161" name="set_event" dev="tracefs" ino=4172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  736.000699][   T31] audit: type=1400 audit(1788872959.237:2638): avc:  denied  { name_connect } for  pid=11463 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  736.072685][   T31] audit: type=1400 audit(1788872959.307:2639): avc:  denied  { write } for  pid=11464 comm="syz.5.1165" name="c.1" dev="configfs" ino=13884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  736.072769][   T31] audit: type=1400 audit(1788872959.307:2640): avc:  denied  { add_name } for  pid=11464 comm="syz.5.1165" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  736.072811][   T31] audit: type=1400 audit(1788872959.307:2641): avc:  denied  { create } for  pid=11464 comm="syz.5.1165" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  736.072844][   T31] audit: type=1400 audit(1788872959.307:2642): avc:  denied  { write } for  pid=11464 comm="syz.5.1165" name="c.1" dev="configfs" ino=13884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  736.222001][   T31] audit: type=1400 audit(1788872959.457:2643): avc:  denied  { accept } for  pid=11463 comm="syz.4.1164" lport=48019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  736.300567][   T31] audit: type=1400 audit(1788872959.537:2644): avc:  denied  { lock } for  pid=11462 comm="syz.2.1166" path="socket:[27641]" dev="sockfs" ino=27641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  736.420526][ T8481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.576153][T11461] team0: Port device xfrm0 removed
[  736.585597][T11461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  736.617093][T11469] tipc: Enabled bearer <eth:team0>, priority 0
[  736.617450][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1165'.
[  736.648908][T11472] netlink: 75 bytes leftover after parsing attributes in process `syz.5.1165'.
[  736.670718][ T1323] tipc: Resetting bearer <eth:team0>
[  736.977679][ T8481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.146522][   T31] audit: type=1400 audit(1788872960.998:2645): avc:  denied  { setopt } for  pid=11478 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  740.489541][ T8481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.817221][T11277] 8021q: adding VLAN 0 to HW filter on device batadv0
[  744.534361][ T8481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.627840][   T31] audit: type=1400 audit(1788872971.873:2646): avc:  denied  { write } for  pid=11525 comm="syz.5.1178" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  748.627901][   T31] audit: type=1400 audit(1788872971.873:2647): avc:  denied  { open } for  pid=11525 comm="syz.5.1178" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  749.023535][T11528] block device autoloading is deprecated and will be removed.
[  749.988414][T11550] syz.4.1180: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  749.988525][T11550] CPU: 0 UID: 0 PID: 11550 Comm: syz.4.1180 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  749.988544][T11550] Tainted: [L]=SOFTLOCKUP
[  749.988548][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  749.988557][T11550] Call Trace:
[  749.988561][T11550]  <TASK>
[  749.988567][T11550]  dump_stack_lvl+0x100/0x190
[  749.988589][T11550]  warn_alloc.cold+0x9e/0xb2
[  749.988603][T11550]  ? __pfx_warn_alloc+0x10/0x10
[  749.988620][T11550]  ? __kasan_kmalloc+0xaa/0xb0
[  749.988632][T11550]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  749.988647][T11550]  ? xskq_create+0x52/0x290
[  749.988659][T11550]  ? do_sock_setsockopt+0xf3/0x1d0
[  749.988674][T11550]  ? do_syscall_64+0x123/0x790
[  749.988687][T11550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.988714][T11550]  ? xsk_setsockopt+0x56f/0xab0
[  749.988726][T11550]  __vmalloc_node_range_noprof+0x123b/0x1420
[  749.988750][T11550]  ? xsk_setsockopt+0x56f/0xab0
[  749.988765][T11550]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  749.988780][T11550]  ? kasan_save_track+0x14/0x30
[  749.988792][T11550]  ? __kasan_kmalloc+0xaa/0xb0
[  749.988805][T11550]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  749.988823][T11550]  ? xskq_create+0x52/0x290
[  749.988835][T11550]  ? xsk_setsockopt+0x56f/0xab0
[  749.988845][T11550]  xskq_create+0x18f/0x290
[  749.988857][T11550]  ? xsk_setsockopt+0x56f/0xab0
[  749.988869][T11550]  xsk_setsockopt+0x56f/0xab0
[  749.988882][T11550]  ? __pfx_xsk_setsockopt+0x10/0x10
[  749.988892][T11550]  ? find_held_lock+0x2b/0x80
[  749.988907][T11550]  ? __fget_files+0x215/0x3d0
[  749.988923][T11550]  ? selinux_socket_setsockopt+0x6a/0x80
[  749.988941][T11550]  ? __pfx_xsk_setsockopt+0x10/0x10
[  749.988953][T11550]  do_sock_setsockopt+0xf3/0x1d0
[  749.988969][T11550]  __sys_setsockopt+0x195/0x220
[  749.988983][T11550]  __x64_sys_setsockopt+0xbd/0x160
[  749.988995][T11550]  ? do_syscall_64+0xae/0x790
[  749.989009][T11550]  ? lockdep_hardirqs_on+0x7d/0x110
[  749.989023][T11550]  do_syscall_64+0x123/0x790
[  749.989038][T11550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.989049][T11550] RIP: 0033:0x7f788c99e159
[  749.989060][T11550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.989071][T11550] RSP: 002b:00007f788d7a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  749.989082][T11550] RAX: ffffffffffffffda RBX: 00007f788cc26180 RCX: 00007f788c99e159
[  749.989090][T11550] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d
[  749.989096][T11550] RBP: 00007f788ca3503b R08: 0000000000000004 R09: 0000000000000000
[  749.989103][T11550] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  749.989110][T11550] R13: 00007f788cc26218 R14: 00007f788cc26180 R15: 00007ffce9725848
[  749.989126][T11550]  </TASK>
[  750.006899][T11550] Mem-Info:
[  750.006931][T11550] active_anon:4814 inactive_anon:12749 isolated_anon:0
[  750.006931][T11550]  active_file:26796 inactive_file:39370 isolated_file:0
[  750.006931][T11550]  unevictable:2048 dirty:570 writeback:0
[  750.006931][T11550]  slab_reclaimable:7940 slab_unreclaimable:111003
[  750.006931][T11550]  mapped:32204 shmem:12839 pagetables:1160
[  750.006931][T11550]  sec_pagetables:0 bounce:0
[  750.006931][T11550]  kernel_misc_reclaimable:0
[  750.006931][T11550]  free:1230887 free_pcp:15508 free_cma:0
[  750.006985][T11550] Node 0 active_anon:19256kB inactive_anon:48948kB active_file:107168kB inactive_file:157296kB unevictable:6144kB isolated(anon):0kB isolated(file):0kB mapped:128816kB dirty:2280kB writeback:0kB shmem:47260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13408kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  750.007045][T11550] Node 1 active_anon:0kB inactive_anon:2048kB active_file:16kB inactive_file:184kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  750.007084][T11550] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  750.007123][T11550] lowmem_reserve[]: 0 2470 2470 2470 2470
[  750.007153][T11550] Node 0 DMA32 free:966116kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19256kB inactive_anon:48948kB active_file:107168kB inactive_file:157296kB unevictable:6144kB writepending:2280kB zspages:0kB present:3129332kB managed:2530196kB mlocked:0kB bounce:0kB free_pcp:62032kB local_pcp:62032kB free_cma:0kB
[  750.007215][T11550] lowmem_reserve[]: 0 0 0 0 0
[  750.007242][T11550] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  750.007281][T11550] lowmem_reserve[]: 0 0 0 0 0
[  750.007308][T11550] Node 1 Normal free:3942072kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:2048kB active_file:16kB inactive_file:184kB unevictable:2048kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  750.007359][T11550] lowmem_reserve[]: 0 0 0 0 0
[  750.007386][T11550] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  750.007477][T11550] Node 0 DMA32: 685*4kB (UME) 111*8kB (UM) 83*16kB (UME) 305*32kB (UME) 520*64kB (UME) 359*128kB (UME) 185*256kB (UME) 111*512kB (UME) 36*1024kB (M) 5*2048kB (UME) 176*4096kB (UM) = 966140kB
[  750.007616][T11550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  750.007718][T11550] Node 1 Normal: 2*4kB (U) 2*8kB (U) 10*16kB (U) 8*32kB (U) 4*64kB (U) 4*128kB (U) 2*256kB (UM) 2*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 960*4096kB (UM) = 3942072kB
[  750.140087][T11550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  750.140097][T11550] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  750.140106][T11550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  750.140123][T11550] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  750.140132][T11550] 78949 total pagecache pages
[  750.140137][T11550] 0 pages in swap cache
[  750.140150][T11550] Free swap  = 124996kB
[  750.140155][T11550] Total swap = 124996kB
[  750.140160][T11550] 2097051 pages RAM
[  750.140163][T11550] 0 pages HighMem/MovableOnly
[  750.140167][T11550] 432868 pages reserved
[  750.140170][T11550] 0 pages cma reserved
[  750.891383][T11552] IPVS: sh: FWM 3 0x00000003 - no destination available
[  751.034474][T11552] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00
[  751.034539][T11552] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  751.034567][T11552] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  751.034582][T11552] page_type: f5(slab)
[  751.034604][T11552] raw: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122
[  751.034627][T11552] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  751.034646][T11552] head: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122
[  751.034693][T11552] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  751.034706][T11552] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  751.034729][T11552] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  751.034738][T11552] page dumped because: unmovable page
[  751.034745][T11552] page_owner tracks the page as allocated
[  751.034761][T11552] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7001, tgid 7001 (dhcpcd-run-hook), ts 231325525057
[  751.034792][T11552]  post_alloc_hook+0xfd/0x120
[  751.034834][T11552]  get_page_from_freelist+0x110d/0x35d0
[  751.034863][T11552]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  751.034892][T11552]  new_slab+0xa9/0x6e0
[  751.034911][T11552]  refill_objects+0xe3/0x410
[  751.034936][T11552]  __pcs_replace_empty_main+0x35e/0x650
[  751.034975][T11552]  __kmalloc_noprof+0x67c/0x840
[  751.034997][T11552]  tomoyo_realpath_from_path+0xb6/0x690
[  751.035021][T11552]  tomoyo_check_open_permission+0x2af/0x3c0
[  751.035039][T11552]  tomoyo_file_open+0x6b/0x90
[  751.035063][T11552]  security_file_open+0xb5/0x1e0
[  751.035087][T11552]  do_dentry_open+0x588/0x14d0
[  751.035127][T11552]  vfs_open+0x82/0x3f0
[  751.035151][T11552]  path_openat+0x19fa/0x2440
[  751.035165][T11552]  do_file_open+0x20e/0x430
[  751.035189][T11552]  do_sys_openat2+0x10f/0x1e0
[  751.035204][T11552] page last free pid 4969 tgid 4969 ts 213393318477 stack trace:
[  751.035224][T11552]  __free_frozen_pages+0x79f/0x10f0
[  751.035261][T11552]  qlist_free_all+0x47/0xf0
[  751.035283][T11552]  kasan_quarantine_reduce+0x1a0/0x1f0
[  751.035296][T11552]  __kasan_slab_alloc+0x69/0x90
[  751.035319][T11552]  __kmalloc_cache_noprof+0x278/0x6d0
[  751.035345][T11552]  kernfs_fop_open+0x23d/0xd50
[  751.035358][T11552]  do_dentry_open+0x6ab/0x14d0
[  751.035379][T11552]  vfs_open+0x82/0x3f0
[  751.035420][T11552]  path_openat+0x19fa/0x2440
[  751.036273][T11552]  do_file_open+0x20e/0x430
[  751.036300][T11552]  do_sys_openat2+0x10f/0x1e0
[  751.036317][T11552]  __x64_sys_openat+0x12d/0x210
[  751.036343][T11552]  do_syscall_64+0x123/0x790
[  751.036371][T11552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.538675][ T8481] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.898286][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'.
[  752.043788][T11561] bridge_slave_0: left allmulticast mode
[  752.057841][T11561] bridge_slave_0: left promiscuous mode
[  752.067697][T11561] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.168292][T11561] bridge_slave_1: left allmulticast mode
[  752.168342][T11561] bridge_slave_1: left promiscuous mode
[  752.168531][T11561] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.272631][T11561] bond0: (slave bond_slave_0): Releasing backup interface
[  752.307004][T11561] bond0: (slave bond_slave_1): Releasing backup interface
[  752.409721][   T31] audit: type=1400 audit(1788872975.655:2648): avc:  denied  { connect } for  pid=11567 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  752.456663][   T31] audit: type=1400 audit(1788872975.705:2649): avc:  denied  { setopt } for  pid=11560 comm="syz.5.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  752.482140][   T31] audit: type=1400 audit(1788872975.725:2650): avc:  denied  { write } for  pid=11567 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  752.550042][T11561] team0: Port device team_slave_0 removed
[  752.568383][   T31] audit: type=1400 audit(1788872975.815:2651): avc:  denied  { write } for  pid=11546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  752.847333][T11561] team0: Port device team_slave_1 removed
[  752.912092][T11568] vcan0: tx drop: invalid sa for name 0x0102030405060708
[  753.942508][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  753.955045][T11561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  754.337522][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  754.337581][T11561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  754.606052][T11561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  754.645354][T11277] veth0_vlan: entered promiscuous mode
[  754.837945][T11564] team0: Mode changed to "loadbalance"
[  754.876518][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1183'.
[  754.894895][T11572] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=771 sclass=netlink_tcpdiag_socket pid=11572 comm=syz.4.1184
[  754.972281][   T31] audit: type=1400 audit(1788872978.136:2652): avc:  denied  { connect } for  pid=11570 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  754.972333][   T31] audit: type=1400 audit(1788872978.166:2653): avc:  denied  { setopt } for  pid=11570 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  754.972381][   T31] audit: type=1400 audit(1788872978.166:2654): avc:  denied  { write } for  pid=11570 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  755.168824][   T31] audit: type=1400 audit(1788872978.416:2655): avc:  denied  { write } for  pid=11579 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  755.218312][T11277] veth1_vlan: entered promiscuous mode
[  755.254712][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1183'.
[  755.429128][T11277] veth0_macvtap: entered promiscuous mode
[  755.467135][T11277] veth1_macvtap: entered promiscuous mode
[  755.532432][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1
[  755.625963][T11277] batman_adv: batadv0: Interface activated: batadv_slave_0
[  755.708540][T11277] batman_adv: batadv0: Interface activated: batadv_slave_1
[  755.784972][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.796500][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.810891][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.821786][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  758.510497][T11601] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1188'.
[  758.635452][ T8481] bridge_slave_1: left allmulticast mode
[  758.661581][ T8481] bridge_slave_1: left promiscuous mode
[  758.693565][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.930660][ T8481] bridge_slave_0: left allmulticast mode
[  758.960045][T11608] input: syz1 as /devices/virtual/input/input16
[  758.983887][ T8481] bridge_slave_0: left promiscuous mode
[  758.985855][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.044884][T11617] xt_hashlimit: max too large, truncated to 1048576
[  759.093151][ T8481] lo: left allmulticast mode
[  759.226589][   T31] audit: type=1400 audit(1788872982.478:2656): avc:  denied  { read } for  pid=4954 comm="acpid" name="event4" dev="devtmpfs" ino=3017 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  759.226661][   T31] audit: type=1400 audit(1788872982.478:2657): avc:  denied  { open } for  pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3017 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  759.226710][   T31] audit: type=1400 audit(1788872982.478:2658): avc:  denied  { ioctl } for  pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3017 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  759.336808][   T31] audit: type=1400 audit(1788872982.588:2659): avc:  denied  { append } for  pid=11599 comm="syz.1.1188" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  759.402445][T11622] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1188'.
[  760.137087][   T31] audit: type=1400 audit(1788872983.379:2660): avc:  denied  { write } for  pid=11605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  760.467024][   T31] audit: type=1400 audit(1788872983.709:2661): avc:  denied  { write } for  pid=11636 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  761.079080][ T8481] bond1 (unregistering): Released all slaves
[  761.489702][T11640] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  761.489760][T11640] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  761.723623][T11640] fuse: Bad value for 'fd'
[  761.882720][   T31] audit: type=1400 audit(1788872985.130:2662): avc:  denied  { open } for  pid=11643 comm="syz.5.1192" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  762.078946][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2
[  762.242292][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  762.391436][   T10] usb 6-1: Using ep0 maxpacket: 16
[  762.397394][   T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  762.415196][   T10] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  762.415234][   T10] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.415258][   T10] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  762.415280][   T10] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  762.415322][   T10] usb 6-1: config 7 interface 0 has no altsetting 0
[  762.415350][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.058976][   T10] hid (null): invalid report_size 1734701673
[  763.234237][   T10] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0005/input/input17
[  763.318741][ T8480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.328823][ T8480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.355526][   T31] audit: type=1400 audit(1788872986.600:2663): avc:  denied  { ioctl } for  pid=11643 comm="syz.5.1192" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  764.454924][   T31] audit: type=1400 audit(1788872987.681:2664): avc:  denied  { mounton } for  pid=11659 comm="syz.4.1196" path="/257/sys/devices/virtual/rnbd-client/ctl/map_device" dev="sysfs" ino=21048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1
[  764.972154][ T6729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.972187][ T6729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  765.185375][   T10] kye 0003:0458:5010.0005: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0
[  766.698766][   T31] audit: type=1400 audit(1788872989.952:2665): avc:  denied  { write } for  pid=11654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  767.110926][   T10] usb 6-1: USB disconnect, device number 2
[  768.795661][   T31] audit: type=1400 audit(1788872992.043:2666): avc:  denied  { write } for  pid=11687 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  769.486681][ T8481] hsr_slave_0: left promiscuous mode
[  769.512581][ T8481] hsr_slave_1: left promiscuous mode
[  770.870797][ T8481] veth1_macvtap: left promiscuous mode
[  770.888643][ T8481] veth0_macvtap: left promiscuous mode
[  770.908251][ T8481] veth1_vlan: left promiscuous mode
[  770.927454][ T8481] veth0_vlan: left promiscuous mode
[  771.890490][   T31] audit: type=1400 audit(1788872995.145:2667): avc:  denied  { connect } for  pid=11706 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  771.912869][ T5784] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  771.944433][T11709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  772.076257][ T5784] usb 7-1: Using ep0 maxpacket: 32
[  772.082738][ T5784] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  772.094777][ T5784] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.094845][ T5784] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  772.094872][ T5784] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  772.094895][ T5784] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  772.095588][ T5784] usb 7-1: config 0 interface 0 has no altsetting 0
[  772.095618][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.181309][ T5784] usb 7-1: config 0 descriptor??
[  772.422267][   T31] audit: type=1400 audit(1788872995.675:2668): avc:  denied  { read write } for  pid=11701 comm="syz.5.1206" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  772.422307][   T31] audit: type=1400 audit(1788872995.675:2669): avc:  denied  { open } for  pid=11701 comm="syz.5.1206" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  772.488267][ T5784] usbhid 7-1:0.0: can't add hid device: -71
[  772.488359][ T5784] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  772.516417][T11703] openvswitch: netlink: Invalid VLAN frame
[  772.523724][ T5784] usb 7-1: USB disconnect, device number 2
[  772.543730][   T31] audit: type=1400 audit(1788872995.795:2670): avc:  denied  { mounton } for  pid=11701 comm="syz.5.1206" path="/file0" dev="autofs" ino=28771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  772.577810][T11703] fuse: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615'
[  773.284910][ T5784] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  774.085376][ T5784] usb 7-1: Using ep0 maxpacket: 32
[  774.094816][ T5784] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  774.105823][ T5784] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.105880][ T5784] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  774.105903][ T5784] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  774.105918][ T5784] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.105934][ T5784] usb 7-1: config 0 interface 0 has no altsetting 0
[  774.105953][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.179983][T11715] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  774.180021][T11715] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  774.217197][ T5784] usb 7-1: config 0 descriptor??
[  774.309804][T11715] fuse: fd is not a fuse device
[  774.667628][T11705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=11705 comm=syz.6.1207
[  774.831812][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3
[  774.846971][T11711] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  774.847005][T11711] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  774.847042][T11711] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  774.854401][T11711] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  775.174983][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'.
[  775.197755][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1207'.
[  775.238175][ T5784] usbhid 7-1:0.0: can't add hid device: -71
[  775.238261][ T5784] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  775.270002][ T5784] usb 7-1: USB disconnect, device number 3
[  776.734593][   T31] audit: type=1400 audit(1788872999.987:2671): avc:  denied  { write } for  pid=11724 comm="syz.5.1211" name="subsystems" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  776.734638][   T31] audit: type=1400 audit(1788872999.987:2672): avc:  denied  { create } for  pid=11724 comm="syz.5.1211" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  776.784209][   T31] audit: type=1400 audit(1788873000.037:2673): avc:  denied  { write } for  pid=11724 comm="syz.5.1211" name="ports" dev="configfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  776.829651][   T31] audit: type=1400 audit(1788873000.087:2674): avc:  denied  { read } for  pid=11724 comm="syz.5.1211" name="addr_trtype" dev="configfs" ino=28843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  776.857712][   T31] audit: type=1400 audit(1788873000.117:2675): avc:  denied  { write } for  pid=11724 comm="syz.5.1211" name="subsystems" dev="configfs" ino=28833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  776.857767][   T31] audit: type=1400 audit(1788873000.117:2676): avc:  denied  { write } for  pid=11724 comm="syz.5.1211" name="subsystems" dev="configfs" ino=28833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  777.792309][T11744] No source specified
[  778.175335][ T8481] IPVS: stop unused estimator thread 0...
[  778.588773][   T31] audit: type=1400 audit(1788873001.848:2677): avc:  denied  { create } for  pid=11748 comm="syz.6.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  778.630245][   T31] audit: type=1400 audit(1788873001.888:2678): avc:  denied  { write } for  pid=11748 comm="syz.6.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  779.067676][T11758] usb3503 0-0008: unknown mode is requested
[  779.067704][T11758] usb3503 0-0008: usb3503_probe: probed in standby mode
[  779.070266][T11758] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08
[  779.757773][   T31] audit: type=1400 audit(1788873003.019:2679): avc:  denied  { write } for  pid=11728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  781.327727][   T31] audit: type=1400 audit(1788873004.579:2680): avc:  denied  { write } for  pid=11771 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  781.407513][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1221'.
[  781.467905][   T31] audit: type=1400 audit(1788873004.720:2681): avc:  denied  { create } for  pid=11775 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  781.507179][   T31] audit: type=1400 audit(1788873004.760:2682): avc:  denied  { read write } for  pid=11777 comm="syz.5.1222" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  781.507220][   T31] audit: type=1400 audit(1788873004.760:2683): avc:  denied  { open } for  pid=11777 comm="syz.5.1222" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  781.592911][   T31] audit: type=1400 audit(1788873004.850:2684): avc:  denied  { write } for  pid=11775 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  781.592950][   T31] audit: type=1400 audit(1788873004.850:2685): avc:  denied  { read } for  pid=11775 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  781.642636][   T31] audit: type=1400 audit(1788873004.900:2686): avc:  denied  { read write } for  pid=5602 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  782.871661][T11778] team0: Port device xfrm0 removed
[  782.872443][T11778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  782.947668][ T5784] libceph: connect (1)[c::]:6789 error -22
[  782.957143][ T5784] libceph: mon0 (1)[c::]:6789 connect error
[  782.975540][T11773] ceph: No mds server is up or the cluster is laggy
[  783.042257][T11782] team0: Mode changed to "loadbalance"
[  783.068814][T11780] overlayfs: failed to resolve './file0': -2
[  783.085335][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4
[  783.399875][ T5784] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  784.128639][ T5784] usb 7-1: Using ep0 maxpacket: 16
[  784.395553][   T31] kauditd_printk_skb: 21 callbacks suppressed
[  784.395577][   T31] audit: type=1400 audit(1788873007.651:2708): avc:  denied  { prog_load } for  pid=11786 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  784.431164][   T31] audit: type=1400 audit(1788873007.681:2709): avc:  denied  { bpf } for  pid=11786 comm="syz.1.1210" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  784.457189][   T31] audit: type=1400 audit(1788873007.721:2710): avc:  denied  { unmount } for  pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  784.553175][ T5784] usb 7-1: device descriptor read/all, error -71
[  784.665132][   T31] audit: type=1400 audit(1788873007.921:2711): avc:  denied  { read } for  pid=5264 comm="dhcpcd" name="n42" dev="tmpfs" ino=4847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  784.697535][   T31] audit: type=1400 audit(1788873007.951:2712): avc:  denied  { open } for  pid=5264 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=4847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  784.697575][   T31] audit: type=1400 audit(1788873007.951:2713): avc:  denied  { getattr } for  pid=5264 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=4847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  784.779520][   T31] audit: type=1400 audit(1788873008.041:2714): avc:  denied  { map_create } for  pid=11786 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  784.779558][   T31] audit: type=1400 audit(1788873008.041:2715): avc:  denied  { map_read map_write } for  pid=11786 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  784.875039][   T31] audit: type=1400 audit(1788873008.131:2716): avc:  denied  { perfmon } for  pid=11786 comm="syz.1.1210" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  784.875079][   T31] audit: type=1400 audit(1788873008.131:2717): avc:  denied  { prog_run } for  pid=11786 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  787.465998][T11803] XFS (loop5): SB validate failed with error -5.
[  788.884875][T11841] ªªªªªª: renamed from lo (while UP)
[  788.989318][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5
[  790.185246][   T31] kauditd_printk_skb: 49 callbacks suppressed
[  790.185273][   T31] audit: type=1400 audit(1788873013.444:2767): avc:  denied  { mounton } for  pid=11862 comm="syz.5.1237" path="/41/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  790.225659][   T31] audit: type=1400 audit(1788873013.484:2768): avc:  denied  { mount } for  pid=11862 comm="syz.5.1237" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  791.832052][T11877] sctp: [Deprecated]: syz.5.1237 (pid 11877) Use of struct sctp_assoc_value in delayed_ack socket option.
[  791.832052][T11877] Use struct sctp_sack_info instead
[  792.557075][T11876] sctp: [Deprecated]: syz.5.1237 (pid 11876) Use of struct sctp_assoc_value in delayed_ack socket option.
[  792.557075][T11876] Use struct sctp_sack_info instead
[  792.668960][T11873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11873 comm=syz.6.1239
[  793.131879][   T31] audit: type=1400 audit(1788873016.395:2769): avc:  denied  { create } for  pid=11884 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  793.188759][T11885] CUSE: info not properly terminated
[  793.197909][   T31] audit: type=1400 audit(1788873016.465:2770): avc:  denied  { bind } for  pid=11884 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  793.222608][   T31] audit: type=1400 audit(1788873016.485:2771): avc:  denied  { setopt } for  pid=11884 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  793.250525][   T31] audit: type=1400 audit(1788873016.515:2772): avc:  denied  { accept } for  pid=11884 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  793.276362][   T31] audit: type=1400 audit(1788873016.545:2773): avc:  denied  { mmap_zero } for  pid=11884 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  793.313315][   T31] audit: type=1400 audit(1788873016.575:2774): avc:  denied  { create } for  pid=11884 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  793.343769][   T31] audit: type=1400 audit(1788873016.605:2775): avc:  denied  { getopt } for  pid=11884 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  793.603385][   T31] audit: type=1400 audit(1788873016.866:2776): avc:  denied  { read write } for  pid=11886 comm="syz.1.1242" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  794.236686][T11891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  794.510191][T11891] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  794.714554][   T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  795.464222][   T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  795.638430][   T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  795.638459][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  795.638498][   T10] usb 6-1: config 0 has no interface number 0
[  795.638527][   T10] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  795.927844][   T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  795.927870][   T10] usb 6-1: Product: syz
[  795.927887][   T10] usb 6-1: SerialNumber: syz
[  795.948786][   T31] kauditd_printk_skb: 14 callbacks suppressed
[  795.948813][   T31] audit: type=1400 audit(1788873019.217:2791): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  795.988226][   T10] usb 6-1: config 0 descriptor??
[  796.077096][   T10] usbhid 6-1:0.8: couldn't find an input interrupt endpoint
[  797.408102][T11916] IPVS: sh: FWM 3 0x00000003 - no destination available
[  797.640049][T11903] LUN: removable file: (no medium)
[  798.275921][T11923] loop9: detected capacity change from 0 to 2640
[  798.276277][T11923] buffer_io_error: 11 callbacks suppressed
[  798.276289][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276311][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276350][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276368][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276386][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276417][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276441][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276458][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276497][T11923] ldm_validate_partition_table(): Disk read failed.
[  798.276514][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276533][T11923] Buffer I/O error on dev loop9, logical block 0, async page read
[  798.276559][T11923] Dev loop9: unable to read RDB block 0
[  798.276662][T11923]  loop9: unable to read partition table
[  798.276781][T11923] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  798.547743][   T31] audit: type=1400 audit(1788873020.908:2792): avc:  denied  { write } for  pid=11900 comm="syz.5.1244" name="functions" dev="configfs" ino=9653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  798.547785][   T31] audit: type=1400 audit(1788873020.908:2793): avc:  denied  { add_name } for  pid=11900 comm="syz.5.1244" name="mass_storage.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  798.547831][   T31] audit: type=1400 audit(1788873020.908:2794): avc:  denied  { create } for  pid=11900 comm="syz.5.1244" name="mass_storage.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  798.547855][   T31] audit: type=1400 audit(1788873021.508:2795): avc:  denied  { read } for  pid=11921 comm="syz.6.1247" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  798.547880][   T31] audit: type=1400 audit(1788873021.508:2796): avc:  denied  { open } for  pid=11921 comm="syz.6.1247" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  798.547906][   T31] audit: type=1400 audit(1788873021.548:2797): avc:  denied  { read write } for  pid=11921 comm="syz.6.1247" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  798.547931][   T31] audit: type=1400 audit(1788873021.548:2798): avc:  denied  { open } for  pid=11921 comm="syz.6.1247" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  798.750251][   T31] audit: type=1400 audit(1788873022.018:2799): avc:  denied  { read } for  pid=11900 comm="syz.5.1244" name="file" dev="configfs" ino=29458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  798.930327][ T5784] usb 6-1: USB disconnect, device number 3
[  799.037240][T11924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.470458][   T31] audit: type=1400 audit(1788873022.739:2800): avc:  denied  { create } for  pid=11941 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  799.775618][T11943] wg0 speed is unknown, defaulting to 1000
[  799.937438][ T5784] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  800.242517][T11957] Bluetooth: MGMT ver 1.23
[  800.255905][T11957] IPv6: sit1: Disabled Multicast RS
[  800.256597][T11957] sit1: entered allmulticast mode
[  800.526749][   T10] usb 1-1: USB disconnect, device number 16
[  800.536474][   T10] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  801.029719][   T31] kauditd_printk_skb: 9 callbacks suppressed
[  801.029755][   T31] audit: type=1400 audit(1788873024.289:2810): avc:  denied  { shutdown } for  pid=11963 comm="syz.6.1250" lport=57897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  801.645289][T11978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=11978 comm=syz.4.1255
[  801.976085][T11983] fuse: fd is not a fuse device
[  802.124540][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'.
[  802.566862][   T31] audit: type=1400 audit(1788873025.830:2811): avc:  denied  { write } for  pid=11971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  802.696662][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short
[  802.696706][ T5784] usb 2-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=ce.79
[  802.721385][ T5784] usb 2-1: unable to read config index 0 descriptor/start: -71
[  802.721523][ T5784] usb 2-1: can't read configurations, error -71
[  802.787335][   T31] audit: type=1400 audit(1788873026.050:2812): avc:  denied  { mount } for  pid=11997 comm="syz.2.1258" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  803.006730][   T31] audit: type=1400 audit(1788873026.270:2813): avc:  denied  { write } for  pid=12006 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  804.040364][   T31] audit: type=1400 audit(1788873027.311:2814): avc:  denied  { bind } for  pid=12012 comm="syz.5.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  804.704321][   T31] audit: type=1326 audit(1788873027.921:2815): auid=4294967295 uid=3305727 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.1.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd08d39e159 code=0x0
[  804.792489][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'.
[  804.990238][   T31] audit: type=1400 audit(1788873028.251:2816): avc:  denied  { read } for  pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  805.118079][   T31] audit: type=1400 audit(1788873028.381:2817): avc:  denied  { create } for  pid=12012 comm="syz.5.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  805.182029][   T31] audit: type=1400 audit(1788873028.431:2818): avc:  denied  { getopt } for  pid=12012 comm="syz.5.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  805.304141][   T31] audit: type=1400 audit(1788873028.571:2819): avc:  denied  { listen } for  pid=12012 comm="syz.5.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  807.053804][   T31] kauditd_printk_skb: 2 callbacks suppressed
[  807.060574][   T31] audit: type=1400 audit(1788873030.312:2822): avc:  denied  { write } for  pid=12023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  808.158351][T12045] IPVS: sh: FWM 3 0x00000003 - no destination available
[  808.356605][   T31] audit: type=1400 audit(1788873031.623:2823): avc:  denied  { write } for  pid=12047 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  808.520342][   T31] audit: type=1400 audit(1788873031.793:2824): avc:  denied  { execute } for  pid=12051 comm="syz.5.1273" path="/dev/dsp" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  809.161699][T12055] loop9: detected capacity change from 0 to 2640
[  809.161987][T12055] buffer_io_error: 11 callbacks suppressed
[  809.162005][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162028][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162046][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162064][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162081][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162108][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162132][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162150][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162160][T12055] ldm_validate_partition_table(): Disk read failed.
[  809.162177][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162195][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  809.162222][T12055] Dev loop9: unable to read RDB block 0
[  809.162310][T12055]  loop9: unable to read partition table
[  809.162411][T12055] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  809.778456][   T31] audit: type=1400 audit(1788873032.984:2825): avc:  denied  { ioctl } for  pid=12052 comm="syz.6.1263" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  810.777637][   T31] audit: type=1400 audit(1788873034.044:2826): avc:  denied  { watch } for  pid=12051 comm="syz.5.1273" path="/47/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  811.643899][T12068] loop9: detected capacity change from 0 to 2640
[  811.644238][T12068] ldm_validate_partition_table(): Disk read failed.
[  811.644287][T12068] Dev loop9: unable to read RDB block 0
[  811.644385][T12068]  loop9: unable to read partition table
[  811.644483][T12068] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  812.251133][   T31] audit: type=1326 audit(1788873035.525:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.283463][   T31] audit: type=1326 audit(1788873035.555:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.337381][   T31] audit: type=1326 audit(1788873035.615:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.337423][   T31] audit: type=1326 audit(1788873035.615:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.337454][   T31] audit: type=1326 audit(1788873035.615:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.463004][   T31] audit: type=1326 audit(1788873035.725:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.463049][   T31] audit: type=1326 audit(1788873035.725:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.463081][   T31] audit: type=1326 audit(1788873035.725:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.463332][   T31] audit: type=1326 audit(1788873035.735:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.463360][   T31] audit: type=1326 audit(1788873035.735:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.5.1277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca039e159 code=0x7ffc0000
[  812.813565][T12084] Line length is too long: Should be less than 4094
[  815.260999][T12103] loop9: detected capacity change from 0 to 2640
[  815.261272][T12103] buffer_io_error: 32 callbacks suppressed
[  815.261289][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261310][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261328][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261347][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261373][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261399][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261423][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261440][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261451][T12103] ldm_validate_partition_table(): Disk read failed.
[  815.261467][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261485][T12103] Buffer I/O error on dev loop9, logical block 0, async page read
[  815.261511][T12103] Dev loop9: unable to read RDB block 0
[  815.261598][T12103]  loop9: unable to read partition table
[  815.261695][T12103] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  816.368959][T12109] loop9: detected capacity change from 0 to 2640
[  816.369310][T12109] ldm_validate_partition_table(): Disk read failed.
[  816.369361][T12109] Dev loop9: unable to read RDB block 0
[  816.369442][T12109]  loop9: unable to read partition table
[  816.369540][T12109] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  816.931844][T12114] IPVS: sh: FWM 3 0x00000003 - no destination available
[  818.180478][   T31] kauditd_printk_skb: 48 callbacks suppressed
[  818.180507][   T31] audit: type=1400 audit(1788873041.458:2885): avc:  denied  { write } for  pid=12106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  818.541132][   T31] audit: type=1400 audit(1788873041.818:2886): avc:  denied  { write } for  pid=12128 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  818.971292][T12132] netlink: 'syz.6.1281': attribute type 1 has an invalid length.
[  818.996352][   T31] audit: type=1400 audit(1788873042.278:2887): avc:  denied  { setopt } for  pid=12131 comm="syz.6.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  820.285538][   T31] audit: type=1400 audit(1788873043.559:2888): avc:  denied  { read } for  pid=12156 comm="syz.1.1287" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  820.313544][   T31] audit: type=1400 audit(1788873043.589:2889): avc:  denied  { open } for  pid=12156 comm="syz.1.1287" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  820.353912][   T31] audit: type=1400 audit(1788873043.629:2890): avc:  denied  { mount } for  pid=12137 comm="syz.5.1282" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  820.449067][T12144] FAULT_INJECTION: forcing a failure.
[  820.449067][T12144] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  820.449111][T12144] CPU: 0 UID: 0 PID: 12144 Comm: syz.5.1282 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  820.449129][T12144] Tainted: [L]=SOFTLOCKUP
[  820.449134][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  820.449141][T12144] Call Trace:
[  820.449146][T12144]  <TASK>
[  820.449151][T12144]  dump_stack_lvl+0x100/0x190
[  820.449172][T12144]  should_fail_ex.cold+0x5/0xa
[  820.449190][T12144]  _copy_to_user+0x32/0xd0
[  820.449208][T12144]  copy_siginfo_to_user+0x27/0xc0
[  820.449223][T12144]  x64_setup_rt_frame+0xa03/0xce0
[  820.449243][T12144]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  820.449262][T12144]  ? putname+0xb6/0x110
[  820.449278][T12144]  arch_do_signal_or_restart+0x5ee/0x7e0
[  820.449295][T12144]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  820.449315][T12144]  ? __x64_sys_openat+0x12d/0x210
[  820.449333][T12144]  exit_to_user_mode_loop+0x139/0x700
[  820.449347][T12144]  ? rcu_is_watching+0x13/0xc0
[  820.449363][T12144]  do_syscall_64+0x661/0x790
[  820.449379][T12144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.449391][T12144] RIP: 0033:0x7f7ca035e98e
[  820.449400][T12144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  820.449411][T12144] RSP: 002b:00007f7ca1330ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  820.449423][T12144] RAX: 0000000000000006 RBX: 00007f7ca13316c0 RCX: 00007f7ca035e98e
[  820.449430][T12144] RDX: 0000000000000002 RSI: 00007f7ca1330f90 RDI: ffffffffffffff9c
[  820.449438][T12144] RBP: 00007f7ca043503b R08: 0000000000000000 R09: 0000000000000000
[  820.449444][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  820.449451][T12144] R13: 00007f7ca0626128 R14: 00007f7ca0626090 R15: 00007ffe701fe2f8
[  820.449466][T12144]  </TASK>
[  820.477608][T12162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=12162 comm=syz.1.1287
[  820.750028][   T31] audit: type=1400 audit(1788873044.019:2891): avc:  denied  { write } for  pid=12133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  820.803211][   T31] audit: type=1400 audit(1788873044.079:2892): avc:  denied  { bind } for  pid=12151 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  820.847114][   T31] audit: type=1400 audit(1788873044.119:2893): avc:  denied  { ioctl } for  pid=12156 comm="syz.1.1287" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  820.915120][   T31] audit: type=1400 audit(1788873044.189:2894): avc:  denied  { read write } for  pid=12137 comm="syz.5.1282" name="sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  823.098801][T12182] siw: device registration error -23
[  823.132986][T12182] smc: removing ib device syz2
[  823.167049][T12182] smbdirect: ib_dev[syz2] removed
[  823.841179][T12182] ------------[ cut here ]------------
[  823.841189][T12182] !xa_empty(&pool->xa)
[  823.841198][T12182] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.1.1301/12182
[  823.863131][T12182] Modules linked in:
[  823.867008][T12182] CPU: 0 UID: 0 PID: 12182 Comm: syz.1.1301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  823.878450][T12182] Tainted: [L]=SOFTLOCKUP
[  823.883317][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  823.894662][T12182] RIP: 0010:rxe_pool_cleanup+0x46/0x60
[  823.901040][T12182] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 e6 56 18 f9 5b c3 cc cc cc cc e8 db 56 18 f9 90 <0f> 0b 90 e8 d2 56 18 f9 5b c3 cc cc cc cc e8 17 92 8b f9 eb d0 0f
[  823.921225][T12182] RSP: 0018:ffffc90004787190 EFLAGS: 00010246
[  823.927292][T12182] RAX: 0000000000080000 RBX: ffff8880507b13d8 RCX: ffffc90005261000
[  823.935792][T12182] RDX: 0000000000080000 RSI: ffffffff88f3ba35 RDI: ffff8880507b1458
[  823.944490][T12182] RBP: ffffffff88f211d0 R08: 0000000000000005 R09: 0000000000000001
[  823.952990][T12182] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880507b06d0
[  823.961463][T12182] R13: ffff8880507affe0 R14: ffff8880507affe0 R15: ffff8880507b1138
[  823.969898][T12182] FS:  00007fd08e1d76c0(0000) GS:ffff888123b5d000(0000) knlGS:0000000000000000
[  823.978805][T12182] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  823.987254][T12182] CR2: 000000110c3409ba CR3: 00000000475c4000 CR4: 00000000003526f0
[  823.995265][T12182] Call Trace:
[  823.998527][T12182]  <TASK>
[  824.002323][T12182]  rxe_dealloc+0x25/0xc0
[  824.006555][T12182]  ib_dealloc_device+0x49/0x230
[  824.011913][T12182]  __ib_unregister_device+0x396/0x480
[  824.017261][T12182]  ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10
[  824.023600][T12182]  ib_unregister_device_and_put+0x5a/0x80
[  824.029846][T12182]  nldev_dellink+0x308/0x440
[  824.034437][T12182]  ? __pfx_nldev_dellink+0x10/0x10
[  824.040415][T12182]  ? rcu_is_watching+0x13/0xc0
[  824.045163][T12182]  ? cap_capable+0x107/0x430
[  824.050317][T12182]  ? bpf_lsm_capable+0x9/0x10
[  824.054974][T12182]  ? security_capable+0x80/0x260
[  824.060440][T12182]  ? ns_capable+0xd2/0xf0
[  824.064746][T12182]  ? __pfx_nldev_dellink+0x10/0x10
[  824.070373][T12182]  rdma_nl_rcv_msg+0x392/0x6f0
[  824.075130][T12182]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  824.080933][T12182]  ? __lock_acquire+0x5c0/0x1f40
[  824.085876][T12182]  ? __netlink_lookup+0xa9/0x900
[  824.091363][T12182]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410
[  824.097776][T12182]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  824.105619][T12182]  ? netlink_deliver_tap+0x1ae/0xcc0
[  824.111461][T12182]  netlink_unicast+0x585/0x850
[  824.116205][T12182]  ? __pfx_netlink_unicast+0x10/0x10
[  824.122111][T12182]  ? __pfx_sock_has_perm+0x10/0x10
[  824.127210][T12182]  netlink_sendmsg+0x8b0/0xda0
[  824.132488][T12182]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.137762][T12182]  ? selinux_socket_sendmsg+0x198/0x2f0
[  824.143849][T12182]  ____sys_sendmsg+0xa4d/0xbe0
[  824.148597][T12182]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.154383][T12182]  ? __pfx_____sys_sendmsg+0x10/0x10
[  824.160148][T12182]  ___sys_sendmsg+0x190/0x1e0
[  824.164807][T12182]  ? __pfx____sys_sendmsg+0x10/0x10
[  824.170027][T12182]  ? futex_wait+0x11e/0x370
[  824.174517][T12182]  ? find_held_lock+0x2b/0x80
[  824.179218][T12182]  __sys_sendmsg+0x160/0x210
[  824.183782][T12182]  ? __pfx___sys_sendmsg+0x10/0x10
[  824.189409][T12182]  do_syscall_64+0x123/0x790
[  824.193981][T12182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.200429][T12182] RIP: 0033:0x7fd08d39e159
[  824.204820][T12182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.225223][T12182] RSP: 002b:00007fd08e1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  824.234284][T12182] RAX: ffffffffffffffda RBX: 00007fd08d625fa0 RCX: 00007fd08d39e159
[  824.242769][T12182] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000
[  824.251254][T12182] RBP: 00007fd08d43503b R08: 0000000000000000 R09: 0000000000000000
[  824.259753][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  824.267719][T12182] R13: 00007fd08d626038 R14: 00007fd08d625fa0 R15: 00007ffe26bb1728
[  824.276215][T12182]  </TASK>
[  824.280070][T12182] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  824.287354][T12182] CPU: 0 UID: 0 PID: 12182 Comm: syz.1.1301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  824.298268][T12182] Tainted: [L]=SOFTLOCKUP
[  824.302567][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  824.312594][T12182] Call Trace:
[  824.315852][T12182]  <TASK>
[  824.318759][T12182]  dump_stack_lvl+0x100/0x190
[  824.323421][T12182]  vpanic+0x553/0x970
[  824.327375][T12182]  ? __pfx_vpanic+0x10/0x10
[  824.331856][T12182]  panic+0xd1/0xe0
[  824.335547][T12182]  ? __pfx_panic+0x10/0x10
[  824.339944][T12182]  check_panic_on_warn.cold+0x19/0x34
[  824.345289][T12182]  ? rxe_pool_cleanup+0x46/0x60
[  824.350113][T12182]  __warn.cold+0x191/0x318
[  824.354508][T12182]  __report_bug+0x30f/0x440
[  824.358983][T12182]  ? rxe_pool_cleanup+0x46/0x60
[  824.363807][T12182]  ? __pfx___report_bug+0x10/0x10
[  824.368804][T12182]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  824.374582][T12182]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  824.380364][T12182]  ? __flush_workqueue+0x426/0x1200
[  824.385555][T12182]  ? rxe_pool_cleanup+0x46/0x60
[  824.390381][T12182]  report_bug+0xb3/0x220
[  824.394599][T12182]  ? rxe_pool_cleanup+0x46/0x60
[  824.399421][T12182]  handle_bug+0x16a/0x2a0
[  824.403725][T12182]  exc_invalid_op+0x17/0x50
[  824.408207][T12182]  asm_exc_invalid_op+0x1a/0x20
[  824.413028][T12182] RIP: 0010:rxe_pool_cleanup+0x46/0x60
[  824.418462][T12182] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 e6 56 18 f9 5b c3 cc cc cc cc e8 db 56 18 f9 90 <0f> 0b 90 e8 d2 56 18 f9 5b c3 cc cc cc cc e8 17 92 8b f9 eb d0 0f
[  824.438043][T12182] RSP: 0018:ffffc90004787190 EFLAGS: 00010246
[  824.444096][T12182] RAX: 0000000000080000 RBX: ffff8880507b13d8 RCX: ffffc90005261000
[  824.452040][T12182] RDX: 0000000000080000 RSI: ffffffff88f3ba35 RDI: ffff8880507b1458
[  824.459980][T12182] RBP: ffffffff88f211d0 R08: 0000000000000005 R09: 0000000000000001
[  824.467923][T12182] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880507b06d0
[  824.475865][T12182] R13: ffff8880507affe0 R14: ffff8880507affe0 R15: ffff8880507b1138
[  824.483816][T12182]  ? __pfx_rxe_dealloc+0x10/0x10
[  824.488732][T12182]  ? rxe_pool_cleanup+0x45/0x60
[  824.493563][T12182]  rxe_dealloc+0x25/0xc0
[  824.497777][T12182]  ib_dealloc_device+0x49/0x230
[  824.502599][T12182]  __ib_unregister_device+0x396/0x480
[  824.507942][T12182]  ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10
[  824.513728][T12182]  ib_unregister_device_and_put+0x5a/0x80
[  824.519422][T12182]  nldev_dellink+0x308/0x440
[  824.523992][T12182]  ? __pfx_nldev_dellink+0x10/0x10
[  824.529123][T12182]  ? rcu_is_watching+0x13/0xc0
[  824.533865][T12182]  ? cap_capable+0x107/0x430
[  824.538438][T12182]  ? bpf_lsm_capable+0x9/0x10
[  824.543095][T12182]  ? security_capable+0x80/0x260
[  824.548008][T12182]  ? ns_capable+0xd2/0xf0
[  824.552311][T12182]  ? __pfx_nldev_dellink+0x10/0x10
[  824.557400][T12182]  rdma_nl_rcv_msg+0x392/0x6f0
[  824.562145][T12182]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  824.567428][T12182]  ? __lock_acquire+0x5c0/0x1f40
[  824.572342][T12182]  ? __netlink_lookup+0xa9/0x900
[  824.577258][T12182]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410
[  824.583653][T12182]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  824.590571][T12182]  ? netlink_deliver_tap+0x1ae/0xcc0
[  824.595837][T12182]  netlink_unicast+0x585/0x850
[  824.600577][T12182]  ? __pfx_netlink_unicast+0x10/0x10
[  824.605835][T12182]  ? __pfx_sock_has_perm+0x10/0x10
[  824.610942][T12182]  netlink_sendmsg+0x8b0/0xda0
[  824.615682][T12182]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.620938][T12182]  ? selinux_socket_sendmsg+0x198/0x2f0
[  824.626475][T12182]  ____sys_sendmsg+0xa4d/0xbe0
[  824.631213][T12182]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.636471][T12182]  ? __pfx_____sys_sendmsg+0x10/0x10
[  824.641741][T12182]  ___sys_sendmsg+0x190/0x1e0
[  824.646396][T12182]  ? __pfx____sys_sendmsg+0x10/0x10
[  824.651575][T12182]  ? futex_wait+0x11e/0x370
[  824.656064][T12182]  ? find_held_lock+0x2b/0x80
[  824.660750][T12182]  __sys_sendmsg+0x160/0x210
[  824.665353][T12182]  ? __pfx___sys_sendmsg+0x10/0x10
[  824.670460][T12182]  do_syscall_64+0x123/0x790
[  824.675050][T12182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.680931][T12182] RIP: 0033:0x7fd08d39e159
[  824.685334][T12182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.704926][T12182] RSP: 002b:00007fd08e1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  824.713319][T12182] RAX: ffffffffffffffda RBX: 00007fd08d625fa0 RCX: 00007fd08d39e159
[  824.721351][T12182] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000
[  824.729295][T12182] RBP: 00007fd08d43503b R08: 0000000000000000 R09: 0000000000000000
[  824.737239][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  824.745200][T12182] R13: 00007fd08d626038 R14: 00007fd08d625fa0 R15: 00007ffe26bb1728
[  824.753156][T12182]  </TASK>
[  824.756237][T12182] Kernel Offset: disabled
[  824.760540][T12182] Rebooting in 86400 seconds..